title: Find who created a s3 bucket in federated AWS account
body: <p>My entire team accesses a single AWS account through federated login. Apart from my team, only admin (root user) has access to this account. But the root user is only for administration purpose.</p>
  
  <p>We all login to the AWS console through a SAML-based SSO. The navbar of the AWS console shows the user info as:</p>
  
  <p>Federated Login:
  TEAM-NAME/email.of.logged.in.user@organization.com</p>
  
  <p>Account:
  1234-5678-1234</p>
  
  <p>Since it is a single account, the account id is common for all federated users. But the emails are their own. Also, on clicking "My Account" link in navbar, the account name is shown as</p>
  
  <p>assumed-role/TEAM-NAME/email.of.logged.in.user@organization.com</p>
  
  <p>A part of my project is to identify the creator of some AWS resources. Now, suppose a bucket was created by some federated user. Can I, another federated user, track who (email) created this bucket? What about other kind of resources (not just s3 buckets)?</p>