Detecting who used the EC2 metadata server with BCC

linux sysadmin