Yeah, all API actions will show up as being from ARN "arn:aws:sts::<account-id>:assumed-role/<hologram role>/<ldap username>"