title: get who created specific IAM user which is deleted now
body: <p>i want to check who create specific IAM user . how to get that from logs , can i use cloudtrail for this matter , FYI this IAM user is deleted now</p>