feat(cloudtrail): add AWS SSM related request data to extracted fields

Author: Zaulao

plugins/cloudtrail/README.md

@@ -44,6 +44,9 @@ Here is the current set of supported fields:
 | `ct.request.host`                        | `string` | None | the host included in the request                                                                                                                         |
 | `ct.request.name`                        | `string` | None | the name of the entity being acted on in the request.                                                                                                    |
 | `ct.request.policy`                      | `string` | None | the policy included in the request                                                                                                                       |
+| `ct.request.reason`                      | `string` | None | the reason included in the request.                                                                                                                      |
+| `ct.request.target`                      | `string` | None | the target included in the request.                                                                                                                      |
+| `ct.request.documentName`                | `string` | None | the documentName included in the request.                                                                                                                    |
 | `ct.request.serialnumber`                | `string` | None | the serial number provided in the request.                                                                                                               |
 | `ct.request.servicename`                 | `string` | None | the service name provided in the request.                                                                                                                |
 | `ct.request.subnetid`                    | `string` | None | the subnet ID provided in the request.                                                                                                                   |

plugins/cloudtrail/pkg/cloudtrail/extract.go

@@ -54,6 +54,9 @@ var supportedFields = []sdk.FieldEntry{
 	{Type: "string", Name: "ct.request.host", Display: "Request Host Name", Desc: "the host included in the request"},
 	{Type: "string", Name: "ct.request.name", Display: "Host Name", Desc: "the name of the entity being acted on in the request."},
 	{Type: "string", Name: "ct.request.policy", Display: "Host Policy", Desc: "the policy included in the request"},
+	{Type: "string", Name: "ct.request.reason", Display: "Request Reason", Desc: "the reason included in the request."},
+	{Type: "string", Name: "ct.request.target", Display: "Request Target", Desc: "the target included in the request."},
+	{Type: "string", Name: "ct.request.documentName", Display: "Request Document Name", Desc: "the document included in the request."},
 	{Type: "string", Name: "ct.request.serialnumber", Display: "Request Serial Number", Desc: "the serial number provided in the request."},
 	{Type: "string", Name: "ct.request.servicename", Display: "Request Service", Desc: "the service name provided in the request."},
 	{Type: "string", Name: "ct.request.subnetid", Display: "Request Subnet ID", Desc: "the subnet ID provided in the request."},
@@ -302,6 +305,12 @@ func getfieldStr(jdata *fastjson.Value, field string) (bool, string, int, int) {
 		fsval = jdata.Get("requestParameters", "name")
 	case "ct.request.policy":
 		fsval = jdata.Get("requestParameters", "policy")
+	case "ct.request.reason":
+		fsval = jdata.Get("requestParameters", "reason")
+	case "ct.request.target":
+		fsval = jdata.Get("requestParameters", "target")
+	case "ct.request.documentName":
+		fsval = jdata.Get("requestParameters", "documentName")
 	case "ct.request.serialnumber":
 		fsval = jdata.Get("requestParameters", "serialNumber")
 	case "ct.request.servicename":