{
    "eventVersion": "1.08",
    "userIdentity": {
        "type": "AssumedRole",
        "principalId": "XXYYZZ:XXYYZZ",
        "arn": "arn:aws-us-gov:sts::XXYYZZ:assumed-role/Admin/XXYYZZ",
        "accountId": "XXYYZZ",
        "accessKeyId": "XXYYZZ",
        "sessionContext": {
            "sessionIssuer": {
                "type": "Role",
                "principalId": "XXYYZZ",
                "arn": "arn:aws-us-gov:iam::XXYYZZ:role/Admin",
                "accountId": "XXYYZZ",
                "userName": "Admin"
            },
            "webIdFederationData": {},
            "attributes": {
                "creationDate": "2021-10-07T16:11:27Z",
                "mfaAuthenticated": "false"
            }
        },
        "invokedBy": "cloudformation.amazonaws.com"
    },
    "eventTime": "2021-10-07T17:00:07Z",
    "eventSource": "iam.amazonaws.com",
    "eventName": "PutRolePolicy",
    "awsRegion": "us-gov-west-1",
    "sourceIPAddress": "cloudformation.amazonaws.com",
    "userAgent": "cloudformation.amazonaws.com",
    "errorCode": "MalformedPolicyDocumentException",
    "errorMessage": "Partition \"aws\" is not valid for resource \"arn:aws:s3:::aws-ssm-us-gov-west-1/*\".",
    "requestParameters": {
        "roleName": "AD-RDGWStack-1CV663R314CCQ-RDGWHostRole-1A0SVGKYZFCB6",
        "policyName": "ssm-custom-s3-policy",
        "policyDocument": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"s3:GetObject\"],\"Resource\":[\"arn:aws:s3:::aws-ssm-us-gov-west-1/*\",\"arn:aws:s3:::aws-windows-downloads-us-gov-west-1/*\",\"arn:aws:s3:::amazon-ssm-us-gov-west-1/*\",\"arn:aws:s3:::amazon-ssm-packages-us-gov-west-1/*\",\"arn:aws:s3:::us-gov-west-1-birdwatcher-prod/*\",\"arn:aws:s3:::patch-baseline-snapshot-us-gov-west-1/*\"],\"Effect\":\"Allow\"}]}"
    },
    "responseElements": null,
    "requestID": "3a851b44-a8b9-4cbf-8c08-4e8f93d7ce4e",
    "eventID": "d6c1d478-ba91-4b8b-b64e-87fed29817eb",
    "readOnly": false,
    "eventType": "AwsApiCall",
    "managementEvent": true,
    "recipientAccountId": "XXYYZZ",
    "eventCategory": "Management",
    "sessionCredentialFromConsole": "true"
}