Change log for AWS_LAMBDA_FUNCTION

Date	Changes
2025-05-26	Enhancement - event.idm.read_only_udm.additional.fields: Newly mapped `Activity_id` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.target.resource.name: Newly mapped `Activity_name` log field with `event.idm.read_only_udm.target.resource.name` UDM field. - event.idm.read_only_udm.principal.administrative_domain: Newly mapped `Actor.Invoked_by` log field with `event.idm.read_only_udm.principal.administrative_domain` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Actor.User.Type` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.metadata.product_event_type: Newly mapped `Api.Operation` log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field. - event.idm.read_only_udm.metadata.product_log_id: Newly mapped `Api.Request.Uid` log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `functionName` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `sourceArn` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `logType` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `contentType` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `sourceAccount` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.target.application: Newly mapped `Api.Service.Name` log field with `event.idm.read_only_udm.target.application` UDM field. - event.idm.read_only_udm.security_result.category_details: Newly mapped `Category_name` log field with `event.idm.read_only_udm.security_result.category_details` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Class_name` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Category_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Class_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Metadata.Event_code` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Feature.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Vendor_name` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Version` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Profiles.Array` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Type` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Type_id` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Value` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Array.Owner.Account.Uid` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Array.Type` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Uid` log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Metadata.Uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.metadata.product_version: Newly mapped `Metadata.Version` log field with `event.idm.read_only_udm.metadata.product_version` UDM field. - event.idm.read_only_udm.principal.resource.attribute.cloud.environment: Newly mapped `Cloud.Provider` log field with `event.idm.read_only_udm.principal.resource.attribute.cloud.environment` UDM field. - event.idm.read_only_udm.principal.resource.attribute.cloud.availability_zone: Newly mapped `Cloud.Region` log field with `event.idm.read_only_udm.principal.resource.attribute.cloud.availability_zone` UDM field. - event.idm.read_only_udm.network.http.user_agent: Newly mapped `Http_request.User_agent` log field with `event.idm.read_only_udm.network.http.user_agent` UDM field. - event.idm.read_only_udm.security_result.severity: Newly mapped `Severity` log field with `event.idm.read_only_udm.security_result.severity` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Severity_id` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.principal.hostname: Newly mapped `Src_endpoint.Domain` log field with `event.idm.read_only_udm.principal.hostname` and `event.idm.read_only_udm.principal.asset.hostname` UDM field. - event.idm.read_only_udm.security_result.action_details: Newly mapped `Status` log field with `event.idm.read_only_udm.security_result.action_details` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Type_name` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Type_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped `Time` log field with `event.idm.read_only_udm.metadata.collected_timestamp` UDM field. - event.idm.read_only_udm.principal.user.userid: Newly mapped `Api.Service.Name` log field with `event.idm.read_only_udm.principal.user.userid` UDM field.
2025-02-19	Enhancement - Newly created parser.

Date

Changes

2025-05-26

Enhancement
- event.idm.read_only_udm.additional.fields: Newly mapped `Activity_id` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.target.resource.name: Newly mapped `Activity_name` log field with `event.idm.read_only_udm.target.resource.name` UDM field.
- event.idm.read_only_udm.principal.administrative_domain: Newly mapped `Actor.Invoked_by` log field with `event.idm.read_only_udm.principal.administrative_domain` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Actor.User.Type` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.metadata.product_event_type: Newly mapped `Api.Operation` log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field.
- event.idm.read_only_udm.metadata.product_log_id: Newly mapped `Api.Request.Uid` log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `functionName` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `sourceArn` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `logType` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `contentType` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `sourceAccount` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.target.application: Newly mapped `Api.Service.Name` log field with `event.idm.read_only_udm.target.application` UDM field.
- event.idm.read_only_udm.security_result.category_details: Newly mapped `Category_name` log field with `event.idm.read_only_udm.security_result.category_details` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Class_name` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Category_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Class_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Metadata.Event_code` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Feature.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Vendor_name` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Product.Version` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Metadata.Profiles.Array` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Name` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Type` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Type_id` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Observables.Array.Value` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Array.Owner.Account.Uid` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Array.Type` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `Resources.Uid` log field with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Metadata.Uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.metadata.product_version: Newly mapped `Metadata.Version` log field with `event.idm.read_only_udm.metadata.product_version` UDM field.
- event.idm.read_only_udm.principal.resource.attribute.cloud.environment: Newly mapped `Cloud.Provider` log field with `event.idm.read_only_udm.principal.resource.attribute.cloud.environment` UDM field.
- event.idm.read_only_udm.principal.resource.attribute.cloud.availability_zone: Newly mapped `Cloud.Region` log field with `event.idm.read_only_udm.principal.resource.attribute.cloud.availability_zone` UDM field.
- event.idm.read_only_udm.network.http.user_agent: Newly mapped `Http_request.User_agent` log field with `event.idm.read_only_udm.network.http.user_agent` UDM field.
- event.idm.read_only_udm.security_result.severity: Newly mapped `Severity` log field with `event.idm.read_only_udm.security_result.severity` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Severity_id` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.principal.hostname: Newly mapped `Src_endpoint.Domain` log field with `event.idm.read_only_udm.principal.hostname` and `event.idm.read_only_udm.principal.asset.hostname` UDM field.
- event.idm.read_only_udm.security_result.action_details: Newly mapped `Status` log field with `event.idm.read_only_udm.security_result.action_details` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Type_name` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped `Type_uid` log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped `Time` log field with `event.idm.read_only_udm.metadata.collected_timestamp` UDM field.
- event.idm.read_only_udm.principal.user.userid: Newly mapped `Api.Service.Name` log field with `event.idm.read_only_udm.principal.user.userid` UDM field.

2025-02-19

Enhancement
- Newly created parser.