AWS account name and account alias

[kaiyan-sheng]

In my AWS account overview page, I see two different account names: elastic-beats and [email protected].

elastic-beats is actually the account alias:

kaiyansheng@KaiyanMacBookPro:~$ aws iam list-account-aliases
{
    "AccountAliases": [
        "elastic-beats"
    ]
}

[email protected] is the user name part of the ARN:

kaiyansheng@KaiyanMacBookPro:~$ aws sts get-caller-identity
{
    "Account": "12345", 
    "UserId": "xxxxx", 
    "Arn": "arn:aws:iam::12345:user/[email protected]"
}

Currently in aws module, we are collecting account alias name to be the cloud.account.name. Should we create a new field to collect the user name as well?

[elasticmachine]

Pinging @elastic/integrations-platforms (Team:Platforms)

[kaiyan-sheng]

Right now, when account alias is not given, cloud.account.name should be filled with account id instead to make sure it is not empty for aws dashboard filter: #20736

cc @aschifman Thanks for finding this issue.

[kaiyan-sheng]

I think this issue can be closed for now with #20736.
cloud.account.name will be filled with accountID if account alias doesn't exist.