I created an event rule in cloud watch with input transformation look this In Input Transformer. {"request":"$.detail.requestParameters","sourceip"