OCSF Schema format supprot

[EreminAnton]

Alexey's thoughts: Identity & Access Management -> User Access Management [3005] User Access Management events report management updates to a user’s privileges. :bulb: Maybe it’s worth writing SSO Elevator logs in this format? This way we may get into Security Lake partners / Temporarily elevated access partners Temporary elevated access capabilities assessed for AWS partner validation

How AWS minimal reference implementation for temporary elevated access:

logs requests gets accKey, SecKey, Session token