- macro: Some Cloudtrail Macro
  condition: aws.user=bob
  source: aws_cloudtrail