[idunno246]

The assumerole api has a session name field which is arbitrary text that's included in cloud trail. Hologram sets this to the users name/email address from ldap

[copumpkin]

Yeah, all API actions will show up as being from ARN "arn:aws:sts::<account-id>:assumed-role/<hologram role>/<ldap username>"