Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a2be889-8c26-4b2d-99e0-a329d8d70f35", "record_id": "flaws_cloudtrail:0000000:8a2be889-8c26-4b2d-99e0-a329d8d70f35", "row_index": 0, "timestamp": "2019-06-28T13:12:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a2be889-8c26-4b2d-99e0-a329d8d70f35", "eventTime": "2019-06-28T13:12:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea50a43-6b5e-4fda-8e67-340d19bd944a", "record_id": "flaws_cloudtrail:0000001:8ea50a43-6b5e-4fda-8e67-340d19bd944a", "row_index": 1, "timestamp": "2019-06-28T13:14:12Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea50a43-6b5e-4fda-8e67-340d19bd944a", "eventTime": "2019-06-28T13:14:12Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea50a43-6b5e-4fda-8e67-340d19bd944a", "record_id": "flaws_cloudtrail:0000002:8ea50a43-6b5e-4fda-8e67-340d19bd944a", "row_index": 2, "timestamp": "2019-06-28T13:14:12Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea50a43-6b5e-4fda-8e67-340d19bd944a", "eventTime": "2019-06-28T13:14:12Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e954d87e-0499-44d7-95a1-cd0e705fccd5", "record_id": "flaws_cloudtrail:0000003:e954d87e-0499-44d7-95a1-cd0e705fccd5", "row_index": 3, "timestamp": "2019-06-28T13:14:28Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e954d87e-0499-44d7-95a1-cd0e705fccd5", "eventTime": "2019-06-28T13:14:28Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e954d87e-0499-44d7-95a1-cd0e705fccd5", "record_id": "flaws_cloudtrail:0000004:e954d87e-0499-44d7-95a1-cd0e705fccd5", "row_index": 4, "timestamp": "2019-06-28T13:14:28Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e954d87e-0499-44d7-95a1-cd0e705fccd5", "eventTime": "2019-06-28T13:14:28Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1568dde8-7caa-4cbd-91b6-356ef0c99800", "record_id": "flaws_cloudtrail:0000005:1568dde8-7caa-4cbd-91b6-356ef0c99800", "row_index": 5, "timestamp": "2019-06-28T13:14:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1568dde8-7caa-4cbd-91b6-356ef0c99800", "eventTime": "2019-06-28T13:14:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1568dde8-7caa-4cbd-91b6-356ef0c99800", "record_id": "flaws_cloudtrail:0000006:1568dde8-7caa-4cbd-91b6-356ef0c99800", "row_index": 6, "timestamp": "2019-06-28T13:14:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1568dde8-7caa-4cbd-91b6-356ef0c99800", "eventTime": "2019-06-28T13:14:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ff15ce-d5ee-462f-a386-925706f05a7", "record_id": "flaws_cloudtrail:0000007:d3ff15ce-d5ee-462f-a386-925706f05a7", "row_index": 7, "timestamp": "2019-06-28T13:15:20Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ff15ce-d5ee-462f-a386-925706f05a7", "eventTime": "2019-06-28T13:15:20Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ff15ce-d5ee-462f-a386-925706f05a7", "record_id": "flaws_cloudtrail:0000008:d3ff15ce-d5ee-462f-a386-925706f05a7", "row_index": 8, "timestamp": "2019-06-28T13:15:20Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ff15ce-d5ee-462f-a386-925706f05a7", "eventTime": "2019-06-28T13:15:20Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad0f47d-f079-4a77-bd82-e69407bc919", "record_id": "flaws_cloudtrail:0000009:0ad0f47d-f079-4a77-bd82-e69407bc919", "row_index": 9, "timestamp": "2019-06-28T13:15:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad0f47d-f079-4a77-bd82-e69407bc919", "eventTime": "2019-06-28T13:15:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad0f47d-f079-4a77-bd82-e69407bc919", "record_id": "flaws_cloudtrail:0000010:0ad0f47d-f079-4a77-bd82-e69407bc919", "row_index": 10, "timestamp": "2019-06-28T13:15:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "238.69.21.230", "user_agent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad0f47d-f079-4a77-bd82-e69407bc919", "eventTime": "2019-06-28T13:15:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "238.69.21.230", "userAgent": "aws-cli/1.16.96 Python/2.7.10 Darwin/18.6.0 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae1306d0-9209-4dcf-a2c5-4424cdce5555", "record_id": "flaws_cloudtrail:0000011:ae1306d0-9209-4dcf-a2c5-4424cdce5555", "row_index": 11, "timestamp": "2019-06-28T13:15:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae1306d0-9209-4dcf-a2c5-4424cdce5555", "eventTime": "2019-06-28T13:15:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1HXSEK8W52J9QBU0", "expiration": "Jun 29, 2019 1:15:59 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "record_id": "flaws_cloudtrail:0000012:64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "row_index": 12, "timestamp": "2019-06-28T13:15:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAIHP7F7JRACFW0LPQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "226.99.209.2", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "eventTime": "2019-06-28T13:15:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.99.209.2", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIHP7F7JRACFW0LPQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-28T12:46:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/28/[$LATEST]3b1f3352e59c4832fd6d14e42ab6beab"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae1306d0-9209-4dcf-a2c5-4424cdce5555", "record_id": "flaws_cloudtrail:0000013:ae1306d0-9209-4dcf-a2c5-4424cdce5555", "row_index": 13, "timestamp": "2019-06-28T13:15:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae1306d0-9209-4dcf-a2c5-4424cdce5555", "eventTime": "2019-06-28T13:15:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1HXSEK8W52J9QBU0", "expiration": "Jun 29, 2019 1:15:59 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "record_id": "flaws_cloudtrail:0000014:64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "row_index": 14, "timestamp": "2019-06-28T13:15:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAIHP7F7JRACFW0LPQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "226.99.209.2", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e0993a-2c49-4db1-aafb-0c8ea9bcc355", "eventTime": "2019-06-28T13:15:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.99.209.2", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIHP7F7JRACFW0LPQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-28T12:46:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/28/[$LATEST]3b1f3352e59c4832fd6d14e42ab6beab"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084e549e-85f4-4610-bb43-4e7f3d2c32e9", "record_id": "flaws_cloudtrail:0000015:084e549e-85f4-4610-bb43-4e7f3d2c32e9", "row_index": 15, "timestamp": "2019-06-28T13:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084e549e-85f4-4610-bb43-4e7f3d2c32e9", "eventTime": "2019-06-28T13:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUM0U8EPXCSDV3OQB", "expiration": "Jun 28, 2019 8:01:40 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084e549e-85f4-4610-bb43-4e7f3d2c32e9", "record_id": "flaws_cloudtrail:0000016:084e549e-85f4-4610-bb43-4e7f3d2c32e9", "row_index": 16, "timestamp": "2019-06-28T13:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084e549e-85f4-4610-bb43-4e7f3d2c32e9", "eventTime": "2019-06-28T13:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUM0U8EPXCSDV3OQB", "expiration": "Jun 28, 2019 8:01:40 PM", "sessionToken": "AgoJb3JpZ2luX2VjEBYaCXVzLXdlc3QtMiJGMEQCIAYNPk75ddAhlm0/YUVcvaREnI0VzkGydV5yb2Y0PoEgAiAfW292yoohGZAsAEIhNA+Rt8kOdj6gMge1MbBgP5I8piraAwhfEAAaDDk3NTQyNjI2MjAyOSIM6jVs+DY/uyiLHysRKrcD4GUXtZaVqV0fWrQbHsjGSTiDNIjJ+cQLdtyD72aCl2Z7AmGfSF7qU+bfXGEPbHY6UKsoPZRe4vDwrSmNwkVWOwlYvdcjMCRc4t84fgGuT14N+j9iZOItnTS8x0FVP0bPz8zwdAA7muZ0Sz6zVfRlqP6Wx1RBcwL4EukhxNAlOC4ep3kO/mgAGFX4TcnYcFbMIbgx72QQYl+I9Mq1hmN+OQau4sp7j93XGvY1Lm7A5UbWW4hA6bpaTbd8bW2kuwM09jTzOG7CvbQVJO+8OI1obdHRuzmS0p027as1P8PZ0443Q9QmMZUb/B16z0HiWL3jVMUXI5y4XtGmaR4FhPdnaWWxGoc0/s/PDTwK0zPVAtcLp0RfkMEVfFgZM2vnfcHChgt1V+oxeHnucKYUbhyz2xW4Wuyse4pqdNdbFKkfRTadFQfQKx23vcvLfXTnbWhqwx0WkVRGZuhtx9ftHXOCJh9gcSCNWmIsfqYm9WCETNm7jAIyuOxDrVXqD4ivuMD/zaEh2Zn9G3jClsJINL60pB0X61ukww/gGhqjG3v6ihZfb79rVZZZoo3HpFHX+l3lerJDhih2KzCUrNjoBTq1Acv4jBLjRqrSJTN0baLUqbUWVr6KxIIPuAIXPwv4uSZ3bTW/Umc7gKPTXqDYhm59LpUwYifvyVTvtbmFEfHcF8zB/3KmKNO3I327x/4M/TCPpYdvfTa5I4UN7G5WF6mleeM0Rp+XMlKAlhDJLzb+pJc0sQ9P1efFhEpMB0m/zfn5CZg0yPRNPKaAhDZF81QpupCC0atsiYy+AImlwciAvnR/fRSjc9vx4iLnYfMOHEoAfhw+rug="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0fcba08-4db3-4c37-8497-24f1ead647e4", "record_id": "flaws_cloudtrail:0000017:e0fcba08-4db3-4c37-8497-24f1ead647e4", "row_index": 17, "timestamp": "2019-06-28T14:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0fcba08-4db3-4c37-8497-24f1ead647e4", "eventTime": "2019-06-28T14:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAACB9ILZ3O3RE1W58", "expiration": "Jun 28, 2019 8:52:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0fcba08-4db3-4c37-8497-24f1ead647e4", "record_id": "flaws_cloudtrail:0000018:e0fcba08-4db3-4c37-8497-24f1ead647e4", "row_index": 18, "timestamp": "2019-06-28T14:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0fcba08-4db3-4c37-8497-24f1ead647e4", "eventTime": "2019-06-28T14:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAACB9ILZ3O3RE1W58", "expiration": "Jun 28, 2019 8:52:39 PM", "sessionToken": "AgoJb3JpZ2luX2VjEBcaCXVzLXdlc3QtMiJHMEUCIQD9AOYSBSngh0OJ/u5IxIsHkezRht1j1hfTHfLzEQGqPwIgI/62Cm/ZAwbziG/hdhCYQ0zzaCxl5XFVMgG0Xt8XtA0q2gMIYBAAGgw5NzU0MjYyNjIwMjkiDDTbir5xe8L89FYlYiq3Awwk/vjqxKAVFHCSl0LIPsgaw2UIjkS6K4nvhJSiBalFaMoDnfsHP8eHq6PEETipAz7dqajJsYQ86Z8fN+dlftDOD2GqoHqMRN1TGy3RR/xLq4uCPBvr2G35KhPBGfFPqQOUbF5M9xJFEmbdVZT6LHp6tHgkryaPj5I5jVyUn8vliBzzwNfo18cJ7uigBK6m9KFKSaGlxRjocq5EFXITa4wpR8QUWUmc/ixicAqaqib6J8zLoZIvtUeXGgwmBA0GNTAZFNiA9f79cT8O4Z2X9tTqS42Ywczjl96yE/Jg40Dg6qP/AqnHaAEqVsORqZ73fBrlQyiy0UB0IA/y0N6n8G78sZfhfoFcGOonFH+AyLWpKDyaEPbKz+8vBCa4vGpEcKOYVu9sWQ2O6UrPYd8cuecoyaYAa3XjhOu1OD7L2h7sg95Zm6EaXJfSPmSvV4DWmDyscfdjhpRR36Q96T3DaxkNRR3NTHxZyM9/CSSLcE2Nb/hEFuqFysF+i/898SCkcPi0wVZJZkZT3gckp3ca4AUOxDxIdT0LVUVcHvfoUVe16pmUEbE1zpTQQ8V7OgkEnG61AD/gyZowpMjY6AU6tAEo9l4UZRBm6M2QrA9KdAQAdfIrIjK2TmSKe4p1RC2H6NMHJHIDvsom4BLKaBuUCj2FR3RmZ5NglYpiXgc2jFdmY0s7EW3zVDuP15dYl+A34y3QiVtkSoPdkrc5ssHxSEGOO2xKycsEFyh/A2kpt8Pdz3dUbdtFwhAseQfGPUekTClGdOd0swJdO5fFFNp3ldpP1dUQXC5NgDEuwXgncr7L6PX/Oy5THpX36vkorN7sr6Se8ZY="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79633a6-1283-440c-991b-c3fa567bfa30", "record_id": "flaws_cloudtrail:0000019:b79633a6-1283-440c-991b-c3fa567bfa30", "row_index": 19, "timestamp": "2019-06-28T14:40:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "[aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79633a6-1283-440c-991b-c3fa567bfa30", "eventTime": "2019-06-28T14:40:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "[aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79633a6-1283-440c-991b-c3fa567bfa30", "record_id": "flaws_cloudtrail:0000020:b79633a6-1283-440c-991b-c3fa567bfa30", "row_index": 20, "timestamp": "2019-06-28T14:40:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "[aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79633a6-1283-440c-991b-c3fa567bfa30", "eventTime": "2019-06-28T14:40:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "[aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a8e22a-a680-4c9f-8b38-e44d29d9774d", "record_id": "flaws_cloudtrail:0000021:83a8e22a-a680-4c9f-8b38-e44d29d9774d", "row_index": 21, "timestamp": "2019-06-28T14:40:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "[aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a8e22a-a680-4c9f-8b38-e44d29d9774d", "eventTime": "2019-06-28T14:40:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "[aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a8e22a-a680-4c9f-8b38-e44d29d9774d", "record_id": "flaws_cloudtrail:0000022:83a8e22a-a680-4c9f-8b38-e44d29d9774d", "row_index": 22, "timestamp": "2019-06-28T14:40:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "[aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a8e22a-a680-4c9f-8b38-e44d29d9774d", "eventTime": "2019-06-28T14:40:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "[aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "record_id": "flaws_cloudtrail:0000023:ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "row_index": 23, "timestamp": "2019-06-28T14:41:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "[aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "eventTime": "2019-06-28T14:41:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "[aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "record_id": "flaws_cloudtrail:0000024:ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "row_index": 24, "timestamp": "2019-06-28T14:41:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "[aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbb6a74-0226-4d90-9d59-4665ca5f1f22", "eventTime": "2019-06-28T14:41:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "[aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c18d03a1-8855-4498-9906-42b03156a0db", "record_id": "flaws_cloudtrail:0000025:c18d03a1-8855-4498-9906-42b03156a0db", "row_index": 25, "timestamp": "2019-06-28T14:43:05Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c18d03a1-8855-4498-9906-42b03156a0db", "eventTime": "2019-06-28T14:43:05Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c18d03a1-8855-4498-9906-42b03156a0db", "record_id": "flaws_cloudtrail:0000026:c18d03a1-8855-4498-9906-42b03156a0db", "row_index": 26, "timestamp": "2019-06-28T14:43:05Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c18d03a1-8855-4498-9906-42b03156a0db", "eventTime": "2019-06-28T14:43:05Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c92abb9b-a25b-425a-b8ce-0b518ebb6440", "record_id": "flaws_cloudtrail:0000027:c92abb9b-a25b-425a-b8ce-0b518ebb6440", "row_index": 27, "timestamp": "2019-06-28T14:45:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c92abb9b-a25b-425a-b8ce-0b518ebb6440", "eventTime": "2019-06-28T14:45:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c92abb9b-a25b-425a-b8ce-0b518ebb6440", "record_id": "flaws_cloudtrail:0000028:c92abb9b-a25b-425a-b8ce-0b518ebb6440", "row_index": 28, "timestamp": "2019-06-28T14:45:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c92abb9b-a25b-425a-b8ce-0b518ebb6440", "eventTime": "2019-06-28T14:45:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62454b-76bc-4854-8517-7928a3ba732c", "record_id": "flaws_cloudtrail:0000029:62454b-76bc-4854-8517-7928a3ba732c", "row_index": 29, "timestamp": "2019-06-28T14:46:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62454b-76bc-4854-8517-7928a3ba732c", "eventTime": "2019-06-28T14:46:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62454b-76bc-4854-8517-7928a3ba732c", "record_id": "flaws_cloudtrail:0000030:62454b-76bc-4854-8517-7928a3ba732c", "row_index": 30, "timestamp": "2019-06-28T14:46:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62454b-76bc-4854-8517-7928a3ba732c", "eventTime": "2019-06-28T14:46:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "record_id": "flaws_cloudtrail:0000031:bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "row_index": 31, "timestamp": "2019-06-28T14:46:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "eventTime": "2019-06-28T14:46:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "record_id": "flaws_cloudtrail:0000032:bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "row_index": 32, "timestamp": "2019-06-28T14:46:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf78ce66-8262-4dc8-8ca5-55f6ac318af9", "eventTime": "2019-06-28T14:46:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19e2426-45a1-4eb4-8512-ac310e15a3ab", "record_id": "flaws_cloudtrail:0000033:f19e2426-45a1-4eb4-8512-ac310e15a3ab", "row_index": 33, "timestamp": "2019-06-28T14:47:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19e2426-45a1-4eb4-8512-ac310e15a3ab", "eventTime": "2019-06-28T14:47:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19e2426-45a1-4eb4-8512-ac310e15a3ab", "record_id": "flaws_cloudtrail:0000034:f19e2426-45a1-4eb4-8512-ac310e15a3ab", "row_index": 34, "timestamp": "2019-06-28T14:47:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19e2426-45a1-4eb4-8512-ac310e15a3ab", "eventTime": "2019-06-28T14:47:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "record_id": "flaws_cloudtrail:0000035:f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "row_index": 35, "timestamp": "2019-06-28T14:47:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "eventTime": "2019-06-28T14:47:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ZFJMRHRZbVpKT2FXNHpvTlJYMGRwVlcvTm5kOFJVdXgyUWtLYi9Lb05uV2szMHdDa3BsQmlBTytDN3llcHJmNFpnQlk2dDFsY1drQ2hnTllGRStmY3hXdVppdENqQzJtQ2VMNWUwaDJjY3drVTRqRDhlMm9aT2xWdnh0YmtCR3hPeldEZDIzcTBrZmpJMldROUVQckZtamlKa05nZ05GUGJ0USt5eHlGMkR0REJjZys4UVlUSFRMb2ZzMlM5YVRNQ010SWtEUTBYcCtjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "record_id": "flaws_cloudtrail:0000036:f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "row_index": 36, "timestamp": "2019-06-28T14:47:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f80416e-c0fb-4584-a6ee-6d6eae51cdb3", "eventTime": "2019-06-28T14:47:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ZFJMRHRZbVpKT2FXNHpvTlJYMGRwVlcvTm5kOFJVdXgyUWtLYi9Lb05uV2szMHdDa3BsQmlBTytDN3llcHJmNFpnQlk2dDFsY1drQ2hnTllGRStmY3hXdVppdENqQzJtQ2VMNWUwaDJjY3drVTRqRDhlMm9aT2xWdnh0YmtCR3hPeldEZDIzcTBrZmpJMldROUVQckZtamlKa05nZ05GUGJ0USt5eHlGMkR0REJjZys4UVlUSFRMb2ZzMlM5YVRNQ010SWtEUTBYcCtjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "record_id": "flaws_cloudtrail:0000037:048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "row_index": 37, "timestamp": "2019-06-28T14:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "eventTime": "2019-06-28T14:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVOC9BUUtXZDNzYmZydys1Sys5VjlZTlhXL2pZV2hraFBZUVhDY2ZHd1F0OEhORGRkeWpFWVVoN20yanREdk1FemJEZGg0TVBnNnZWbjE0ajY2cVA2ZStGUGdyZHpzb2d6RjVCeW5DZTM3WHJuTWFBYVdEUmUya0dja3VOZFh1ZmpleVFxcW5nODJiYU1ndXNqSkJIdzJJNnBqZGZ1NHZDdzVIZVFqTkJUVnE1YlcvNEwyR2kvT1l1clByZE5lNXExQ1pHRWZXeTRwdTV6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "record_id": "flaws_cloudtrail:0000038:048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "row_index": 38, "timestamp": "2019-06-28T14:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "048ab7ec-fd4d-46d9-9dbf-f6f6c11b2549", "eventTime": "2019-06-28T14:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVOC9BUUtXZDNzYmZydys1Sys5VjlZTlhXL2pZV2hraFBZUVhDY2ZHd1F0OEhORGRkeWpFWVVoN20yanREdk1FemJEZGg0TVBnNnZWbjE0ajY2cVA2ZStGUGdyZHpzb2d6RjVCeW5DZTM3WHJuTWFBYVdEUmUya0dja3VOZFh1ZmpleVFxcW5nODJiYU1ndXNqSkJIdzJJNnBqZGZ1NHZDdzVIZVFqTkJUVnE1YlcvNEwyR2kvT1l1clByZE5lNXExQ1pHRWZXeTRwdTV6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ed63a5-354b-4f86-ab5e-be06a6c12211", "record_id": "flaws_cloudtrail:0000039:18ed63a5-354b-4f86-ab5e-be06a6c12211", "row_index": 39, "timestamp": "2019-06-28T14:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ed63a5-354b-4f86-ab5e-be06a6c12211", "eventTime": "2019-06-28T14:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyOTVOWTd1cUVtRE83ZjBoMFNDb0Uzd2dmUnd4cmJlUkJteE9HSzdGVWx0YmtKWSs5c0pGMkJqNE5RNDNpVWl3UTNyTHMzRk9KdUF5MGFEMERtSFFJWURDMHpGSmtRTTlKdlRhcmNQY2NOeXJ6d3FKM3c1QzM1U3FrdUx0bmR5VXZncUhncTUyaWwwL0JJRlVSSnVkUmdub1ltUEJySDRQNC9ZTFB0SWE3Vmx1aElQMTI4ZjZnLzYzbVBxVm9nd0l0NGI3cTNzWjd1OU05QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ed63a5-354b-4f86-ab5e-be06a6c12211", "record_id": "flaws_cloudtrail:0000040:18ed63a5-354b-4f86-ab5e-be06a6c12211", "row_index": 40, "timestamp": "2019-06-28T14:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ed63a5-354b-4f86-ab5e-be06a6c12211", "eventTime": "2019-06-28T14:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyOTVOWTd1cUVtRE83ZjBoMFNDb0Uzd2dmUnd4cmJlUkJteE9HSzdGVWx0YmtKWSs5c0pGMkJqNE5RNDNpVWl3UTNyTHMzRk9KdUF5MGFEMERtSFFJWURDMHpGSmtRTTlKdlRhcmNQY2NOeXJ6d3FKM3c1QzM1U3FrdUx0bmR5VXZncUhncTUyaWwwL0JJRlVSSnVkUmdub1ltUEJySDRQNC9ZTFB0SWE3Vmx1aElQMTI4ZjZnLzYzbVBxVm9nd0l0NGI3cTNzWjd1OU05QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f515b2-3c77-4bf1-a1d4-edfacd898d74", "record_id": "flaws_cloudtrail:0000041:35f515b2-3c77-4bf1-a1d4-edfacd898d74", "row_index": 41, "timestamp": "2019-06-28T14:47:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f515b2-3c77-4bf1-a1d4-edfacd898d74", "eventTime": "2019-06-28T14:47:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4REFJNlpnMm9zVUtuUnNNQi9HU2p1TnprcVFZTWxCZnhzTkRBTEZUaGtsOWcvdVg2dmRwSjBRTXIvbVhzSXJaT29UOTFyeUVoanFJUnFyNTVSY2Znalg5TDBrM21Eb3FXeURBeUV4c2ZKQWlvUVBuQTBkQnpvM1NzRXZuc1ZJcU9uWjJuT0tHZ2lHREJ4NkJpcG1ZSUdPRTZ4QzB6ZUVMcGd6NWdmdmNFOUwxTjdiSElyUWwyQjhHbENMeUxZOHNlSXBna3o0c2FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f515b2-3c77-4bf1-a1d4-edfacd898d74", "record_id": "flaws_cloudtrail:0000042:35f515b2-3c77-4bf1-a1d4-edfacd898d74", "row_index": 42, "timestamp": "2019-06-28T14:47:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f515b2-3c77-4bf1-a1d4-edfacd898d74", "eventTime": "2019-06-28T14:47:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4REFJNlpnMm9zVUtuUnNNQi9HU2p1TnprcVFZTWxCZnhzTkRBTEZUaGtsOWcvdVg2dmRwSjBRTXIvbVhzSXJaT29UOTFyeUVoanFJUnFyNTVSY2Znalg5TDBrM21Eb3FXeURBeUV4c2ZKQWlvUVBuQTBkQnpvM1NzRXZuc1ZJcU9uWjJuT0tHZ2lHREJ4NkJpcG1ZSUdPRTZ4QzB6ZUVMcGd6NWdmdmNFOUwxTjdiSElyUWwyQjhHbENMeUxZOHNlSXBna3o0c2FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d705915d-c659-4fce-ad56-bc36387b53f", "record_id": "flaws_cloudtrail:0000043:d705915d-c659-4fce-ad56-bc36387b53f", "row_index": 43, "timestamp": "2019-06-28T14:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d705915d-c659-4fce-ad56-bc36387b53f", "eventTime": "2019-06-28T14:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXci9WMDlKZ1FWTDhZbmNvOC9YZElobjJQYVU5eFQ4SWc3VVBwek5YOUFNMXZFUlphWkg0WjhkL0pIYndVeUtRa3VHVS9HSGlMQjMwNjJoWnNuU1ArQWlSNHhTTTBjdGw0bGJJZUp2bWoyaW9lZmxLVk0rU3IySExFVldSVEl3ZUJBcmxJdlhxM0svL0VweEpEY3Y4dENNSEFWQmYxbGpzWDFhUEl5QXhrOXc0QklMbklJVysrbHo3VWszNVNCS2p4N1BCWTloREtRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d705915d-c659-4fce-ad56-bc36387b53f", "record_id": "flaws_cloudtrail:0000044:d705915d-c659-4fce-ad56-bc36387b53f", "row_index": 44, "timestamp": "2019-06-28T14:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d705915d-c659-4fce-ad56-bc36387b53f", "eventTime": "2019-06-28T14:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXci9WMDlKZ1FWTDhZbmNvOC9YZElobjJQYVU5eFQ4SWc3VVBwek5YOUFNMXZFUlphWkg0WjhkL0pIYndVeUtRa3VHVS9HSGlMQjMwNjJoWnNuU1ArQWlSNHhTTTBjdGw0bGJJZUp2bWoyaW9lZmxLVk0rU3IySExFVldSVEl3ZUJBcmxJdlhxM0svL0VweEpEY3Y4dENNSEFWQmYxbGpzWDFhUEl5QXhrOXc0QklMbklJVysrbHo3VWszNVNCS2p4N1BCWTloREtRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "601b52ca-0fb2-45af-9caf-cd10e034bb4e", "record_id": "flaws_cloudtrail:0000045:601b52ca-0fb2-45af-9caf-cd10e034bb4e", "row_index": 45, "timestamp": "2019-06-28T14:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "601b52ca-0fb2-45af-9caf-cd10e034bb4e", "eventTime": "2019-06-28T14:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVN3o2RTdSTXV5QmxaWWJuTFR3VmwzWkZGNSt3SlJmQlJkOTRBenREVDlIbkJtVzd3UUt6S1p2Qy9pbUo1Zmp4aXcyTmRrRms1NWdBNk10V28xUURwbnZvYnBNbUtWVHhkdm0vN1RCR0sxZitLVEl5SkR1V0tzRE1xS2xSUGRrM2lzQktZc3Evdnp6dTZ0VUlCdFpNRHB3SjFSTXkzb29wTTd6MlU4YUY5a3l1U2gxQUwrb0F1MTY5OUJYNGVPWW1ZZGIrSUZWb1FEWEhYQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "601b52ca-0fb2-45af-9caf-cd10e034bb4e", "record_id": "flaws_cloudtrail:0000046:601b52ca-0fb2-45af-9caf-cd10e034bb4e", "row_index": 46, "timestamp": "2019-06-28T14:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "601b52ca-0fb2-45af-9caf-cd10e034bb4e", "eventTime": "2019-06-28T14:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVN3o2RTdSTXV5QmxaWWJuTFR3VmwzWkZGNSt3SlJmQlJkOTRBenREVDlIbkJtVzd3UUt6S1p2Qy9pbUo1Zmp4aXcyTmRrRms1NWdBNk10V28xUURwbnZvYnBNbUtWVHhkdm0vN1RCR0sxZitLVEl5SkR1V0tzRE1xS2xSUGRrM2lzQktZc3Evdnp6dTZ0VUlCdFpNRHB3SjFSTXkzb29wTTd6MlU4YUY5a3l1U2gxQUwrb0F1MTY5OUJYNGVPWW1ZZGIrSUZWb1FEWEhYQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12797-0f88-4f38-8e20-97b32c355efa", "record_id": "flaws_cloudtrail:0000047:12797-0f88-4f38-8e20-97b32c355efa", "row_index": 47, "timestamp": "2019-06-28T14:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12797-0f88-4f38-8e20-97b32c355efa", "eventTime": "2019-06-28T14:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCM2pwekdiaHF3VFZscXZJbnpOQi9wU09MK2RNSjFIUmFTNmt5aS9rUnZHQmQrRS9JWVdMbmZZS0VMK0E2bTU0bFM2Z0MzVmJLUExKRkc3bzVuRkVHTUROdTl3WHBBQnZmT0h3T2pBNjlneVFMblpqeWlsN2l4eXNuSlVmV2k5ajhPL2J0aExlYWVEZFpHY1NGNnJKU21ETUdIMXdFNXdIZjcrWWVRSnhDbGxmMWtFajNldDByWUJ3NzQxTHFURXB5Wi96WE4yMzh0R1FXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12797-0f88-4f38-8e20-97b32c355efa", "record_id": "flaws_cloudtrail:0000048:12797-0f88-4f38-8e20-97b32c355efa", "row_index": 48, "timestamp": "2019-06-28T14:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12797-0f88-4f38-8e20-97b32c355efa", "eventTime": "2019-06-28T14:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCM2pwekdiaHF3VFZscXZJbnpOQi9wU09MK2RNSjFIUmFTNmt5aS9rUnZHQmQrRS9JWVdMbmZZS0VMK0E2bTU0bFM2Z0MzVmJLUExKRkc3bzVuRkVHTUROdTl3WHBBQnZmT0h3T2pBNjlneVFMblpqeWlsN2l4eXNuSlVmV2k5ajhPL2J0aExlYWVEZFpHY1NGNnJKU21ETUdIMXdFNXdIZjcrWWVRSnhDbGxmMWtFajNldDByWUJ3NzQxTHFURXB5Wi96WE4yMzh0R1FXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f297359a-d4f2-4668-bd29-815105f5af9b5", "record_id": "flaws_cloudtrail:0000049:4f297359a-d4f2-4668-bd29-815105f5af9b5", "row_index": 49, "timestamp": "2019-06-28T14:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f297359a-d4f2-4668-bd29-815105f5af9b5", "eventTime": "2019-06-28T14:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjMFZ6QVgvVFlkTUxVa0Z6RVM5U0phaVI5V1lJYXZwdUF4VnFrL0pFdGNmSlhMVm02QlJuR0FGR3NadU5zbnFkQ1JmK1JhQkw5d3FxYkhKaFFhVXlLRzRjdE9qcFl4K2g1dkZaTUxuUEJyLzcwOTFTdDJNUDdqWTBaMlNwL1F1Y2x3U1JHV0pwSGRSOE0wUDl2TTBIOFhoVHlqOXVsdkludm5iU0JrQjhrT3lSc05CVGpxWmk4aXQzV2hDTkRNcHV3MTJ5clFybWl3anh4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f297359a-d4f2-4668-bd29-815105f5af9b5", "record_id": "flaws_cloudtrail:0000050:4f297359a-d4f2-4668-bd29-815105f5af9b5", "row_index": 50, "timestamp": "2019-06-28T14:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f297359a-d4f2-4668-bd29-815105f5af9b5", "eventTime": "2019-06-28T14:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjMFZ6QVgvVFlkTUxVa0Z6RVM5U0phaVI5V1lJYXZwdUF4VnFrL0pFdGNmSlhMVm02QlJuR0FGR3NadU5zbnFkQ1JmK1JhQkw5d3FxYkhKaFFhVXlLRzRjdE9qcFl4K2g1dkZaTUxuUEJyLzcwOTFTdDJNUDdqWTBaMlNwL1F1Y2x3U1JHV0pwSGRSOE0wUDl2TTBIOFhoVHlqOXVsdkludm5iU0JrQjhrT3lSc05CVGpxWmk4aXQzV2hDTkRNcHV3MTJ5clFybWl3anh4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c032e1-5361-4387-9bc8-f42a0ae45a31", "record_id": "flaws_cloudtrail:0000051:48c032e1-5361-4387-9bc8-f42a0ae45a31", "row_index": 51, "timestamp": "2019-06-28T14:47:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c032e1-5361-4387-9bc8-f42a0ae45a31", "eventTime": "2019-06-28T14:47:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaG4vQ3kzd2dpcUNtdXFpVmlxZnBJcFNwVHFsaG1XbEVQRkEvaFN6MGxkUHNOZWxUaS9aVkxtUkFtd0szcGRRMFpDUXg3aFdpQkpORzBSeStoTS9TUzFsYzI1NjFWT2g5Sjd2c3BqVi9xRnhnQ1dzeGlTbS9PdGRYRDRkUkl3SWNUcVlUYUpVSVY3RzFwc3pHM1lwVncvc09tLzNzUWlQdEozS0M5OVZuSlRiSENuWTNCZDRKMHlEb3NPSTlEZFBWb296MkdrSG53PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c032e1-5361-4387-9bc8-f42a0ae45a31", "record_id": "flaws_cloudtrail:0000052:48c032e1-5361-4387-9bc8-f42a0ae45a31", "row_index": 52, "timestamp": "2019-06-28T14:47:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c032e1-5361-4387-9bc8-f42a0ae45a31", "eventTime": "2019-06-28T14:47:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaG4vQ3kzd2dpcUNtdXFpVmlxZnBJcFNwVHFsaG1XbEVQRkEvaFN6MGxkUHNOZWxUaS9aVkxtUkFtd0szcGRRMFpDUXg3aFdpQkpORzBSeStoTS9TUzFsYzI1NjFWT2g5Sjd2c3BqVi9xRnhnQ1dzeGlTbS9PdGRYRDRkUkl3SWNUcVlUYUpVSVY3RzFwc3pHM1lwVncvc09tLzNzUWlQdEozS0M5OVZuSlRiSENuWTNCZDRKMHlEb3NPSTlEZFBWb296MkdrSG53PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14d2823b-ef82-4a5f-a335-6ca365b4e07b", "record_id": "flaws_cloudtrail:0000053:14d2823b-ef82-4a5f-a335-6ca365b4e07b", "row_index": 53, "timestamp": "2019-06-28T14:47:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14d2823b-ef82-4a5f-a335-6ca365b4e07b", "eventTime": "2019-06-28T14:47:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDV2s1UFRhWDk0RmlmTzRia09GbjNuMWdiS3pZTVZuVGhNVGFHd2Z4TXgvTE5kMloxUlNwU0xVeE9walFyS2NYdEpSNi8xMnNrTlg0RGNzek0xOHNla3JiUDNjRUs2VkVjTVB0VnJPWlpEOVUvSzZzSGhCbDFMTThJaHNlaFJIRWFUVTRRbVIvaUpTRmQ1bGdTZlVMaHNabGl6VnpmNVJ1SHJSaUlCU3Y2WVdXbkRTdnVNWFN0ckQ2OUJxTitFYjhsaGRSVWpBb2pYUEFSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14d2823b-ef82-4a5f-a335-6ca365b4e07b", "record_id": "flaws_cloudtrail:0000054:14d2823b-ef82-4a5f-a335-6ca365b4e07b", "row_index": 54, "timestamp": "2019-06-28T14:47:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14d2823b-ef82-4a5f-a335-6ca365b4e07b", "eventTime": "2019-06-28T14:47:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDV2s1UFRhWDk0RmlmTzRia09GbjNuMWdiS3pZTVZuVGhNVGFHd2Z4TXgvTE5kMloxUlNwU0xVeE9walFyS2NYdEpSNi8xMnNrTlg0RGNzek0xOHNla3JiUDNjRUs2VkVjTVB0VnJPWlpEOVUvSzZzSGhCbDFMTThJaHNlaFJIRWFUVTRRbVIvaUpTRmQ1bGdTZlVMaHNabGl6VnpmNVJ1SHJSaUlCU3Y2WVdXbkRTdnVNWFN0ckQ2OUJxTitFYjhsaGRSVWpBb2pYUEFSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497470-4ebf-4b7f-bfdd-e26e003b8ce6", "record_id": "flaws_cloudtrail:0000055:497470-4ebf-4b7f-bfdd-e26e003b8ce6", "row_index": 55, "timestamp": "2019-06-28T14:47:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497470-4ebf-4b7f-bfdd-e26e003b8ce6", "eventTime": "2019-06-28T14:47:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZM21UQnZlY0JteWtiamdNdTRhT0hObktWc3ZibVluL0dWdXMxZEJVb1RWN1dKNk9kTWI3ZDZmOE52ZkdPVmZmRjBqa3QxcEpjNjNLL2NYSWprb2NpWHh1c2w1RHlMazJuRkxrK3RvRTB0K29uZm9nWjA2WEdyMVR3S2xmRHVwV1FITkhuekN0a0lOV3kza2NmZ3VOMThUTGhENk9NM0p5eUlWeXRJRmd3RWVPR3BRTlFESnpEVVcvd3pPRVBNTmVuRFkydHJlZWxzVDRuUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497470-4ebf-4b7f-bfdd-e26e003b8ce6", "record_id": "flaws_cloudtrail:0000056:497470-4ebf-4b7f-bfdd-e26e003b8ce6", "row_index": 56, "timestamp": "2019-06-28T14:47:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497470-4ebf-4b7f-bfdd-e26e003b8ce6", "eventTime": "2019-06-28T14:47:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZM21UQnZlY0JteWtiamdNdTRhT0hObktWc3ZibVluL0dWdXMxZEJVb1RWN1dKNk9kTWI3ZDZmOE52ZkdPVmZmRjBqa3QxcEpjNjNLL2NYSWprb2NpWHh1c2w1RHlMazJuRkxrK3RvRTB0K29uZm9nWjA2WEdyMVR3S2xmRHVwV1FITkhuekN0a0lOV3kza2NmZ3VOMThUTGhENk9NM0p5eUlWeXRJRmd3RWVPR3BRTlFESnpEVVcvd3pPRVBNTmVuRFkydHJlZWxzVDRuUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "record_id": "flaws_cloudtrail:0000057:4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "row_index": 57, "timestamp": "2019-06-28T14:47:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "eventTime": "2019-06-28T14:47:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFelppL1R1cGRyTWFZaE5jT3h1RmVJbUFLdmYzb0xRVEZkM3NKNWViUEtTM29EVVB4YWRndDcrU1RPUE1GSFhZblY0VDlMVlBjSFhLQjVEdEh2WG1tQ3U0ZTVLMHp3SEN2ZVFQSlJyT2J4MXY4akF6bE5xWWk0b3RhdUdsNmRpbHFjZUJ0Zi8zVGRhWHZFanhOMEtFaHlqUUhBeDdQdTN5WDZ1TnVsTnRsQ0hxM25FdzFMUk4vaTVCckRuSnZTYUpUbWtNV0Myb1U0MlY1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "record_id": "flaws_cloudtrail:0000058:4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "row_index": 58, "timestamp": "2019-06-28T14:47:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a501a7a-72e0-4cc5-b7f1-5b68ff4f0920", "eventTime": "2019-06-28T14:47:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFelppL1R1cGRyTWFZaE5jT3h1RmVJbUFLdmYzb0xRVEZkM3NKNWViUEtTM29EVVB4YWRndDcrU1RPUE1GSFhZblY0VDlMVlBjSFhLQjVEdEh2WG1tQ3U0ZTVLMHp3SEN2ZVFQSlJyT2J4MXY4akF6bE5xWWk0b3RhdUdsNmRpbHFjZUJ0Zi8zVGRhWHZFanhOMEtFaHlqUUhBeDdQdTN5WDZ1TnVsTnRsQ0hxM25FdzFMUk4vaTVCckRuSnZTYUpUbWtNV0Myb1U0MlY1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734d6122-1b0c-419b-96f7-4aaad1837a5a", "record_id": "flaws_cloudtrail:0000059:734d6122-1b0c-419b-96f7-4aaad1837a5a", "row_index": 59, "timestamp": "2019-06-28T14:47:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734d6122-1b0c-419b-96f7-4aaad1837a5a", "eventTime": "2019-06-28T14:47:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK2ZFcGZDTTM2QnhiSTBtQ2g1S0N3cWZ5NUwyY3ZKVWN3dWZzclBDVEdCYTdJNWNOOFhLWmVhemYvdGpibzN4RG9TdStvVWZqSDZQMkd1OERkZURIcGhxd2c0K0o4UWtzNVBheHNBY3R6UmNZT3hxbURNZ3ZxRGxNY2ozbERsbytzbjJHa0o4RUNHamsxOW5ERE9OY3p6SCs5UkJOalBHbkFYOEtuMUlBRFA0cVorNUhneWhwdnp3bERoQ2VBYzhJYm1zeXZtV0NzWlJpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734d6122-1b0c-419b-96f7-4aaad1837a5a", "record_id": "flaws_cloudtrail:0000060:734d6122-1b0c-419b-96f7-4aaad1837a5a", "row_index": 60, "timestamp": "2019-06-28T14:47:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734d6122-1b0c-419b-96f7-4aaad1837a5a", "eventTime": "2019-06-28T14:47:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK2ZFcGZDTTM2QnhiSTBtQ2g1S0N3cWZ5NUwyY3ZKVWN3dWZzclBDVEdCYTdJNWNOOFhLWmVhemYvdGpibzN4RG9TdStvVWZqSDZQMkd1OERkZURIcGhxd2c0K0o4UWtzNVBheHNBY3R6UmNZT3hxbURNZ3ZxRGxNY2ozbERsbytzbjJHa0o4RUNHamsxOW5ERE9OY3p6SCs5UkJOalBHbkFYOEtuMUlBRFA0cVorNUhneWhwdnp3bERoQ2VBYzhJYm1zeXZtV0NzWlJpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082e5445-aada-4e90-b263-cd7dc26f5762", "record_id": "flaws_cloudtrail:0000061:082e5445-aada-4e90-b263-cd7dc26f5762", "row_index": 61, "timestamp": "2019-06-28T14:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082e5445-aada-4e90-b263-cd7dc26f5762", "eventTime": "2019-06-28T14:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT1A5N29iQVRaOERRVkg1Z2o5K1pCMmlObUNTTnkwa1FiUnR2Smx1ZStlSzFDMTVPRzVCeW16b2NBWXAvdmZqMnRnQVVmNWFGUlFEdWtqb0xwNjNJOHg4b2xKckI2RGNrQWRwSzRPQmtsZ05zbUgrRklxcHhKMlcydXp6OTM3UTZaMElyeUdYVC90K0EwVXpHaEd0QmJSKzhDMW1YaHpDUW9EUnU5bnBGOGZLdXFLbm5DRGoxcmJ2eDA2YnNLMlNveTRPU29QOThJb2dXRm4rOEkyWGp1R29sQitCeU80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "record_id": "flaws_cloudtrail:0000062:90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "row_index": 62, "timestamp": "2019-06-28T14:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "eventTime": "2019-06-28T14:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3T2IzMG05R1NudjdrRlFsUDd4NDRQd1Rkanp4MFhLWlNZZlhHeTVaZVdQT1pEczhSNThrN2dWVDdlVVdkZ05SSVZvMFh6N0thQWRWZW51akNCWmNTbGcwVm5TSmo0MENxa1R0b3lndDFWczdiaVd2QkU5TWlPUmNSam1NZzA0S0c5T2M1c3FYTkl3djMrV0tFZFNFR1BLOWdhNnFZclZBM1B1UDVFbmRVbjdZbjE4V1hYdks3QXlDZ2VYRlh2cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082e5445-aada-4e90-b263-cd7dc26f5762", "record_id": "flaws_cloudtrail:0000063:082e5445-aada-4e90-b263-cd7dc26f5762", "row_index": 63, "timestamp": "2019-06-28T14:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082e5445-aada-4e90-b263-cd7dc26f5762", "eventTime": "2019-06-28T14:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT1A5N29iQVRaOERRVkg1Z2o5K1pCMmlObUNTTnkwa1FiUnR2Smx1ZStlSzFDMTVPRzVCeW16b2NBWXAvdmZqMnRnQVVmNWFGUlFEdWtqb0xwNjNJOHg4b2xKckI2RGNrQWRwSzRPQmtsZ05zbUgrRklxcHhKMlcydXp6OTM3UTZaMElyeUdYVC90K0EwVXpHaEd0QmJSKzhDMW1YaHpDUW9EUnU5bnBGOGZLdXFLbm5DRGoxcmJ2eDA2YnNLMlNveTRPU29QOThJb2dXRm4rOEkyWGp1R29sQitCeU80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "record_id": "flaws_cloudtrail:0000064:90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "row_index": 64, "timestamp": "2019-06-28T14:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90ad5b40-1b7e-4626-899c-9a9ce3b1a986", "eventTime": "2019-06-28T14:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3T2IzMG05R1NudjdrRlFsUDd4NDRQd1Rkanp4MFhLWlNZZlhHeTVaZVdQT1pEczhSNThrN2dWVDdlVVdkZ05SSVZvMFh6N0thQWRWZW51akNCWmNTbGcwVm5TSmo0MENxa1R0b3lndDFWczdiaVd2QkU5TWlPUmNSam1NZzA0S0c5T2M1c3FYTkl3djMrV0tFZFNFR1BLOWdhNnFZclZBM1B1UDVFbmRVbjdZbjE4V1hYdks3QXlDZ2VYRlh2cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "record_id": "flaws_cloudtrail:0000065:b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "row_index": 65, "timestamp": "2019-06-28T14:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "eventTime": "2019-06-28T14:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2VTRiRG5pQUN5bW1GZVF0bERwUkNJSm5KY3JXSEFIeENENkpKOHBqcTVaK1VGOTcxbG9mMXU5YkRZYnA4N2Y5YldmeTh0NiswUHJwelgrSW1CbWluMzcrVHJxV2FIb0k5dFhPek03a3J1WjFHeGJnZlpham95TFpWVENLTEx6TjlwQlltSEo1OG4zdXFZWFl2RTEwSzhsYjc0OEtpQXoyaU9pd29qWlNneWZRbDlseFY3YVlJZnVKZWRiei84Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c469f4c5-69f5-41c4-98a9-68967f955", "record_id": "flaws_cloudtrail:0000066:c469f4c5-69f5-41c4-98a9-68967f955", "row_index": 66, "timestamp": "2019-06-28T14:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c469f4c5-69f5-41c4-98a9-68967f955", "eventTime": "2019-06-28T14:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVQUh5UUtmdlRNUDBkazJRdjM4SUhaRS9xdU44VWpmUDUvRUVyVUkrRFpIM21aV1REbUtUV2JTYzlkWnFRZ0RUeUpLNVZ3UEY2bm5GVFMvZFk4YnZkYkprWUpDM3Fsd3h0L0M0SjRpVVJkdlVKVjhtaFdpSHQ1Wm9MTU1wMUdyMWEyYUJrSDhvSU5uL1R4VUR1L3FjS2JSa1R2cjRLdDh4L2hzR0ZPd0ZRT2g3UkwxN2F1MzJzL1hZNHR4ZUhLZnVnMFRlV29GSWZyWEVjQjRDZk9GWmxIMy9DTVUzZTQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "record_id": "flaws_cloudtrail:0000067:b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "row_index": 67, "timestamp": "2019-06-28T14:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b60c9ba7-fd2f-42b1-b5e2-f34a93bdb4f9", "eventTime": "2019-06-28T14:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2VTRiRG5pQUN5bW1GZVF0bERwUkNJSm5KY3JXSEFIeENENkpKOHBqcTVaK1VGOTcxbG9mMXU5YkRZYnA4N2Y5YldmeTh0NiswUHJwelgrSW1CbWluMzcrVHJxV2FIb0k5dFhPek03a3J1WjFHeGJnZlpham95TFpWVENLTEx6TjlwQlltSEo1OG4zdXFZWFl2RTEwSzhsYjc0OEtpQXoyaU9pd29qWlNneWZRbDlseFY3YVlJZnVKZWRiei84Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c469f4c5-69f5-41c4-98a9-68967f955", "record_id": "flaws_cloudtrail:0000068:c469f4c5-69f5-41c4-98a9-68967f955", "row_index": 68, "timestamp": "2019-06-28T14:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c469f4c5-69f5-41c4-98a9-68967f955", "eventTime": "2019-06-28T14:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVQUh5UUtmdlRNUDBkazJRdjM4SUhaRS9xdU44VWpmUDUvRUVyVUkrRFpIM21aV1REbUtUV2JTYzlkWnFRZ0RUeUpLNVZ3UEY2bm5GVFMvZFk4YnZkYkprWUpDM3Fsd3h0L0M0SjRpVVJkdlVKVjhtaFdpSHQ1Wm9MTU1wMUdyMWEyYUJrSDhvSU5uL1R4VUR1L3FjS2JSa1R2cjRLdDh4L2hzR0ZPd0ZRT2g3UkwxN2F1MzJzL1hZNHR4ZUhLZnVnMFRlV29GSWZyWEVjQjRDZk9GWmxIMy9DTVUzZTQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b31d735-a443-498c-96d7-e98ab3edec46", "record_id": "flaws_cloudtrail:0000069:6b31d735-a443-498c-96d7-e98ab3edec46", "row_index": 69, "timestamp": "2019-06-28T14:47:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b31d735-a443-498c-96d7-e98ab3edec46", "eventTime": "2019-06-28T14:47:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMlpnSk1MQUZ6b0hhY09BMzNMQ0ZZcEZhRlJCTnpyc2EwRXNsN1VVbEZSUTZkK3FhTW1lc2Y4Nm1yRzhhK0J5dk1qR1VLeWlrazVBMDlmbVBWVjBuaHd4UWQrd3ZSUnNXQm9lKyt1ZHlNZXBLYStnODU4VEQwZUlyMWFocnFDSHNtNlZiNDhFcTJtUFBEOUIya2JDSHhTbG5YblJ1ek9xVmJ6blQ4eXI0Y0F6bnkyY1NtQWdOZGV5YXNkeFFDWVFmdE1LSUZTN040UUFESzU5YVJqcFBhRXFPUVJEOVhZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b31d735-a443-498c-96d7-e98ab3edec46", "record_id": "flaws_cloudtrail:0000070:6b31d735-a443-498c-96d7-e98ab3edec46", "row_index": 70, "timestamp": "2019-06-28T14:47:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b31d735-a443-498c-96d7-e98ab3edec46", "eventTime": "2019-06-28T14:47:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMlpnSk1MQUZ6b0hhY09BMzNMQ0ZZcEZhRlJCTnpyc2EwRXNsN1VVbEZSUTZkK3FhTW1lc2Y4Nm1yRzhhK0J5dk1qR1VLeWlrazVBMDlmbVBWVjBuaHd4UWQrd3ZSUnNXQm9lKyt1ZHlNZXBLYStnODU4VEQwZUlyMWFocnFDSHNtNlZiNDhFcTJtUFBEOUIya2JDSHhTbG5YblJ1ek9xVmJ6blQ4eXI0Y0F6bnkyY1NtQWdOZGV5YXNkeFFDWVFmdE1LSUZTN040UUFESzU5YVJqcFBhRXFPUVJEOVhZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "record_id": "flaws_cloudtrail:0000071:462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "row_index": 71, "timestamp": "2019-06-28T14:47:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "eventTime": "2019-06-28T14:47:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGY2ZjcE9nSHFBRGpsdDkvZEYwY2NZVVM2aSswSEIzTmVsbkQ2VVUvRWRLTjdidG02Wng1Q2dnNElkdFFFTlhIT2NZT1Z4L2YzQTVVS0ZwSWlPNGhmYmtHVkkvcW50S1JqS3p2WWVUdFRQdEExVEpKNHZaQnJWNTlpUmNIZDhTeDdpNWZLMHU1eXR0dzJoQjllZ3k4VEpFY1ZCTDY1VVVKTUs5UU02SXQ1SE82TEo3Q295UGpacVBlU21odncvMjdPeHc1czg4bFJQMmFsanFURmY1a0NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "record_id": "flaws_cloudtrail:0000072:462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "row_index": 72, "timestamp": "2019-06-28T14:47:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462d7c2c-3c33-40b9-ad24-f7f1d78cd020", "eventTime": "2019-06-28T14:47:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGY2ZjcE9nSHFBRGpsdDkvZEYwY2NZVVM2aSswSEIzTmVsbkQ2VVUvRWRLTjdidG02Wng1Q2dnNElkdFFFTlhIT2NZT1Z4L2YzQTVVS0ZwSWlPNGhmYmtHVkkvcW50S1JqS3p2WWVUdFRQdEExVEpKNHZaQnJWNTlpUmNIZDhTeDdpNWZLMHU1eXR0dzJoQjllZ3k4VEpFY1ZCTDY1VVVKTUs5UU02SXQ1SE82TEo3Q295UGpacVBlU21odncvMjdPeHc1czg4bFJQMmFsanFURmY1a0NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "430ac925-5cf6-4991-a378-ef1c7de8b641", "record_id": "flaws_cloudtrail:0000073:430ac925-5cf6-4991-a378-ef1c7de8b641", "row_index": 73, "timestamp": "2019-06-28T14:47:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "430ac925-5cf6-4991-a378-ef1c7de8b641", "eventTime": "2019-06-28T14:47:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXdkVMbWt1WVRvMUFETTNVdUk0bDZRZlN1UmdXYW94ekJZZkp6UFp2d2dmRHBuTzQzc3dvRzJ4dml0Ui91ek4xVFo4cHBrSmJxRWxNL0EvN0dDenFjRDAwbDYvbTZvNjFMY3FNTXlZaHFkMUEyNEJFUHhGM3FTdlhnZnMwOE1rNURLSlFkWEo1ZExMUVJoVGd6ejJhTUtCaW9ZY1kzTEJKbDU3eWgrT2wwTThrdzJDeFZIVDJwUFRtVEFWL3IxVHBxZ042N2gzQXZ5bWk0NGIwNnZ4QkU1NzluMWl4dWNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "208db64c-271f-410c-b05f-d96114769a60", "record_id": "flaws_cloudtrail:0000074:208db64c-271f-410c-b05f-d96114769a60", "row_index": 74, "timestamp": "2019-06-28T14:47:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "208db64c-271f-410c-b05f-d96114769a60", "eventTime": "2019-06-28T14:47:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSUYxbFpqRS9jSmM1R2c5aHVRd2oxbUliQjR5cXBTYkJ2TXlrUnFPWEZDdTgzVVVSWFozRmtIM2lMTFdjeWJYWC82dFZFVndXamFtQ0tJZXpHZDhjSmRjcE85MEZSdnJVSGszY0w5UElKbzN5MkZLWHFhWWc4bmJPRWx6MlhCNXFhRFU4SUQyTm1TWTBUMWs2SjYxY3FoVk5hMlJnS2Z3bWVYYUZZVDBhaGZ6QkoxdnJqcDMvNWJ2cUtkM2RlU2pudHBlWWMrWHAxZHEwdThIR3drbUpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "430ac925-5cf6-4991-a378-ef1c7de8b641", "record_id": "flaws_cloudtrail:0000075:430ac925-5cf6-4991-a378-ef1c7de8b641", "row_index": 75, "timestamp": "2019-06-28T14:47:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "430ac925-5cf6-4991-a378-ef1c7de8b641", "eventTime": "2019-06-28T14:47:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXdkVMbWt1WVRvMUFETTNVdUk0bDZRZlN1UmdXYW94ekJZZkp6UFp2d2dmRHBuTzQzc3dvRzJ4dml0Ui91ek4xVFo4cHBrSmJxRWxNL0EvN0dDenFjRDAwbDYvbTZvNjFMY3FNTXlZaHFkMUEyNEJFUHhGM3FTdlhnZnMwOE1rNURLSlFkWEo1ZExMUVJoVGd6ejJhTUtCaW9ZY1kzTEJKbDU3eWgrT2wwTThrdzJDeFZIVDJwUFRtVEFWL3IxVHBxZ042N2gzQXZ5bWk0NGIwNnZ4QkU1NzluMWl4dWNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "208db64c-271f-410c-b05f-d96114769a60", "record_id": "flaws_cloudtrail:0000076:208db64c-271f-410c-b05f-d96114769a60", "row_index": 76, "timestamp": "2019-06-28T14:47:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "208db64c-271f-410c-b05f-d96114769a60", "eventTime": "2019-06-28T14:47:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSUYxbFpqRS9jSmM1R2c5aHVRd2oxbUliQjR5cXBTYkJ2TXlrUnFPWEZDdTgzVVVSWFozRmtIM2lMTFdjeWJYWC82dFZFVndXamFtQ0tJZXpHZDhjSmRjcE85MEZSdnJVSGszY0w5UElKbzN5MkZLWHFhWWc4bmJPRWx6MlhCNXFhRFU4SUQyTm1TWTBUMWs2SjYxY3FoVk5hMlJnS2Z3bWVYYUZZVDBhaGZ6QkoxdnJqcDMvNWJ2cUtkM2RlU2pudHBlWWMrWHAxZHEwdThIR3drbUpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e449ee6c-3770-4d3b-b05c-f44c06bb6142", "record_id": "flaws_cloudtrail:0000077:e449ee6c-3770-4d3b-b05c-f44c06bb6142", "row_index": 77, "timestamp": "2019-06-28T14:47:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e449ee6c-3770-4d3b-b05c-f44c06bb6142", "eventTime": "2019-06-28T14:47:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrRU5vYlZFQnFiRUEvL0F2Q0tQYWRjY3FLNit2aU9wUTRYVEZSSkhMRjRuN0I5QTBvWkdLeU1XQTZrMlJiQ1BaNTBJKzdFZzNTYllkWmRpbWxXZzlxOG15SXVaaWN5SHRCMGpnNlNPZmliS2RuVXFJZkVWajRBOXBFL29nQlAyUHdNUHNORTNwNEVoQXU0cU5wM3N5S1g5R2VRdGtaaXN6NnYvMmxMcUZma0dmUzNsL2pOTFl1M3FCRFJ2NTdNcDF0N2hnSWhhVEZMNHd3RTRlZEdUTFhwS3lOV2x1aGowPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "record_id": "flaws_cloudtrail:0000078:60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "row_index": 78, "timestamp": "2019-06-28T14:47:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "eventTime": "2019-06-28T14:47:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyb21DeW5OUDlLWTNCQS9TdEppMUJkWHQya2lTL0x6NE1UYmM3clBmQTE0VU9UZDE5b0dHU3hwVGVka2I4OElmTGZlaXRaUmNXMnZvai9Ccy9CQzFXODl6TnhVbmhsSFI0ZnlpbDZzcCtFdnM3K0FtdDlGYjZUUlJSN0o1UGFoUk5GQWhLQWg5NUJxd01uN2w5NHFGQzRuRzJqNmFTSnZ1WHFabjJjYlNSNHVxTzJoVTR2MUYxbFhyS1pkRUNuaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e449ee6c-3770-4d3b-b05c-f44c06bb6142", "record_id": "flaws_cloudtrail:0000079:e449ee6c-3770-4d3b-b05c-f44c06bb6142", "row_index": 79, "timestamp": "2019-06-28T14:47:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e449ee6c-3770-4d3b-b05c-f44c06bb6142", "eventTime": "2019-06-28T14:47:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrRU5vYlZFQnFiRUEvL0F2Q0tQYWRjY3FLNit2aU9wUTRYVEZSSkhMRjRuN0I5QTBvWkdLeU1XQTZrMlJiQ1BaNTBJKzdFZzNTYllkWmRpbWxXZzlxOG15SXVaaWN5SHRCMGpnNlNPZmliS2RuVXFJZkVWajRBOXBFL29nQlAyUHdNUHNORTNwNEVoQXU0cU5wM3N5S1g5R2VRdGtaaXN6NnYvMmxMcUZma0dmUzNsL2pOTFl1M3FCRFJ2NTdNcDF0N2hnSWhhVEZMNHd3RTRlZEdUTFhwS3lOV2x1aGowPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "record_id": "flaws_cloudtrail:0000080:60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "row_index": 80, "timestamp": "2019-06-28T14:47:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60cd96ad-8f24-44f6-a07e-ee53b7c6a11a", "eventTime": "2019-06-28T14:47:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyb21DeW5OUDlLWTNCQS9TdEppMUJkWHQya2lTL0x6NE1UYmM3clBmQTE0VU9UZDE5b0dHU3hwVGVka2I4OElmTGZlaXRaUmNXMnZvai9Ccy9CQzFXODl6TnhVbmhsSFI0ZnlpbDZzcCtFdnM3K0FtdDlGYjZUUlJSN0o1UGFoUk5GQWhLQWg5NUJxd01uN2w5NHFGQzRuRzJqNmFTSnZ1WHFabjJjYlNSNHVxTzJoVTR2MUYxbFhyS1pkRUNuaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d642b10f-80d1-4556-8c9c-189c8bce7f45", "record_id": "flaws_cloudtrail:0000081:d642b10f-80d1-4556-8c9c-189c8bce7f45", "row_index": 81, "timestamp": "2019-06-28T14:48:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d642b10f-80d1-4556-8c9c-189c8bce7f45", "eventTime": "2019-06-28T14:48:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d642b10f-80d1-4556-8c9c-189c8bce7f45", "record_id": "flaws_cloudtrail:0000082:d642b10f-80d1-4556-8c9c-189c8bce7f45", "row_index": 82, "timestamp": "2019-06-28T14:48:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d642b10f-80d1-4556-8c9c-189c8bce7f45", "eventTime": "2019-06-28T14:48:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7489c20f-2750-49c6-91f0-36cab8bc88f4", "record_id": "flaws_cloudtrail:0000083:7489c20f-2750-49c6-91f0-36cab8bc88f4", "row_index": 83, "timestamp": "2019-06-28T14:48:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7489c20f-2750-49c6-91f0-36cab8bc88f4", "eventTime": "2019-06-28T14:48:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7489c20f-2750-49c6-91f0-36cab8bc88f4", "record_id": "flaws_cloudtrail:0000084:7489c20f-2750-49c6-91f0-36cab8bc88f4", "row_index": 84, "timestamp": "2019-06-28T14:48:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7489c20f-2750-49c6-91f0-36cab8bc88f4", "eventTime": "2019-06-28T14:48:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8354fc82-a06b-424e-8e13-d5e604cf79a8", "record_id": "flaws_cloudtrail:0000085:8354fc82-a06b-424e-8e13-d5e604cf79a8", "row_index": 85, "timestamp": "2019-06-28T14:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8354fc82-a06b-424e-8e13-d5e604cf79a8", "eventTime": "2019-06-28T14:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8354fc82-a06b-424e-8e13-d5e604cf79a8", "record_id": "flaws_cloudtrail:0000086:8354fc82-a06b-424e-8e13-d5e604cf79a8", "row_index": 86, "timestamp": "2019-06-28T14:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8354fc82-a06b-424e-8e13-d5e604cf79a8", "eventTime": "2019-06-28T14:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2876e1b5-8164-4c89-b3a0-1a7a858886b24", "record_id": "flaws_cloudtrail:0000087:2876e1b5-8164-4c89-b3a0-1a7a858886b24", "row_index": 87, "timestamp": "2019-06-28T14:48:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2876e1b5-8164-4c89-b3a0-1a7a858886b24", "eventTime": "2019-06-28T14:48:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2876e1b5-8164-4c89-b3a0-1a7a858886b24", "record_id": "flaws_cloudtrail:0000088:2876e1b5-8164-4c89-b3a0-1a7a858886b24", "row_index": 88, "timestamp": "2019-06-28T14:48:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2876e1b5-8164-4c89-b3a0-1a7a858886b24", "eventTime": "2019-06-28T14:48:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419953cd-8077-45be-a1ea-99a3f9e65fb7", "record_id": "flaws_cloudtrail:0000089:419953cd-8077-45be-a1ea-99a3f9e65fb7", "row_index": 89, "timestamp": "2019-06-28T14:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419953cd-8077-45be-a1ea-99a3f9e65fb7", "eventTime": "2019-06-28T14:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVkxQcXlLWHNxSm81SmpZQUY5VS8yWDdXNkJVNkc4U2tnVVo2WnMxUjlSWW5BSUpOMVJQM0wzbVZGb1N4K3BROXpFQ3dWcE8rM2hqaC9WaU5kR3JNa00wRGZmcXEzMmc4R21ydjF4WVhjd1hTQ1FYVHBXN3dldzBOblBXK1ptWGk2L0ZiYVdRWjAwNFRHWWxLWEU3eHN5WFR6UGYxd0k3UkFxU3c4OU9SbFhvWGhucEZqeXlFSUpLeERIR3VCTFRINWRuY1RqNW1xekUwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419953cd-8077-45be-a1ea-99a3f9e65fb7", "record_id": "flaws_cloudtrail:0000090:419953cd-8077-45be-a1ea-99a3f9e65fb7", "row_index": 90, "timestamp": "2019-06-28T14:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419953cd-8077-45be-a1ea-99a3f9e65fb7", "eventTime": "2019-06-28T14:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVkxQcXlLWHNxSm81SmpZQUY5VS8yWDdXNkJVNkc4U2tnVVo2WnMxUjlSWW5BSUpOMVJQM0wzbVZGb1N4K3BROXpFQ3dWcE8rM2hqaC9WaU5kR3JNa00wRGZmcXEzMmc4R21ydjF4WVhjd1hTQ1FYVHBXN3dldzBOblBXK1ptWGk2L0ZiYVdRWjAwNFRHWWxLWEU3eHN5WFR6UGYxd0k3UkFxU3c4OU9SbFhvWGhucEZqeXlFSUpLeERIR3VCTFRINWRuY1RqNW1xekUwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db045583b-7b9e-41b4-857a-f991c47da74e", "record_id": "flaws_cloudtrail:0000091:db045583b-7b9e-41b4-857a-f991c47da74e", "row_index": 91, "timestamp": "2019-06-28T14:48:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db045583b-7b9e-41b4-857a-f991c47da74e", "eventTime": "2019-06-28T14:48:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxQXkxbndyMlcxczZNM1h6by9SbSt1ckVLSDk1N1JEMzRvYmJPSkhpa0ZtN2JnZFc3b2x3My92ekpzWHFTendtUnNPVXU5bUNqV3E4WVI1NEkyVjNvc1FQK1c1SkJiUUpDa3U4dTEybm5UMFJtaHBPaG9DYlhsOUNxYStVblZVM3FnMS9FNE13LzNRNW9lOGRhak40ZmU1cjlNSTJHM20zOHlUdjV1U2pmQzZCUnR6QS9mUlhYRWx0Q2tJeEdYaDUyTlNKZlIxa25JSWo0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db045583b-7b9e-41b4-857a-f991c47da74e", "record_id": "flaws_cloudtrail:0000092:db045583b-7b9e-41b4-857a-f991c47da74e", "row_index": 92, "timestamp": "2019-06-28T14:48:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db045583b-7b9e-41b4-857a-f991c47da74e", "eventTime": "2019-06-28T14:48:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxQXkxbndyMlcxczZNM1h6by9SbSt1ckVLSDk1N1JEMzRvYmJPSkhpa0ZtN2JnZFc3b2x3My92ekpzWHFTendtUnNPVXU5bUNqV3E4WVI1NEkyVjNvc1FQK1c1SkJiUUpDa3U4dTEybm5UMFJtaHBPaG9DYlhsOUNxYStVblZVM3FnMS9FNE13LzNRNW9lOGRhak40ZmU1cjlNSTJHM20zOHlUdjV1U2pmQzZCUnR6QS9mUlhYRWx0Q2tJeEdYaDUyTlNKZlIxa25JSWo0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c71e8782-205f-45fe-9b71-d890f3ff2e17", "record_id": "flaws_cloudtrail:0000093:c71e8782-205f-45fe-9b71-d890f3ff2e17", "row_index": 93, "timestamp": "2019-06-28T14:48:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c71e8782-205f-45fe-9b71-d890f3ff2e17", "eventTime": "2019-06-28T14:48:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjMycERxalRwWGhCWmpjd1hrQm9URGZCMUJiSHRjdFVXa1NwL21DazNNZks5bDUzRTV2RFJ0cVRWNVhnNzNrcTFiMTJZMm9QeDVYT2pCZ0Ryb0k2MG5lTjEvYUdvN212dkJZU3NxM3dkS2ZyZEEyOGx3WVRyeWxVT3laQVdaaHJVeWhGMyt1K0J3bDFGNVJ6cUYzbmd4eDZaNTdvVVR1MVprY2JDZHIxN2MyQ3ZTSGhONHNNZjJ1dVErM2hzYkI5WTdVVStiei9VTjdsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c71e8782-205f-45fe-9b71-d890f3ff2e17", "record_id": "flaws_cloudtrail:0000094:c71e8782-205f-45fe-9b71-d890f3ff2e17", "row_index": 94, "timestamp": "2019-06-28T14:48:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c71e8782-205f-45fe-9b71-d890f3ff2e17", "eventTime": "2019-06-28T14:48:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjMycERxalRwWGhCWmpjd1hrQm9URGZCMUJiSHRjdFVXa1NwL21DazNNZks5bDUzRTV2RFJ0cVRWNVhnNzNrcTFiMTJZMm9QeDVYT2pCZ0Ryb0k2MG5lTjEvYUdvN212dkJZU3NxM3dkS2ZyZEEyOGx3WVRyeWxVT3laQVdaaHJVeWhGMyt1K0J3bDFGNVJ6cUYzbmd4eDZaNTdvVVR1MVprY2JDZHIxN2MyQ3ZTSGhONHNNZjJ1dVErM2hzYkI5WTdVVStiei9VTjdsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58c68cec-f619-47ac-862c-d4676fcccb02", "record_id": "flaws_cloudtrail:0000095:58c68cec-f619-47ac-862c-d4676fcccb02", "row_index": 95, "timestamp": "2019-06-28T14:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58c68cec-f619-47ac-862c-d4676fcccb02", "eventTime": "2019-06-28T14:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrVXVqVEpvd1R1UWRPSXhrQ0wxaVJzeVhoUmYrWEVvNFYwSHdMcnhBbzVKalNjUElwN2p1RngxQWdUMWg5aWp1ajFtaytRS0o0ZnFuc3lVb0hlaGtHRXc0aTB0VFF0eEZGWE9hSW5jbkRmV2ZZakJ3MWp1R2dXR1NEbHFTMzJ6czhKQ0djUDh0QXpXWUpFNFpsZ25XVFVwbkl3WStmRG1hMGY5ZzlrZ0hzeXBMQ1ViVlB3R0xXNHZKWXZ0ekpyNzdHdCtnSEpyNlZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58c68cec-f619-47ac-862c-d4676fcccb02", "record_id": "flaws_cloudtrail:0000096:58c68cec-f619-47ac-862c-d4676fcccb02", "row_index": 96, "timestamp": "2019-06-28T14:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58c68cec-f619-47ac-862c-d4676fcccb02", "eventTime": "2019-06-28T14:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrVXVqVEpvd1R1UWRPSXhrQ0wxaVJzeVhoUmYrWEVvNFYwSHdMcnhBbzVKalNjUElwN2p1RngxQWdUMWg5aWp1ajFtaytRS0o0ZnFuc3lVb0hlaGtHRXc0aTB0VFF0eEZGWE9hSW5jbkRmV2ZZakJ3MWp1R2dXR1NEbHFTMzJ6czhKQ0djUDh0QXpXWUpFNFpsZ25XVFVwbkl3WStmRG1hMGY5ZzlrZ0hzeXBMQ1ViVlB3R0xXNHZKWXZ0ekpyNzdHdCtnSEpyNlZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "record_id": "flaws_cloudtrail:0000097:a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "row_index": 97, "timestamp": "2019-06-28T14:48:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "eventTime": "2019-06-28T14:48:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzV1JQTkpxMEo0T3AyaWtBbWM3aWF3eFU3R3J2QmZkUzQvdG53Vm5uQkdtMmNXMkFDYjQxOGNHUitWWDBKeXF0YWVXZHhsYVBVQ2dEZytkL3pNd2lraGtDMUpOZlhTOWV0YWVKeFlDUHVTcVd1dGIrWHltK2JZVEQrZnNDV3lNbzVRdUhyc1dUQ2taS1NaREx6dUsvOUhhU3dzVGdoNEJuUnYrdjYyRC9HUEQ4QXlaNFBGZWZLWWZJbUNxMzlyZVdPU0M0ZHVjQ2tRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "record_id": "flaws_cloudtrail:0000098:a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "row_index": 98, "timestamp": "2019-06-28T14:48:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04e1974-134c-4d6a-aee8-cc7cf8e1c67c", "eventTime": "2019-06-28T14:48:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzV1JQTkpxMEo0T3AyaWtBbWM3aWF3eFU3R3J2QmZkUzQvdG53Vm5uQkdtMmNXMkFDYjQxOGNHUitWWDBKeXF0YWVXZHhsYVBVQ2dEZytkL3pNd2lraGtDMUpOZlhTOWV0YWVKeFlDUHVTcVd1dGIrWHltK2JZVEQrZnNDV3lNbzVRdUhyc1dUQ2taS1NaREx6dUsvOUhhU3dzVGdoNEJuUnYrdjYyRC9HUEQ4QXlaNFBGZWZLWWZJbUNxMzlyZVdPU0M0ZHVjQ2tRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "record_id": "flaws_cloudtrail:0000099:3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "row_index": 99, "timestamp": "2019-06-28T14:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "eventTime": "2019-06-28T14:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDek8vd20yU0VydTVicEdtdndOaFg1R2hxNFFQU3dHSW1KUjFRZjlVbk00ZldmcTVNT3QyMmNKQkw5elhBN2VzTXBPQnoremJTK0dsUDFCNG1FZGRZSlZGbmd1M1ZXTUhDKzVBcWE0TDFXcVBKVnYzWWEwc3AzUFVYWnkyZUZaNjlYRExwbDdDYmxWRjR2WUR6dlAwVEJpQ3lSTmRJbFhaa2ZYSTJsTmdoSlpPRTZTVDhxUy90cFlxRWJMVXh5Z29pU3UraE5JOW9QemUrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "record_id": "flaws_cloudtrail:0000100:3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "row_index": 100, "timestamp": "2019-06-28T14:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a7c0686-020b-4b1f-a0bf-2040cc731c8c", "eventTime": "2019-06-28T14:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDek8vd20yU0VydTVicEdtdndOaFg1R2hxNFFQU3dHSW1KUjFRZjlVbk00ZldmcTVNT3QyMmNKQkw5elhBN2VzTXBPQnoremJTK0dsUDFCNG1FZGRZSlZGbmd1M1ZXTUhDKzVBcWE0TDFXcVBKVnYzWWEwc3AzUFVYWnkyZUZaNjlYRExwbDdDYmxWRjR2WUR6dlAwVEJpQ3lSTmRJbFhaa2ZYSTJsTmdoSlpPRTZTVDhxUy90cFlxRWJMVXh5Z29pU3UraE5JOW9QemUrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92d63e5f-ead6-4606-a7c1-8eef8077f729", "record_id": "flaws_cloudtrail:0000101:92d63e5f-ead6-4606-a7c1-8eef8077f729", "row_index": 101, "timestamp": "2019-06-28T14:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92d63e5f-ead6-4606-a7c1-8eef8077f729", "eventTime": "2019-06-28T14:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMandHbXROTGw4dHRGZjNzTVdmK0ZiRGlMbXU1N1RDS21ocHJkdlpOL1o0SEdxL21zaHBMc0ZjV0R6c08zZzNlOTFIYW4za3UwRkljSEJqMElEWC9EMVdXTFhTNDRXSUpIUTFlYXh1TXNYYzZOWEtySlhhVk9YTkJ2WjA5U2pZOUpEQUFJd0JHeXVPYVB5aGJWSWxqdjFiZGF2WlFUNTZRdXM1SWcwZmRrMG9Ta0UraXFIMzNUMVM1V0M5NFYwTldwWTFjaThJeGRjSzV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c12d70cb-3dc6-477e-8a21-271bf54d21e3", "record_id": "flaws_cloudtrail:0000102:c12d70cb-3dc6-477e-8a21-271bf54d21e3", "row_index": 102, "timestamp": "2019-06-28T14:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c12d70cb-3dc6-477e-8a21-271bf54d21e3", "eventTime": "2019-06-28T14:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOXZXSG51WXIyT01paENtRndDU0EwRStoNHdFQ05aQllYeDhLY1pra01qNW04ZjRyREpac0Q1bEhDSVlpTHJIbEVPMXY3b0NvWllzOGdrelloRVpoZ0oxQkEzMVFubkp1cmMvTVdoQ1EyQkRFRXhNdjFERTIvWVlCV1RUSkcycnMrZEwxcUhpMCtHSGhlSEZYUzhRWUxmTkJGMmdCK1NKRnF1TlVXTHAxSTRabUgwakVZM2l5T0gvSjBUR2pTaGtpTDErRytDMmJKUGZIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92d63e5f-ead6-4606-a7c1-8eef8077f729", "record_id": "flaws_cloudtrail:0000103:92d63e5f-ead6-4606-a7c1-8eef8077f729", "row_index": 103, "timestamp": "2019-06-28T14:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92d63e5f-ead6-4606-a7c1-8eef8077f729", "eventTime": "2019-06-28T14:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMandHbXROTGw4dHRGZjNzTVdmK0ZiRGlMbXU1N1RDS21ocHJkdlpOL1o0SEdxL21zaHBMc0ZjV0R6c08zZzNlOTFIYW4za3UwRkljSEJqMElEWC9EMVdXTFhTNDRXSUpIUTFlYXh1TXNYYzZOWEtySlhhVk9YTkJ2WjA5U2pZOUpEQUFJd0JHeXVPYVB5aGJWSWxqdjFiZGF2WlFUNTZRdXM1SWcwZmRrMG9Ta0UraXFIMzNUMVM1V0M5NFYwTldwWTFjaThJeGRjSzV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c12d70cb-3dc6-477e-8a21-271bf54d21e3", "record_id": "flaws_cloudtrail:0000104:c12d70cb-3dc6-477e-8a21-271bf54d21e3", "row_index": 104, "timestamp": "2019-06-28T14:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c12d70cb-3dc6-477e-8a21-271bf54d21e3", "eventTime": "2019-06-28T14:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOXZXSG51WXIyT01paENtRndDU0EwRStoNHdFQ05aQllYeDhLY1pra01qNW04ZjRyREpac0Q1bEhDSVlpTHJIbEVPMXY3b0NvWllzOGdrelloRVpoZ0oxQkEzMVFubkp1cmMvTVdoQ1EyQkRFRXhNdjFERTIvWVlCV1RUSkcycnMrZEwxcUhpMCtHSGhlSEZYUzhRWUxmTkJGMmdCK1NKRnF1TlVXTHAxSTRabUgwakVZM2l5T0gvSjBUR2pTaGtpTDErRytDMmJKUGZIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f20ede16-c41c-4592-a594-9f7eadbef149", "record_id": "flaws_cloudtrail:0000105:f20ede16-c41c-4592-a594-9f7eadbef149", "row_index": 105, "timestamp": "2019-06-28T14:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f20ede16-c41c-4592-a594-9f7eadbef149", "eventTime": "2019-06-28T14:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5YWM3dW9RYjNOQ3hEZ215UkF3a0pQRVRuR0xHejUxK0VxMGp3SURmcTFwSElOUWtpZDdNaUlCSjJsY1BzUERXN3FYUHR1dUZ0VXM2aVdsTmx1M01SODF6VjJQTDdnejZYZi9Lc3BnK3Vld0NTOTdZKzRmb2tzQUJXbW02cnFvYW9WUzl3elM2NUQvQU9xU3JFNnZPcE9lclV4b1BiUkJVa2ZvUkNKZFJ6TXRKMjlMclcvWWU2Z0gxbWhtNEo2aXBWblFsWkhteHV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f20ede16-c41c-4592-a594-9f7eadbef149", "record_id": "flaws_cloudtrail:0000106:f20ede16-c41c-4592-a594-9f7eadbef149", "row_index": 106, "timestamp": "2019-06-28T14:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f20ede16-c41c-4592-a594-9f7eadbef149", "eventTime": "2019-06-28T14:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5YWM3dW9RYjNOQ3hEZ215UkF3a0pQRVRuR0xHejUxK0VxMGp3SURmcTFwSElOUWtpZDdNaUlCSjJsY1BzUERXN3FYUHR1dUZ0VXM2aVdsTmx1M01SODF6VjJQTDdnejZYZi9Lc3BnK3Vld0NTOTdZKzRmb2tzQUJXbW02cnFvYW9WUzl3elM2NUQvQU9xU3JFNnZPcE9lclV4b1BiUkJVa2ZvUkNKZFJ6TXRKMjlMclcvWWU2Z0gxbWhtNEo2aXBWblFsWkhteHV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3269ee-fa6b-416d-9adc-392ef1fff03c", "record_id": "flaws_cloudtrail:0000107:8d3269ee-fa6b-416d-9adc-392ef1fff03c", "row_index": 107, "timestamp": "2019-06-28T14:48:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3269ee-fa6b-416d-9adc-392ef1fff03c", "eventTime": "2019-06-28T14:48:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVFlNWmRsUExSTlhCVWFYMnVuQ1JUN0Q1S2IwRDFqcDZSc0VGbW9WdmhYeWMrMVR1SEJmNFNreHJlZmFaOHlHOW1walExZ1RBVnlaU0s3NWNtMGJMVys4U3VCR2NqUmtITjFYT2dTK2xjZEU2RkVXdktDQS93MmF5d0Z4ZldtVFE2SnFEVXRFcUtDZ2FCQ3VYU2Y5amE0dDZMQklBODdPZHBuaTM3dnJTUmNpcS9oaWJBRDdiK2FDb3h5eG04Mmlyd3NEaWthZmpRZEFlZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3269ee-fa6b-416d-9adc-392ef1fff03c", "record_id": "flaws_cloudtrail:0000108:8d3269ee-fa6b-416d-9adc-392ef1fff03c", "row_index": 108, "timestamp": "2019-06-28T14:48:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3269ee-fa6b-416d-9adc-392ef1fff03c", "eventTime": "2019-06-28T14:48:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVFlNWmRsUExSTlhCVWFYMnVuQ1JUN0Q1S2IwRDFqcDZSc0VGbW9WdmhYeWMrMVR1SEJmNFNreHJlZmFaOHlHOW1walExZ1RBVnlaU0s3NWNtMGJMVys4U3VCR2NqUmtITjFYT2dTK2xjZEU2RkVXdktDQS93MmF5d0Z4ZldtVFE2SnFEVXRFcUtDZ2FCQ3VYU2Y5amE0dDZMQklBODdPZHBuaTM3dnJTUmNpcS9oaWJBRDdiK2FDb3h5eG04Mmlyd3NEaWthZmpRZEFlZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "record_id": "flaws_cloudtrail:0000109:3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "row_index": 109, "timestamp": "2019-06-28T14:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "eventTime": "2019-06-28T14:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnaHNSemdXQjZjcWMydTErZmlHVFkvSXR2Y2lvd2JYM0hqUFNqSVZqRkx5NjhEQXdmbldZUk44OVE5VnRXNTljc1V6YlQvNENzbi91OWQrbFRjZVduMDhZa0RqTVV5eUdZYmVEZG1lZzdDa0MyVnEvSStsTkZCUWlCZDFGYVdoTmhpMllqeVpteHFoUlBMOHhMWGhMQ2JNcTBoOUhOeDlGZTBTVmRXWVMxdk9nV2RyWU0wRjVOSDFNZ0xFNGp1RE9OOU1maDlmK09jRWgxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ea249c-f4a5-4ad3-b640-cb84f77213d", "record_id": "flaws_cloudtrail:0000110:65ea249c-f4a5-4ad3-b640-cb84f77213d", "row_index": 110, "timestamp": "2019-06-28T14:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ea249c-f4a5-4ad3-b640-cb84f77213d", "eventTime": "2019-06-28T14:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTlBSd2loVElEMGF0aU1wcG1XQWFHdUNIWlAyVVRxTnpjbXRuZjZWVGFmSXN1M2dxWmJqaWUzdGoxcXluWkYyUGJXdTAvYXNJeEQvWWVWQkkwa2xJeTVUZG81VzYwSjVNOUJkMkFxRlJNUDN6b1kvRFRNSE5FbFNRY1JWNXhLK1ZqRVRGTFNDRSt2RUpwa3JtRlYwS01Rb2h6UThFRGZaNnBEWVorSDRUSWZaWUwvdk1nN3BSRkx6ek9vVTY1TmFNYlorbENmMWZDSkxVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "record_id": "flaws_cloudtrail:0000111:3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "row_index": 111, "timestamp": "2019-06-28T14:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3623c2d4-5035-4f3a-8b7b-36fc1fffc856", "eventTime": "2019-06-28T14:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnaHNSemdXQjZjcWMydTErZmlHVFkvSXR2Y2lvd2JYM0hqUFNqSVZqRkx5NjhEQXdmbldZUk44OVE5VnRXNTljc1V6YlQvNENzbi91OWQrbFRjZVduMDhZa0RqTVV5eUdZYmVEZG1lZzdDa0MyVnEvSStsTkZCUWlCZDFGYVdoTmhpMllqeVpteHFoUlBMOHhMWGhMQ2JNcTBoOUhOeDlGZTBTVmRXWVMxdk9nV2RyWU0wRjVOSDFNZ0xFNGp1RE9OOU1maDlmK09jRWgxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ea249c-f4a5-4ad3-b640-cb84f77213d", "record_id": "flaws_cloudtrail:0000112:65ea249c-f4a5-4ad3-b640-cb84f77213d", "row_index": 112, "timestamp": "2019-06-28T14:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ea249c-f4a5-4ad3-b640-cb84f77213d", "eventTime": "2019-06-28T14:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTlBSd2loVElEMGF0aU1wcG1XQWFHdUNIWlAyVVRxTnpjbXRuZjZWVGFmSXN1M2dxWmJqaWUzdGoxcXluWkYyUGJXdTAvYXNJeEQvWWVWQkkwa2xJeTVUZG81VzYwSjVNOUJkMkFxRlJNUDN6b1kvRFRNSE5FbFNRY1JWNXhLK1ZqRVRGTFNDRSt2RUpwa3JtRlYwS01Rb2h6UThFRGZaNnBEWVorSDRUSWZaWUwvdk1nN3BSRkx6ek9vVTY1TmFNYlorbENmMWZDSkxVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017bac26-2fbb-413a-b510-56149a14f3", "record_id": "flaws_cloudtrail:0000113:017bac26-2fbb-413a-b510-56149a14f3", "row_index": 113, "timestamp": "2019-06-28T14:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017bac26-2fbb-413a-b510-56149a14f3", "eventTime": "2019-06-28T14:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYWjlHZTB3YjNaeDYwU2NJZ0JFTUhmcFh3aEVNUFJybVpVMTNzY2hmM2Qzd2xCRWtxYzRyMkRudU56RFBoUGV6YzZuSkwyYTVEREZaUGw3UFBOZis1ZUlTQWZOTXJob0tQcS9hQTh4a0xhYktpaXRFL2tjU0tpc2Q4R2lveVNWRE42cTVTc1UxWUsyd1UybDZueUIrdXpzWXQ4am9TTkorUy9QWFczTlROZU9jZkUvbzczakQ1d3VNT0F2YTQzd29aZXU0cVZlY3ZoRkNTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c46df9c-299a-40de-9e47-4af2cbf73d5a", "record_id": "flaws_cloudtrail:0000114:6c46df9c-299a-40de-9e47-4af2cbf73d5a", "row_index": 114, "timestamp": "2019-06-28T14:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c46df9c-299a-40de-9e47-4af2cbf73d5a", "eventTime": "2019-06-28T14:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUaURpL3h4TmNDclRxcUV3eGZzbkxGSGRwMXBkbm8vOEl3VmpDam9uZ1FjZjJhbzBlR0VFQWlkbXlvYkpYQkNsRlduSVB5Q3dPVndRdmxiUVN0THFOWW9jRnN6S2VKNDQvVkxQaUdVaHQ2RUpzN3FwcG05ZFdPS05NWE96d1FGWU00c0RMOXRkWVhoWkhWZXROZ2JiWkdPRG04YWU4VXgwcDA2NVRNczE4SHpIUTEyaXg0ZDhvcUpGNStNalFwWHRjSkp2aEl0K2JwWEdubXpoUEJkdDBFZXZqa0ZmLy9NPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017bac26-2fbb-413a-b510-56149a14f3", "record_id": "flaws_cloudtrail:0000115:017bac26-2fbb-413a-b510-56149a14f3", "row_index": 115, "timestamp": "2019-06-28T14:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017bac26-2fbb-413a-b510-56149a14f3", "eventTime": "2019-06-28T14:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYWjlHZTB3YjNaeDYwU2NJZ0JFTUhmcFh3aEVNUFJybVpVMTNzY2hmM2Qzd2xCRWtxYzRyMkRudU56RFBoUGV6YzZuSkwyYTVEREZaUGw3UFBOZis1ZUlTQWZOTXJob0tQcS9hQTh4a0xhYktpaXRFL2tjU0tpc2Q4R2lveVNWRE42cTVTc1UxWUsyd1UybDZueUIrdXpzWXQ4am9TTkorUy9QWFczTlROZU9jZkUvbzczakQ1d3VNT0F2YTQzd29aZXU0cVZlY3ZoRkNTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c46df9c-299a-40de-9e47-4af2cbf73d5a", "record_id": "flaws_cloudtrail:0000116:6c46df9c-299a-40de-9e47-4af2cbf73d5a", "row_index": 116, "timestamp": "2019-06-28T14:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c46df9c-299a-40de-9e47-4af2cbf73d5a", "eventTime": "2019-06-28T14:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUaURpL3h4TmNDclRxcUV3eGZzbkxGSGRwMXBkbm8vOEl3VmpDam9uZ1FjZjJhbzBlR0VFQWlkbXlvYkpYQkNsRlduSVB5Q3dPVndRdmxiUVN0THFOWW9jRnN6S2VKNDQvVkxQaUdVaHQ2RUpzN3FwcG05ZFdPS05NWE96d1FGWU00c0RMOXRkWVhoWkhWZXROZ2JiWkdPRG04YWU4VXgwcDA2NVRNczE4SHpIUTEyaXg0ZDhvcUpGNStNalFwWHRjSkp2aEl0K2JwWEdubXpoUEJkdDBFZXZqa0ZmLy9NPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "record_id": "flaws_cloudtrail:0000117:be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "row_index": 117, "timestamp": "2019-06-28T14:48:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "eventTime": "2019-06-28T14:48:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTU1WL1FWZ0hCZjFodEhmRFQ4eTlCN3M2V0IwVUsrMEdiOE9Ub0dSUXZLUEpQdjlINGFpU1JwVXc4RFkzaE1aeTJsR0JxOG42Rk5GVVdNSHRKdmtOVlJOdThFaHpCWnRxME1yQTZGeXZRWVRtc3FUd0Nadzh4cHVKVG5DajU4MkcycHFRMUNyTUhpcHEwVDhKdDVlRFVPNG1ZNk9OK05ORGNDS09DenY4OHNZM0N4NVhvUHR6dEVXSDRmWmxHaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db13f522-e703-4548-a367-380435e8", "record_id": "flaws_cloudtrail:0000118:db13f522-e703-4548-a367-380435e8", "row_index": 118, "timestamp": "2019-06-28T14:48:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db13f522-e703-4548-a367-380435e8", "eventTime": "2019-06-28T14:48:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPbDBsWHNmZXR4OEdEN2llb0NIWTJPU1MrYy94TlcvaUhFc0hrQU1nQmFXcmVRV1pkaWdRa2trbUlSRW03QjdBSzdyay9MOTh1TlNWZEFjSUdFNCtMakZXdmJxWnFPcC8yMnEzT05OT1pzY0NOMktXTkVLYjBMczd1c1hLZjFRSDVsV3pWZzkwZVYwUXcvczN3N0JldUs1d2RUVkRGaVZ4ajBoaTByZ1B1YjFLa2FkSDBYVXZBYkk3S1JPU1g1QmNBVE96ZFNXK2EvQklvQzlqb3RxSDVmTmhrWTQxOFJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "record_id": "flaws_cloudtrail:0000119:be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "row_index": 119, "timestamp": "2019-06-28T14:48:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be60ab4f-cb8b-4689-a7f9-09e6eac74c06", "eventTime": "2019-06-28T14:48:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTU1WL1FWZ0hCZjFodEhmRFQ4eTlCN3M2V0IwVUsrMEdiOE9Ub0dSUXZLUEpQdjlINGFpU1JwVXc4RFkzaE1aeTJsR0JxOG42Rk5GVVdNSHRKdmtOVlJOdThFaHpCWnRxME1yQTZGeXZRWVRtc3FUd0Nadzh4cHVKVG5DajU4MkcycHFRMUNyTUhpcHEwVDhKdDVlRFVPNG1ZNk9OK05ORGNDS09DenY4OHNZM0N4NVhvUHR6dEVXSDRmWmxHaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db13f522-e703-4548-a367-380435e8", "record_id": "flaws_cloudtrail:0000120:db13f522-e703-4548-a367-380435e8", "row_index": 120, "timestamp": "2019-06-28T14:48:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db13f522-e703-4548-a367-380435e8", "eventTime": "2019-06-28T14:48:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPbDBsWHNmZXR4OEdEN2llb0NIWTJPU1MrYy94TlcvaUhFc0hrQU1nQmFXcmVRV1pkaWdRa2trbUlSRW03QjdBSzdyay9MOTh1TlNWZEFjSUdFNCtMakZXdmJxWnFPcC8yMnEzT05OT1pzY0NOMktXTkVLYjBMczd1c1hLZjFRSDVsV3pWZzkwZVYwUXcvczN3N0JldUs1d2RUVkRGaVZ4ajBoaTByZ1B1YjFLa2FkSDBYVXZBYkk3S1JPU1g1QmNBVE96ZFNXK2EvQklvQzlqb3RxSDVmTmhrWTQxOFJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87264a6-1fcf-47b0-ad5a-5c984ae7d934", "record_id": "flaws_cloudtrail:0000121:87264a6-1fcf-47b0-ad5a-5c984ae7d934", "row_index": 121, "timestamp": "2019-06-28T14:48:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87264a6-1fcf-47b0-ad5a-5c984ae7d934", "eventTime": "2019-06-28T14:48:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHODN1c1F0ajNnTlBvQnNodVNGOEFMc09Va0FGRiszdWhBWnVtdkJnWWZQREVWSmQ3dUo3a3JIdE01N1M2MzhPbTdRcVNvb1djUHlwRGJYTEFvWGcvdTNqV1cxWFNRS0hUNmplRUFSR084b1RkSkxSSE1lUVBLeDczRVpVQk5hS1djR3p0YXZzdlQ5d3FUSHJyTUR1T0o2Yzd0UHJ6VXVWVU9saDZRL3pNemJiM3ZVSVd3RFlXN0N2L1RDZXhHYUJyZ2xLWlc0ZXZsZHN3cllnVG9iVUZvOW5CSEcvMTBnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "record_id": "flaws_cloudtrail:0000122:3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "row_index": 122, "timestamp": "2019-06-28T14:48:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "eventTime": "2019-06-28T14:48:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjZm5lRmZFQW9MZFVZam0rREsrb3F1aVdablU5aU01OWRyUmxlb2tFMWNvU1phd0puZm1lN0RnYlRRT1pMTWREcTVjZU80anFielJZRjVGeTl5VDFJdDRSNGFhVkhYT3ptMW9kU2lyOExGY280TENtNUV3SHcySHpSUDR2MGxGK2pDdnVkbklJc3ZiZDkwQjBGQ2RWSmwrUkttbmhIbGVWejg4OFZTQ21BL1ljNFJwUVVwSzA3ZFNSbzNvak9iTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87264a6-1fcf-47b0-ad5a-5c984ae7d934", "record_id": "flaws_cloudtrail:0000123:87264a6-1fcf-47b0-ad5a-5c984ae7d934", "row_index": 123, "timestamp": "2019-06-28T14:48:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87264a6-1fcf-47b0-ad5a-5c984ae7d934", "eventTime": "2019-06-28T14:48:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHODN1c1F0ajNnTlBvQnNodVNGOEFMc09Va0FGRiszdWhBWnVtdkJnWWZQREVWSmQ3dUo3a3JIdE01N1M2MzhPbTdRcVNvb1djUHlwRGJYTEFvWGcvdTNqV1cxWFNRS0hUNmplRUFSR084b1RkSkxSSE1lUVBLeDczRVpVQk5hS1djR3p0YXZzdlQ5d3FUSHJyTUR1T0o2Yzd0UHJ6VXVWVU9saDZRL3pNemJiM3ZVSVd3RFlXN0N2L1RDZXhHYUJyZ2xLWlc0ZXZsZHN3cllnVG9iVUZvOW5CSEcvMTBnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "record_id": "flaws_cloudtrail:0000124:3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "row_index": 124, "timestamp": "2019-06-28T14:48:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e2ef8f0-08bd-4784-9d9d-01eaee40b5e0", "eventTime": "2019-06-28T14:48:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjZm5lRmZFQW9MZFVZam0rREsrb3F1aVdablU5aU01OWRyUmxlb2tFMWNvU1phd0puZm1lN0RnYlRRT1pMTWREcTVjZU80anFielJZRjVGeTl5VDFJdDRSNGFhVkhYT3ptMW9kU2lyOExGY280TENtNUV3SHcySHpSUDR2MGxGK2pDdnVkbklJc3ZiZDkwQjBGQ2RWSmwrUkttbmhIbGVWejg4OFZTQ21BL1ljNFJwUVVwSzA3ZFNSbzNvak9iTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e821aa11-0274-486c-a5d0-811b556c3b32", "record_id": "flaws_cloudtrail:0000125:e821aa11-0274-486c-a5d0-811b556c3b32", "row_index": 125, "timestamp": "2019-06-28T14:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e821aa11-0274-486c-a5d0-811b556c3b32", "eventTime": "2019-06-28T14:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGNlZORzNSU3Z6c3E4Q1JCVmVPQnhVVkxpaU5GRENqRGNremFOeVpoUVhvUzhyOTVvS3hFNTlDeCs5ZDBnVGhIZFgzVmZxdGwzVGk0cEFYYUtsVmFFYlp4eDZtNDZuNTVCTkJwRUJ2N3ZPMzY5YnE2M3p0cW1RYVViY0FFclExOWtOai8xbUM3UktMeXd5ZlFwUEYxL0I3alFEM2FNUUpuTXBiNUdZOERWUjBDOVB5Yld1MEZuTGY0dDdKdHRHZjNnMFhmaUZwT3RIa1pPVVFDcWNLWDlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e821aa11-0274-486c-a5d0-811b556c3b32", "record_id": "flaws_cloudtrail:0000126:e821aa11-0274-486c-a5d0-811b556c3b32", "row_index": 126, "timestamp": "2019-06-28T14:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e821aa11-0274-486c-a5d0-811b556c3b32", "eventTime": "2019-06-28T14:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGNlZORzNSU3Z6c3E4Q1JCVmVPQnhVVkxpaU5GRENqRGNremFOeVpoUVhvUzhyOTVvS3hFNTlDeCs5ZDBnVGhIZFgzVmZxdGwzVGk0cEFYYUtsVmFFYlp4eDZtNDZuNTVCTkJwRUJ2N3ZPMzY5YnE2M3p0cW1RYVViY0FFclExOWtOai8xbUM3UktMeXd5ZlFwUEYxL0I3alFEM2FNUUpuTXBiNUdZOERWUjBDOVB5Yld1MEZuTGY0dDdKdHRHZjNnMFhmaUZwT3RIa1pPVVFDcWNLWDlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17986a5f-dace-45c6-b896-902e60737", "record_id": "flaws_cloudtrail:0000127:17986a5f-dace-45c6-b896-902e60737", "row_index": 127, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17986a5f-dace-45c6-b896-902e60737", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2K3dkcnROUnRsU0xaTHUvMldBM01wbmxnWGlGR0xwUTdkeFI5SXU2K3hNVHM5c1ovaWY5R05Lck9RZkhqb29YRFRiMXhZLzBLbnNKenRuU1FrK2p0VE9tVFRsaThiU0RSamkyZjFNZ3BXNXlrYnNncmlrSm9laDFQMUxzNUN1UXYyREU2bXc0SjB1cUdYZlM3ZmpyUUlzb2U0ejN2bEVON01pTXQ3OU8vK3c3QXBjRit6ZHlJQVMrbmY3ZWVmaVgvcnFSOXN0UGZKUXNxRzl1RisxQ3lJV3lhSk9LN1dvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078a926b-0fa6-4d09-946d-ec19f60814d7", "record_id": "flaws_cloudtrail:0000128:078a926b-0fa6-4d09-946d-ec19f60814d7", "row_index": 128, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078a926b-0fa6-4d09-946d-ec19f60814d7", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhajNOVnd2ak12aytkTkdmbDZKWFVOdmRQMldzSmFnMWllbkY2bWhXd21hUDhMYm1lMEJrOTN4UGE0QXZxSERNenVnVEF2cjVqUGNlVFJnRU9KNE5yaWNiMzg2T1VSS0Z0QnFqTHVBTFNEWkNZMlNCQ1M2Zy9lWHF0M1R4dWUxTVg2R05mU0lqMkxFaXFjWUM2VUcvUUtva20za0MycGFjWUJWKzNuTGUwY1I0YnZuLzhnU2N4WHNGcVpZbmhhRVd6R2RMdzVyUlpidlJmd3FqZTZMTEpNcU5kNDhvTWFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "record_id": "flaws_cloudtrail:0000129:f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "row_index": 129, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkUXZZUU01cmpJVnF3bWNhNTlLZjVwcC9RVXBBd3dzaytIZ3RESlRTR2NrR3VBcnczTm9lbHJubkhRWnJBd1cvQU9VUS8wR3VoU1VyRGdTTHdtN2RleCtZQ3ExUTR1R1lGUlBHVWROWGVGVGpwaFZvNUs3aDEwMkViYmJXVFhtZXFZNmRGaG0rN0ljZ2RseFF5RFdmb05rYlNtK0RXZ1JVUTdvY09teXdCbDRTbE56L0NSTHRvY2pKV0c3YkR0THBENGtnZFhvbDdsdTNaYUpHUzEzRnRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17986a5f-dace-45c6-b896-902e60737", "record_id": "flaws_cloudtrail:0000130:17986a5f-dace-45c6-b896-902e60737", "row_index": 130, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17986a5f-dace-45c6-b896-902e60737", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2K3dkcnROUnRsU0xaTHUvMldBM01wbmxnWGlGR0xwUTdkeFI5SXU2K3hNVHM5c1ovaWY5R05Lck9RZkhqb29YRFRiMXhZLzBLbnNKenRuU1FrK2p0VE9tVFRsaThiU0RSamkyZjFNZ3BXNXlrYnNncmlrSm9laDFQMUxzNUN1UXYyREU2bXc0SjB1cUdYZlM3ZmpyUUlzb2U0ejN2bEVON01pTXQ3OU8vK3c3QXBjRit6ZHlJQVMrbmY3ZWVmaVgvcnFSOXN0UGZKUXNxRzl1RisxQ3lJV3lhSk9LN1dvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078a926b-0fa6-4d09-946d-ec19f60814d7", "record_id": "flaws_cloudtrail:0000131:078a926b-0fa6-4d09-946d-ec19f60814d7", "row_index": 131, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078a926b-0fa6-4d09-946d-ec19f60814d7", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhajNOVnd2ak12aytkTkdmbDZKWFVOdmRQMldzSmFnMWllbkY2bWhXd21hUDhMYm1lMEJrOTN4UGE0QXZxSERNenVnVEF2cjVqUGNlVFJnRU9KNE5yaWNiMzg2T1VSS0Z0QnFqTHVBTFNEWkNZMlNCQ1M2Zy9lWHF0M1R4dWUxTVg2R05mU0lqMkxFaXFjWUM2VUcvUUtva20za0MycGFjWUJWKzNuTGUwY1I0YnZuLzhnU2N4WHNGcVpZbmhhRVd6R2RMdzVyUlpidlJmd3FqZTZMTEpNcU5kNDhvTWFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "record_id": "flaws_cloudtrail:0000132:f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "row_index": 132, "timestamp": "2019-06-28T14:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6db8cb9-9b27-4f4c-bd3f-8f34b03afb9c", "eventTime": "2019-06-28T14:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkUXZZUU01cmpJVnF3bWNhNTlLZjVwcC9RVXBBd3dzaytIZ3RESlRTR2NrR3VBcnczTm9lbHJubkhRWnJBd1cvQU9VUS8wR3VoU1VyRGdTTHdtN2RleCtZQ3ExUTR1R1lGUlBHVWROWGVGVGpwaFZvNUs3aDEwMkViYmJXVFhtZXFZNmRGaG0rN0ljZ2RseFF5RFdmb05rYlNtK0RXZ1JVUTdvY09teXdCbDRTbE56L0NSTHRvY2pKV0c3YkR0THBENGtnZFhvbDdsdTNaYUpHUzEzRnRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c272ac-d011-4321-ad63-f62a88234", "record_id": "flaws_cloudtrail:0000133:f8c272ac-d011-4321-ad63-f62a88234", "row_index": 133, "timestamp": "2019-06-28T14:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c272ac-d011-4321-ad63-f62a88234", "eventTime": "2019-06-28T14:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwLzh2Zm5vc2pYVlA5c2pxUlM1NlgvZXZGOXRwaUtBZzlmNWl4U2svT2hGbUxaNnZBTUZHR1pKQXU3N2d5bE1GNTB0aUNpK243ZDVnTU95a0o1ZktZT1dsMHBsYmZSMFYyRWEwbHh2ejBQd2ZlZmxiYmljYVZnUHRDTFhuRENjdThNUEMxY0M3cHViMmN6SFBZV0E2Um5ETlJZdlNMejRleTQxdVZKdVpNWS8xeitnaTV0bnJFVjZQQldNL1M1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c272ac-d011-4321-ad63-f62a88234", "record_id": "flaws_cloudtrail:0000134:f8c272ac-d011-4321-ad63-f62a88234", "row_index": 134, "timestamp": "2019-06-28T14:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c272ac-d011-4321-ad63-f62a88234", "eventTime": "2019-06-28T14:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwLzh2Zm5vc2pYVlA5c2pxUlM1NlgvZXZGOXRwaUtBZzlmNWl4U2svT2hGbUxaNnZBTUZHR1pKQXU3N2d5bE1GNTB0aUNpK243ZDVnTU95a0o1ZktZT1dsMHBsYmZSMFYyRWEwbHh2ejBQd2ZlZmxiYmljYVZnUHRDTFhuRENjdThNUEMxY0M3cHViMmN6SFBZV0E2Um5ETlJZdlNMejRleTQxdVZKdVpNWS8xeitnaTV0bnJFVjZQQldNL1M1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "record_id": "flaws_cloudtrail:0000135:7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "row_index": 135, "timestamp": "2019-06-28T14:49:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "eventTime": "2019-06-28T14:49:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "record_id": "flaws_cloudtrail:0000136:7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "row_index": 136, "timestamp": "2019-06-28T14:49:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1d0aff-418b-4e91-ac06-e5ae3f2d0ce2", "eventTime": "2019-06-28T14:49:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "record_id": "flaws_cloudtrail:0000137:4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "row_index": 137, "timestamp": "2019-06-28T14:49:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "eventTime": "2019-06-28T14:49:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4dUJZYmtadk9vVDh5aXVGNlFadkVzb1cvSDhqakgwbU5vM2t3Nlg5RHRTUlFkUXcvS3JsSGRhV2orbHZ5UHRRK0xBMWZjTzdEYitYbXhXb1VpNHJxYm5LNVlJV3JoK3ZPKzQ0VUpjcWJWMlNkdWFid0VQUHF2RnJGdkdPeTdnSDY0bzBZVlhyOVlveE4yQit6dmRuK3h5Nm0wM2JzWWpRRVI1WjF3QWs5Qzl6SS9YbXJhYUgzTG4yM1J1dHZ4K1hTOXJEWnA0Y25Qdi9vZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "record_id": "flaws_cloudtrail:0000138:4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "row_index": 138, "timestamp": "2019-06-28T14:49:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cf6cd8a-ecdd-44ef-89b9-71d2a6c036da", "eventTime": "2019-06-28T14:49:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4dUJZYmtadk9vVDh5aXVGNlFadkVzb1cvSDhqakgwbU5vM2t3Nlg5RHRTUlFkUXcvS3JsSGRhV2orbHZ5UHRRK0xBMWZjTzdEYitYbXhXb1VpNHJxYm5LNVlJV3JoK3ZPKzQ0VUpjcWJWMlNkdWFid0VQUHF2RnJGdkdPeTdnSDY0bzBZVlhyOVlveE4yQit6dmRuK3h5Nm0wM2JzWWpRRVI1WjF3QWs5Qzl6SS9YbXJhYUgzTG4yM1J1dHZ4K1hTOXJEWnA0Y25Qdi9vZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "record_id": "flaws_cloudtrail:0000139:127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "row_index": 139, "timestamp": "2019-06-28T14:49:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "eventTime": "2019-06-28T14:49:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "record_id": "flaws_cloudtrail:0000140:127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "row_index": 140, "timestamp": "2019-06-28T14:49:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127268b-ccf4-45bf-872e-d2e3f8e1d5d8", "eventTime": "2019-06-28T14:49:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46897fcf-03aa-4ec8-827d-95c125c13ea5", "record_id": "flaws_cloudtrail:0000141:46897fcf-03aa-4ec8-827d-95c125c13ea5", "row_index": 141, "timestamp": "2019-06-28T14:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46897fcf-03aa-4ec8-827d-95c125c13ea5", "eventTime": "2019-06-28T14:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1b0lxckFNaS9lMVMwZDBQaHlSbkgxY0ROWFB0eFVtOHVBSFZaamhLM2pQdnhsWlRzUHlYUXd2WVR1elJETmFvNFBONTlZbVhVRHQ3aE5lSy9DSDNja0FSSjZ5M1ZpUEtHeTVYZWFZaFNZR1BMeFFweVNHSzVnTjdRSW9wV09zQkwzbEdNV0lObWVFSlBIeEJEL1M0ekFvZUlJM05ORzBYa0UzWXVLRXV6aFFQcmtFUE9UU3VGaVRIaEszbkFnd21vVU5OcVNnL1dzdnRlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f5236f-630d-4f63-a778-ca00f56f45ed", "record_id": "flaws_cloudtrail:0000142:a7f5236f-630d-4f63-a778-ca00f56f45ed", "row_index": 142, "timestamp": "2019-06-28T14:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f5236f-630d-4f63-a778-ca00f56f45ed", "eventTime": "2019-06-28T14:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMENqSi9jWFVaZ0M5MXFlOS9YcGhIeUJoUU4rVUhQVGNVR1ZseHFRMG9BSzV4ZEFiaWhTdFRwdlhpRGNvdTJEd2hnWmRaVU1sVkdEa1hZa3dxWENmTTRWdWRVLzlvaVdxZS8rcmhNUWM4RThycktkSUd4WEFCeFVrQ2hwOWJjTzFDcFIyZXJoTkFyWURTdnpOa2pNRk0rTmxwaGRTNnV3ejZHbE8rbWtZMkIvRmUxY3UvL2pWbnFGUWk5aFRpeGl3TncreXltWDZGNlFCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46897fcf-03aa-4ec8-827d-95c125c13ea5", "record_id": "flaws_cloudtrail:0000143:46897fcf-03aa-4ec8-827d-95c125c13ea5", "row_index": 143, "timestamp": "2019-06-28T14:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46897fcf-03aa-4ec8-827d-95c125c13ea5", "eventTime": "2019-06-28T14:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1b0lxckFNaS9lMVMwZDBQaHlSbkgxY0ROWFB0eFVtOHVBSFZaamhLM2pQdnhsWlRzUHlYUXd2WVR1elJETmFvNFBONTlZbVhVRHQ3aE5lSy9DSDNja0FSSjZ5M1ZpUEtHeTVYZWFZaFNZR1BMeFFweVNHSzVnTjdRSW9wV09zQkwzbEdNV0lObWVFSlBIeEJEL1M0ekFvZUlJM05ORzBYa0UzWXVLRXV6aFFQcmtFUE9UU3VGaVRIaEszbkFnd21vVU5OcVNnL1dzdnRlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f5236f-630d-4f63-a778-ca00f56f45ed", "record_id": "flaws_cloudtrail:0000144:a7f5236f-630d-4f63-a778-ca00f56f45ed", "row_index": 144, "timestamp": "2019-06-28T14:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f5236f-630d-4f63-a778-ca00f56f45ed", "eventTime": "2019-06-28T14:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMENqSi9jWFVaZ0M5MXFlOS9YcGhIeUJoUU4rVUhQVGNVR1ZseHFRMG9BSzV4ZEFiaWhTdFRwdlhpRGNvdTJEd2hnWmRaVU1sVkdEa1hZa3dxWENmTTRWdWRVLzlvaVdxZS8rcmhNUWM4RThycktkSUd4WEFCeFVrQ2hwOWJjTzFDcFIyZXJoTkFyWURTdnpOa2pNRk0rTmxwaGRTNnV3ejZHbE8rbWtZMkIvRmUxY3UvL2pWbnFGUWk5aFRpeGl3TncreXltWDZGNlFCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "record_id": "flaws_cloudtrail:0000145:c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "row_index": 145, "timestamp": "2019-06-28T14:49:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "eventTime": "2019-06-28T14:49:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaQm1WeHQreFVEVHFKV291d0hJSnZkUVdrMkM4dTRRcFliVWdXQXU1ckVZUmRrRENSK1NvNGJLaTNaakRiakErR3c2TXVjZUtESVMybkF6R0VlUkZJeDRMZW14MnNZOHFydmU5Rk5PRzNBR3RFR3dQUU1JbVl4azhVenE3dHgrNGxvR3FkUE11eFNIV2FoekhkSGpUYVlYOXNuUVIxSGtXd2NNNzBVZ2wyZFR6eUpSc3RSOXI1R0VCWmxGeEJGVzg2RGRKUFBDcC92SWVlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "record_id": "flaws_cloudtrail:0000146:c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "row_index": 146, "timestamp": "2019-06-28T14:49:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d42cf5-b353-4011-bfaf-350a2c00dd7f", "eventTime": "2019-06-28T14:49:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaQm1WeHQreFVEVHFKV291d0hJSnZkUVdrMkM4dTRRcFliVWdXQXU1ckVZUmRrRENSK1NvNGJLaTNaakRiakErR3c2TXVjZUtESVMybkF6R0VlUkZJeDRMZW14MnNZOHFydmU5Rk5PRzNBR3RFR3dQUU1JbVl4azhVenE3dHgrNGxvR3FkUE11eFNIV2FoekhkSGpUYVlYOXNuUVIxSGtXd2NNNzBVZ2wyZFR6eUpSc3RSOXI1R0VCWmxGeEJGVzg2RGRKUFBDcC92SWVlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681000-401f-4f42-9fc2-4512fe422de1", "record_id": "flaws_cloudtrail:0000147:681000-401f-4f42-9fc2-4512fe422de1", "row_index": 147, "timestamp": "2019-06-28T14:49:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681000-401f-4f42-9fc2-4512fe422de1", "eventTime": "2019-06-28T14:49:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxYTNMeldqN0RtU2FhWTVNRUQ0ejBoWEd6OW1HWDE0QVJOc0hNdCtUeFIwUTBHNkR5dyt5b1NSN3prQ1FFK3hzTGtOL2pLUlZEK3N1TnZIRTViMFA3eWpOWE4xdGZxYnRUVVhjazFJSHVTc0dZemRGUDdGN1BORFpoNkpxU2s3RDFsUk9nc2hmUHZhOVpNVjlpUnR5QTl2Q0pwNEQ4SWpaYjkyUkwrNjhscnFhU0NFNXprRHFzanV0cXgzUXQ0WTd0R09lV3h0Z3FxaS9Tdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681000-401f-4f42-9fc2-4512fe422de1", "record_id": "flaws_cloudtrail:0000148:681000-401f-4f42-9fc2-4512fe422de1", "row_index": 148, "timestamp": "2019-06-28T14:49:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681000-401f-4f42-9fc2-4512fe422de1", "eventTime": "2019-06-28T14:49:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxYTNMeldqN0RtU2FhWTVNRUQ0ejBoWEd6OW1HWDE0QVJOc0hNdCtUeFIwUTBHNkR5dyt5b1NSN3prQ1FFK3hzTGtOL2pLUlZEK3N1TnZIRTViMFA3eWpOWE4xdGZxYnRUVVhjazFJSHVTc0dZemRGUDdGN1BORFpoNkpxU2s3RDFsUk9nc2hmUHZhOVpNVjlpUnR5QTl2Q0pwNEQ4SWpaYjkyUkwrNjhscnFhU0NFNXprRHFzanV0cXgzUXQ0WTd0R09lV3h0Z3FxaS9Tdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "891d8a68-e76d-4a68-a1ce-efb971bc165a", "record_id": "flaws_cloudtrail:0000149:891d8a68-e76d-4a68-a1ce-efb971bc165a", "row_index": 149, "timestamp": "2019-06-28T14:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "891d8a68-e76d-4a68-a1ce-efb971bc165a", "eventTime": "2019-06-28T14:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJeWhPS2EzUFJpVkNlRFQwUWJTMENhNXMxUGUraXY0S3FJSnNTTnNmRlEyQklBT2lja1hEYW5QdGtIN2Vwc2xPU1gxUXVSY2dFZnhhek1aMy9naGZGSWxGYUZHeVMxcXZKODlnQ1drTFo0VUVJQW5XZkI3WURkTlp6SWxtM2djS1ZkYi96SUI3RmhTU2JGYWxmOW0yKytyZ1ZNd0JoTUFWYWN5NTd5bDBQeW16U1NvLzh1UVJUTjMyb1V1OE9SRDV0NE4yOEZLcWRnTmNXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605e82e3-5f32-4c93-950a-d011f4d6c8c7", "record_id": "flaws_cloudtrail:0000150:605e82e3-5f32-4c93-950a-d011f4d6c8c7", "row_index": 150, "timestamp": "2019-06-28T14:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605e82e3-5f32-4c93-950a-d011f4d6c8c7", "eventTime": "2019-06-28T14:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXc3YrNU1XOENFY0orYTdNSEc1dnVKaXYzbyt4STljdGJYZHpMc2FTdE1OZlB3aUdDMTMzUTdLYTJZZStSS1VLbDZCbHhyV3M3dTA4eHhiMWFONjAwdExqNXRGamlHaVpJNCt1WlMxL0dJWHQ4ZHdyaW5TYm9nbEg1bS9yM2xOdkdmQW1JMUdOVjc4eTVWUlFoTzBBUDRMTGJ2a1pqK21CWG9rd0ZPNWJNcWo3UmZIM2Jma05odUJacWs1Q1FvZnl6MnlQbEoySUdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "891d8a68-e76d-4a68-a1ce-efb971bc165a", "record_id": "flaws_cloudtrail:0000151:891d8a68-e76d-4a68-a1ce-efb971bc165a", "row_index": 151, "timestamp": "2019-06-28T14:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "891d8a68-e76d-4a68-a1ce-efb971bc165a", "eventTime": "2019-06-28T14:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJeWhPS2EzUFJpVkNlRFQwUWJTMENhNXMxUGUraXY0S3FJSnNTTnNmRlEyQklBT2lja1hEYW5QdGtIN2Vwc2xPU1gxUXVSY2dFZnhhek1aMy9naGZGSWxGYUZHeVMxcXZKODlnQ1drTFo0VUVJQW5XZkI3WURkTlp6SWxtM2djS1ZkYi96SUI3RmhTU2JGYWxmOW0yKytyZ1ZNd0JoTUFWYWN5NTd5bDBQeW16U1NvLzh1UVJUTjMyb1V1OE9SRDV0NE4yOEZLcWRnTmNXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605e82e3-5f32-4c93-950a-d011f4d6c8c7", "record_id": "flaws_cloudtrail:0000152:605e82e3-5f32-4c93-950a-d011f4d6c8c7", "row_index": 152, "timestamp": "2019-06-28T14:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605e82e3-5f32-4c93-950a-d011f4d6c8c7", "eventTime": "2019-06-28T14:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXc3YrNU1XOENFY0orYTdNSEc1dnVKaXYzbyt4STljdGJYZHpMc2FTdE1OZlB3aUdDMTMzUTdLYTJZZStSS1VLbDZCbHhyV3M3dTA4eHhiMWFONjAwdExqNXRGamlHaVpJNCt1WlMxL0dJWHQ4ZHdyaW5TYm9nbEg1bS9yM2xOdkdmQW1JMUdOVjc4eTVWUlFoTzBBUDRMTGJ2a1pqK21CWG9rd0ZPNWJNcWo3UmZIM2Jma05odUJacWs1Q1FvZnl6MnlQbEoySUdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85fb3e5d-89e0-467e-aee3-7af158e13506", "record_id": "flaws_cloudtrail:0000153:85fb3e5d-89e0-467e-aee3-7af158e13506", "row_index": 153, "timestamp": "2019-06-28T14:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85fb3e5d-89e0-467e-aee3-7af158e13506", "eventTime": "2019-06-28T14:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZ1E0YUEwL3BjVUtYK3ZIMUxhSnJxYXdVUzZiYThlWVJXTjdWYlNkWHFLbUVQN01tSmxrV2FiVW1WTnI1cEJaV3pQTEJYRFc2ZFE4cEozQUdxakVBUVIxU0lBKzFrWjFqcCtKUVdmOHdjYUJGUnBiMkIxeFhnQnpSaVJHV21US3cyaHVqeElLZktrWk51eHBZa3RqZ3dmNm1vdzJnTng3OGRBNlQwSGhER1o3K0g3K1BHTDUramx5WWJRc0ZaU2lZclhHRjY0NzBxbThZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85fb3e5d-89e0-467e-aee3-7af158e13506", "record_id": "flaws_cloudtrail:0000154:85fb3e5d-89e0-467e-aee3-7af158e13506", "row_index": 154, "timestamp": "2019-06-28T14:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85fb3e5d-89e0-467e-aee3-7af158e13506", "eventTime": "2019-06-28T14:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZ1E0YUEwL3BjVUtYK3ZIMUxhSnJxYXdVUzZiYThlWVJXTjdWYlNkWHFLbUVQN01tSmxrV2FiVW1WTnI1cEJaV3pQTEJYRFc2ZFE4cEozQUdxakVBUVIxU0lBKzFrWjFqcCtKUVdmOHdjYUJGUnBiMkIxeFhnQnpSaVJHV21US3cyaHVqeElLZktrWk51eHBZa3RqZ3dmNm1vdzJnTng3OGRBNlQwSGhER1o3K0g3K1BHTDUramx5WWJRc0ZaU2lZclhHRjY0NzBxbThZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "record_id": "flaws_cloudtrail:0000155:8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "row_index": 155, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdWthQmtqZ2xmRVFpa3RLQ0xzcXBCT2FBUTk5ZWJXNVVNTXFjUkZJM3ZtQ2tDQjJaRjE2dnhkdnRFR3hrWUI3Z2dZZExCWmdrSEFyMFI5ZDhiSkl1VE9oeks4NlBQbWlqL0txZXNURklnbUsrTm5YWVc5TzluWmV5YVlZUk1MdHZvUTJtNytLbmU4czNWSUd3cVlSSlJ0SStoNUxkd3lydmJ0K2J1aXVaUVAxaFBOVGN2N29CVG5NOTZBYzFHZStkNHRoL1JrNUp1dVlJNmxCZGx0TjdpRU9vUW16cWtrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "record_id": "flaws_cloudtrail:0000156:6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "row_index": 156, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUEV6dmpVbDY1cjEvVDlpRUFBY0xyR0pVRVJOc2xHMlFEOXh0OTNOdm1VRmZtbEVIUjRnNURsVlBZdHZXd1lXRmNRZjl6ZGt3WmJJaWhTckpTVG9uczRtbTZuU1NOUWFRZWs4RWFGcmNNcWlacXFUS3ZSNjNiUG55ci9CTVVzY3pFYlR3eUh0M1F6WFEvcEpqd0gzNWpZU05TQWVaU3BLQ3N5WVdadTJmdHl5Z3pIanBnOG1iaXhocGd6dXVjd2FxYTU5cmVkL0JCTW5IQnVxTENnSGhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "record_id": "flaws_cloudtrail:0000157:a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "row_index": 157, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMXUxVUR6d0dDRndpQnVhQWUxVHRhRWYvWGlmYkk2TUQraU50ckZQemFvSitMZVM3bzhDVG9CSGZ3RDdwemt1OWxjSXViZHBDUERZYk5LR3prVXlHanh1cDNnNlgvOVE0bWhWNktrUloxSU1QSEpGcStOZFVvSm5DREVUVDVxTkgyeUVjbXNZUC82NHVKaWYrYlg3Sm9WNE1MMEx0S1NXOHVCMm9OVlhUb1E0dnRLbGNMay9RUjArWG02cTJESHJMeGdGbDRHTGFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "record_id": "flaws_cloudtrail:0000158:8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "row_index": 158, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cefc057-47c0-4b46-a2ab-8e0f9e0f4097", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdWthQmtqZ2xmRVFpa3RLQ0xzcXBCT2FBUTk5ZWJXNVVNTXFjUkZJM3ZtQ2tDQjJaRjE2dnhkdnRFR3hrWUI3Z2dZZExCWmdrSEFyMFI5ZDhiSkl1VE9oeks4NlBQbWlqL0txZXNURklnbUsrTm5YWVc5TzluWmV5YVlZUk1MdHZvUTJtNytLbmU4czNWSUd3cVlSSlJ0SStoNUxkd3lydmJ0K2J1aXVaUVAxaFBOVGN2N29CVG5NOTZBYzFHZStkNHRoL1JrNUp1dVlJNmxCZGx0TjdpRU9vUW16cWtrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "record_id": "flaws_cloudtrail:0000159:6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "row_index": 159, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e1c17ef-3fc2-4ee1-af72-fd456b53e390", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUEV6dmpVbDY1cjEvVDlpRUFBY0xyR0pVRVJOc2xHMlFEOXh0OTNOdm1VRmZtbEVIUjRnNURsVlBZdHZXd1lXRmNRZjl6ZGt3WmJJaWhTckpTVG9uczRtbTZuU1NOUWFRZWs4RWFGcmNNcWlacXFUS3ZSNjNiUG55ci9CTVVzY3pFYlR3eUh0M1F6WFEvcEpqd0gzNWpZU05TQWVaU3BLQ3N5WVdadTJmdHl5Z3pIanBnOG1iaXhocGd6dXVjd2FxYTU5cmVkL0JCTW5IQnVxTENnSGhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "record_id": "flaws_cloudtrail:0000160:a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "row_index": 160, "timestamp": "2019-06-28T14:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a99234e-df0a-4e7e-9a3e-a954ca2f3a57", "eventTime": "2019-06-28T14:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMXUxVUR6d0dDRndpQnVhQWUxVHRhRWYvWGlmYkk2TUQraU50ckZQemFvSitMZVM3bzhDVG9CSGZ3RDdwemt1OWxjSXViZHBDUERZYk5LR3prVXlHanh1cDNnNlgvOVE0bWhWNktrUloxSU1QSEpGcStOZFVvSm5DREVUVDVxTkgyeUVjbXNZUC82NHVKaWYrYlg3Sm9WNE1MMEx0S1NXOHVCMm9OVlhUb1E0dnRLbGNMay9RUjArWG02cTJESHJMeGdGbDRHTGFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5606d01e-4715-4996-b96e-2dd9912e7590", "record_id": "flaws_cloudtrail:0000161:5606d01e-4715-4996-b96e-2dd9912e7590", "row_index": 161, "timestamp": "2019-06-28T14:49:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5606d01e-4715-4996-b96e-2dd9912e7590", "eventTime": "2019-06-28T14:49:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZ1Z3MkRlZXpiUkxxSG55bFJWMDZ2REtvVjZXK1dYa3lEVTdFK0c0cmgzb2hFNU5FaFJvUHl3eWFJa21aWmlIdGVHazZPamN4c0FYcWlDVmwvVGZLWlJBZGZUdG9qaGVOemVaV2RkUmFuaG1RQTkvNHNZTEV3UVNjNnprQWlIS1IwN0VWYmQ4YUphZjMwZGxYZndLZWpRRG1TaytzUUkzRTJhWUwwYWFUcGRYU0JrZTRhZUZGRzl1bkFheHRSdGpTRjViK1k5SzJqVWdjQjA3T1dseVZvT0dYazhZbUZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "record_id": "flaws_cloudtrail:0000162:eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "row_index": 162, "timestamp": "2019-06-28T14:49:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "eventTime": "2019-06-28T14:49:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSaSswWlJiSFkveGZwVzFnOVhiUXVkSHBzTWErcnpPSWo5OUFvVVpLZWdLR2puV2VRODJPWm1oTlN3ZjJFazRXRlBwOEIzcTJLa1NUaCtYa0dGaDF0ZGZ4dGJEV21OblpVcFluWFk5UVhTR2JrdURzenhVNnpTS01lSTViKzJXN1lyNmtKeCsxQVU4eUFVZ2dHZTNLdUYxMCtNcFd2TVBZN1o4VFVESWU4WFFNTTBRbVhMb3Z1OFFKbm9QL2E2ZzNkY2szbHJxTVhsTFhiUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5606d01e-4715-4996-b96e-2dd9912e7590", "record_id": "flaws_cloudtrail:0000163:5606d01e-4715-4996-b96e-2dd9912e7590", "row_index": 163, "timestamp": "2019-06-28T14:49:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5606d01e-4715-4996-b96e-2dd9912e7590", "eventTime": "2019-06-28T14:49:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZ1Z3MkRlZXpiUkxxSG55bFJWMDZ2REtvVjZXK1dYa3lEVTdFK0c0cmgzb2hFNU5FaFJvUHl3eWFJa21aWmlIdGVHazZPamN4c0FYcWlDVmwvVGZLWlJBZGZUdG9qaGVOemVaV2RkUmFuaG1RQTkvNHNZTEV3UVNjNnprQWlIS1IwN0VWYmQ4YUphZjMwZGxYZndLZWpRRG1TaytzUUkzRTJhWUwwYWFUcGRYU0JrZTRhZUZGRzl1bkFheHRSdGpTRjViK1k5SzJqVWdjQjA3T1dseVZvT0dYazhZbUZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "record_id": "flaws_cloudtrail:0000164:eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "row_index": 164, "timestamp": "2019-06-28T14:49:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eddec7bc-fc7a-4ae6-b4a2-fcda38baf940", "eventTime": "2019-06-28T14:49:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSaSswWlJiSFkveGZwVzFnOVhiUXVkSHBzTWErcnpPSWo5OUFvVVpLZWdLR2puV2VRODJPWm1oTlN3ZjJFazRXRlBwOEIzcTJLa1NUaCtYa0dGaDF0ZGZ4dGJEV21OblpVcFluWFk5UVhTR2JrdURzenhVNnpTS01lSTViKzJXN1lyNmtKeCsxQVU4eUFVZ2dHZTNLdUYxMCtNcFd2TVBZN1o4VFVESWU4WFFNTTBRbVhMb3Z1OFFKbm9QL2E2ZzNkY2szbHJxTVhsTFhiUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "record_id": "flaws_cloudtrail:0000165:4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "row_index": 165, "timestamp": "2019-06-28T14:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "eventTime": "2019-06-28T14:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjd011NjNiWjJBdWFzV1J2U3E0VmlOajBmOU12T0JLVVkrNS9sUk9RcWhLVXp5MkdCTjA1UmMrTWhGaGRLWEtPTmhMS0ZJWGlQcGFKRCt2R0lFalpkQXRWUUcvMWhKc1p4YmpZOEQrWDdpQ2NqYnVQeVhhT1NqdGpiaTU0c1dDT2lBYWw3cTF5ZDc3Snh5eHFXZ1grejVIclA5TVYyRmV1N204QnhEUVNVRUloaHNEa0pWaitXQXl5NnRJSVRtSkhmbVpkYjBON0RUNHV4Tis5eklBbFN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd54f8c2-647c-4289-8559-f3a02222b3e", "record_id": "flaws_cloudtrail:0000166:dd54f8c2-647c-4289-8559-f3a02222b3e", "row_index": 166, "timestamp": "2019-06-28T14:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd54f8c2-647c-4289-8559-f3a02222b3e", "eventTime": "2019-06-28T14:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS0xHOExUazBXb3dXamFzL2pmSFdzMEp6a1FXaS9SWTZvQ1JmMk9NUUtKclQ3VTNtVlpHNXN4Z1ZPZzJXaWFkZk1KSjNPekU3OVBIYmpJWTVyeDR0NlhSckt6RTQ1R1Y5Y2Z0a21zQkN5Rm1mdmNvcFRmbnI4eTJwSHlUbGowRjRob1FhRUp4azY5ZnBPMmVtblUrWWs1b1Fkcnc2L3JRNlZBb3JiSUFzaVlwcUcyaXc5bXVvQzNMTmpKQnpFUmhqckVnN0VmV1gyc1JPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "record_id": "flaws_cloudtrail:0000167:4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "row_index": 167, "timestamp": "2019-06-28T14:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6e630f-1709-4394-b8fb-5bdabc5f93eb", "eventTime": "2019-06-28T14:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjd011NjNiWjJBdWFzV1J2U3E0VmlOajBmOU12T0JLVVkrNS9sUk9RcWhLVXp5MkdCTjA1UmMrTWhGaGRLWEtPTmhMS0ZJWGlQcGFKRCt2R0lFalpkQXRWUUcvMWhKc1p4YmpZOEQrWDdpQ2NqYnVQeVhhT1NqdGpiaTU0c1dDT2lBYWw3cTF5ZDc3Snh5eHFXZ1grejVIclA5TVYyRmV1N204QnhEUVNVRUloaHNEa0pWaitXQXl5NnRJSVRtSkhmbVpkYjBON0RUNHV4Tis5eklBbFN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd54f8c2-647c-4289-8559-f3a02222b3e", "record_id": "flaws_cloudtrail:0000168:dd54f8c2-647c-4289-8559-f3a02222b3e", "row_index": 168, "timestamp": "2019-06-28T14:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd54f8c2-647c-4289-8559-f3a02222b3e", "eventTime": "2019-06-28T14:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS0xHOExUazBXb3dXamFzL2pmSFdzMEp6a1FXaS9SWTZvQ1JmMk9NUUtKclQ3VTNtVlpHNXN4Z1ZPZzJXaWFkZk1KSjNPekU3OVBIYmpJWTVyeDR0NlhSckt6RTQ1R1Y5Y2Z0a21zQkN5Rm1mdmNvcFRmbnI4eTJwSHlUbGowRjRob1FhRUp4azY5ZnBPMmVtblUrWWs1b1Fkcnc2L3JRNlZBb3JiSUFzaVlwcUcyaXc5bXVvQzNMTmpKQnpFUmhqckVnN0VmV1gyc1JPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442776-9da9-4054-8752-2eba87e89c4c", "record_id": "flaws_cloudtrail:0000169:442776-9da9-4054-8752-2eba87e89c4c", "row_index": 169, "timestamp": "2019-06-28T14:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442776-9da9-4054-8752-2eba87e89c4c", "eventTime": "2019-06-28T14:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1cmt5OFRGR3JNQjZFSUlGOTF0TjkyNTl4blA5cVNOQnhFajlIbHg4WDl5NlNNUHpGbnRudFJmSlBsdlV3TGxZV2Q0UlVGcDVPUjRCL08yWGhMYWpnSDFIblBYV0hxTmU1V1hTclBrRDRTUTNrdENlODlOL012ZW9oNDZoNWNYWnAxaEJiVUlOb256SlQvTHB3dENJRys5Q0xyWk1mbmVxOGhLRHhmR3N0R3VaMVlrb1pFOGpEVWtwS2JYemZIU3E0RDhvcVpGMjNNc0J3QU44c0dHTWdCeERFdmR6TzVZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9401cea-2be4-4a83-a439-5d04996e39f0", "record_id": "flaws_cloudtrail:0000170:f9401cea-2be4-4a83-a439-5d04996e39f0", "row_index": 170, "timestamp": "2019-06-28T14:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9401cea-2be4-4a83-a439-5d04996e39f0", "eventTime": "2019-06-28T14:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGeXNvRGFvNi9ZWS9hRlppMXNxcmV0M1kxRHhyUTVIcDUzRHlJajVkeWk4YWluZmxKdHVUajY0aS9oN29Ka3ZEWGlHYytqQURFMUxYRHgydi8rNzhLdGZFOHhMRENiVm5wa2doQ3hDcklWVmdHNUY1b3o2R3QxOEJsZUxKNWl3UVdEUmFqNzdIRmxDQWZObVQ0WE55d3htYlpGOXY0SUhGTzdOVm9DSXZCNEVld1N1bnFScitGUERUZG9NMkFvND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442776-9da9-4054-8752-2eba87e89c4c", "record_id": "flaws_cloudtrail:0000171:442776-9da9-4054-8752-2eba87e89c4c", "row_index": 171, "timestamp": "2019-06-28T14:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442776-9da9-4054-8752-2eba87e89c4c", "eventTime": "2019-06-28T14:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1cmt5OFRGR3JNQjZFSUlGOTF0TjkyNTl4blA5cVNOQnhFajlIbHg4WDl5NlNNUHpGbnRudFJmSlBsdlV3TGxZV2Q0UlVGcDVPUjRCL08yWGhMYWpnSDFIblBYV0hxTmU1V1hTclBrRDRTUTNrdENlODlOL012ZW9oNDZoNWNYWnAxaEJiVUlOb256SlQvTHB3dENJRys5Q0xyWk1mbmVxOGhLRHhmR3N0R3VaMVlrb1pFOGpEVWtwS2JYemZIU3E0RDhvcVpGMjNNc0J3QU44c0dHTWdCeERFdmR6TzVZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9401cea-2be4-4a83-a439-5d04996e39f0", "record_id": "flaws_cloudtrail:0000172:f9401cea-2be4-4a83-a439-5d04996e39f0", "row_index": 172, "timestamp": "2019-06-28T14:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9401cea-2be4-4a83-a439-5d04996e39f0", "eventTime": "2019-06-28T14:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGeXNvRGFvNi9ZWS9hRlppMXNxcmV0M1kxRHhyUTVIcDUzRHlJajVkeWk4YWluZmxKdHVUajY0aS9oN29Ka3ZEWGlHYytqQURFMUxYRHgydi8rNzhLdGZFOHhMRENiVm5wa2doQ3hDcklWVmdHNUY1b3o2R3QxOEJsZUxKNWl3UVdEUmFqNzdIRmxDQWZObVQ0WE55d3htYlpGOXY0SUhGTzdOVm9DSXZCNEVld1N1bnFScitGUERUZG9NMkFvND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d456c051-a302-4d04-97ef-3d970af61c70", "record_id": "flaws_cloudtrail:0000173:d456c051-a302-4d04-97ef-3d970af61c70", "row_index": 173, "timestamp": "2019-06-28T14:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d456c051-a302-4d04-97ef-3d970af61c70", "eventTime": "2019-06-28T14:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJia3AwR0I2Vkl4SjUwOE82MVhzVllWdFlJVDIyQWY4M085T0Z0UnpYbFFRQ1VIY2V5VHhRUHZ1a0dQd09DcWI2Z0NCbDFBOVVxTTdZeUYxbDFUS1p4L2RpWG8wUUlhOHJIMVl6SjFWOW5Cblh5c1JGc1dMQVNlMW16ZVFYSW82T0VCTFNyb2dSbmZXUnVPRFUzb1dTQ1FSRGRTUUJvZzRsQkpHc3pFSW1tMUowSXFMQUpxemcxdWp5aDRtaWJuMWxFSmMySFFJMVI2eHF1TjI0UFFlZFpDaGpuYlpVS3NvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "986b5b62-80a7-4756-9502-dc29c9d898718", "record_id": "flaws_cloudtrail:0000174:986b5b62-80a7-4756-9502-dc29c9d898718", "row_index": 174, "timestamp": "2019-06-28T14:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "986b5b62-80a7-4756-9502-dc29c9d898718", "eventTime": "2019-06-28T14:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3bTU4QWE5dVRWZDlzV255YkRuUDFDZFBqbnpVMVF2RlZGWHMzTk1jd2g0UFREVEYrWFk3QzdJYmZ1YXRCU24xc2VraFJ6M2dpeVNSL2s5R0MyWUNTZU5WRjVlbkd3N09ZZUp0T0JkRDNJQTJ3Uyt3OFlZN3laK1JDMkxiV3lYUDVacnpWV1QxQ2ord3o5UDBTeEEvaDdlTjFUQUNxMit3UWgvUVpPQnhJY0EwbkU1K3hWMkFueCtvblBBelduQ0lJaVNxRGxPRWFSa0Jsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d456c051-a302-4d04-97ef-3d970af61c70", "record_id": "flaws_cloudtrail:0000175:d456c051-a302-4d04-97ef-3d970af61c70", "row_index": 175, "timestamp": "2019-06-28T14:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d456c051-a302-4d04-97ef-3d970af61c70", "eventTime": "2019-06-28T14:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJia3AwR0I2Vkl4SjUwOE82MVhzVllWdFlJVDIyQWY4M085T0Z0UnpYbFFRQ1VIY2V5VHhRUHZ1a0dQd09DcWI2Z0NCbDFBOVVxTTdZeUYxbDFUS1p4L2RpWG8wUUlhOHJIMVl6SjFWOW5Cblh5c1JGc1dMQVNlMW16ZVFYSW82T0VCTFNyb2dSbmZXUnVPRFUzb1dTQ1FSRGRTUUJvZzRsQkpHc3pFSW1tMUowSXFMQUpxemcxdWp5aDRtaWJuMWxFSmMySFFJMVI2eHF1TjI0UFFlZFpDaGpuYlpVS3NvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "986b5b62-80a7-4756-9502-dc29c9d898718", "record_id": "flaws_cloudtrail:0000176:986b5b62-80a7-4756-9502-dc29c9d898718", "row_index": 176, "timestamp": "2019-06-28T14:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "986b5b62-80a7-4756-9502-dc29c9d898718", "eventTime": "2019-06-28T14:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3bTU4QWE5dVRWZDlzV255YkRuUDFDZFBqbnpVMVF2RlZGWHMzTk1jd2g0UFREVEYrWFk3QzdJYmZ1YXRCU24xc2VraFJ6M2dpeVNSL2s5R0MyWUNTZU5WRjVlbkd3N09ZZUp0T0JkRDNJQTJ3Uyt3OFlZN3laK1JDMkxiV3lYUDVacnpWV1QxQ2ord3o5UDBTeEEvaDdlTjFUQUNxMit3UWgvUVpPQnhJY0EwbkU1K3hWMkFueCtvblBBelduQ0lJaVNxRGxPRWFSa0Jsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc24872-5c1b-4ba9-9362-7b1b21728", "record_id": "flaws_cloudtrail:0000177:fc24872-5c1b-4ba9-9362-7b1b21728", "row_index": 177, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc24872-5c1b-4ba9-9362-7b1b21728", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpZDZ6aXgvQmJoWStFaGVlai94ODJFUmFReEZZN21nMkZEMHJlV2lONFZIQUhPa0pOOGVaMGNUZm9QL0MvbTZzMUwwYWZENXBCMWo3RU9UWWZXTk5HTFdybzFCZkxvcW40dHpUdjRnNThNVjlFNzZJeDI1RzRuVnJIUk9tQVhkRzAzT0F3cHRiM1ZuSDlaS3pRazZXM3FSKy9YbXAzRkN1Y3ZIdyt2LzEzWkVBNXNTYlVDSm96T3FHQVpwNkhWNzhjZ2Q1R25TTUtnRzQ3VGltK1dzaVdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "record_id": "flaws_cloudtrail:0000178:1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "row_index": 178, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d3dGa0NldnRYZUJQVnB0aUdHMFFCcFQvQ0xRTUFPYmNhREl5M3lydUF6alJSZDl0MmtIeENSbFBIZmY0OGlZWWRuUnY0WlAvNCt5UVorc2IvK2luVTdxblpXbysycXRENGdZSllZVXBTbjJKak1TWlU1aTB4ZGt0OVIvUHd0SS8zd24rTjZOWHYyREQwZVE5cTI1SFgwZ1lVZTZxWnBTcFpjdHlxczNnOGYyc2U0dXp3b005Z21GWU5nWlMvbExqQmZRanlqWHNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade3385b-f6f3-4e48-9907-45df777ec3fc", "record_id": "flaws_cloudtrail:0000179:ade3385b-f6f3-4e48-9907-45df777ec3fc", "row_index": 179, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade3385b-f6f3-4e48-9907-45df777ec3fc", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWc3d6SFhQTnZtTWdCbmsyZ09wdnhBZGRvMm5iRGdJR3J5TEN1aEViUTdlbm1UaHdVblRDelpLSGdTbWlJY1dGUlhuZVJIMzkrTFNTQUhneGpvRnpoZVdLUXpvZVhLOFJzTmNTZ2RGdlczMzhEMzhXV0Z3VVNaUXN1NnVtV0VVMkpEbG12Um1UY1lyNzhqQ3ViZTh4My9OYll1OG1WelpXeUQvT1JJN0ZjN05xd1l0NXBGdnp3TTdDZnN6bXIzY0V4anFyMXFSU0h0Y1dDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc24872-5c1b-4ba9-9362-7b1b21728", "record_id": "flaws_cloudtrail:0000180:fc24872-5c1b-4ba9-9362-7b1b21728", "row_index": 180, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc24872-5c1b-4ba9-9362-7b1b21728", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpZDZ6aXgvQmJoWStFaGVlai94ODJFUmFReEZZN21nMkZEMHJlV2lONFZIQUhPa0pOOGVaMGNUZm9QL0MvbTZzMUwwYWZENXBCMWo3RU9UWWZXTk5HTFdybzFCZkxvcW40dHpUdjRnNThNVjlFNzZJeDI1RzRuVnJIUk9tQVhkRzAzT0F3cHRiM1ZuSDlaS3pRazZXM3FSKy9YbXAzRkN1Y3ZIdyt2LzEzWkVBNXNTYlVDSm96T3FHQVpwNkhWNzhjZ2Q1R25TTUtnRzQ3VGltK1dzaVdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "record_id": "flaws_cloudtrail:0000181:1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "row_index": 181, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c454eaa-a5ef-4ef3-9a2b-58ed2b834b4a", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d3dGa0NldnRYZUJQVnB0aUdHMFFCcFQvQ0xRTUFPYmNhREl5M3lydUF6alJSZDl0MmtIeENSbFBIZmY0OGlZWWRuUnY0WlAvNCt5UVorc2IvK2luVTdxblpXbysycXRENGdZSllZVXBTbjJKak1TWlU1aTB4ZGt0OVIvUHd0SS8zd24rTjZOWHYyREQwZVE5cTI1SFgwZ1lVZTZxWnBTcFpjdHlxczNnOGYyc2U0dXp3b005Z21GWU5nWlMvbExqQmZRanlqWHNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade3385b-f6f3-4e48-9907-45df777ec3fc", "record_id": "flaws_cloudtrail:0000182:ade3385b-f6f3-4e48-9907-45df777ec3fc", "row_index": 182, "timestamp": "2019-06-28T14:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade3385b-f6f3-4e48-9907-45df777ec3fc", "eventTime": "2019-06-28T14:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWc3d6SFhQTnZtTWdCbmsyZ09wdnhBZGRvMm5iRGdJR3J5TEN1aEViUTdlbm1UaHdVblRDelpLSGdTbWlJY1dGUlhuZVJIMzkrTFNTQUhneGpvRnpoZVdLUXpvZVhLOFJzTmNTZ2RGdlczMzhEMzhXV0Z3VVNaUXN1NnVtV0VVMkpEbG12Um1UY1lyNzhqQ3ViZTh4My9OYll1OG1WelpXeUQvT1JJN0ZjN05xd1l0NXBGdnp3TTdDZnN6bXIzY0V4anFyMXFSU0h0Y1dDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "record_id": "flaws_cloudtrail:0000183:4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "row_index": 183, "timestamp": "2019-06-28T14:49:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "eventTime": "2019-06-28T14:49:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNEY0dlpzbjlYN2RQQ0NQREhHcXBjNGVwWmdTSFk2cWpNRG1aRWpkNWFjUFJuSExXWHNOY2Y5VjV4NzJpZXpXQWo5TW05aGFoYmtrdW1qeHBZWFJyYUxmMDdIOE9NU2poa24rbVBVQ3c0b1VFeEp6dC9veHdRK0doejByNVpLYWZvd1NJT1B1c0Y4cU9xMWRla0tOZGVvOWtMQmNYK24ybGhmNlFybExTNElqci85dkxMcHVtTDFJOXpLV05UeDd3Z0F0QzJ1d1NhY0RrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "record_id": "flaws_cloudtrail:0000184:4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "row_index": 184, "timestamp": "2019-06-28T14:49:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2a02f7-f172-4a40-85d8-bb19e6ca4a2a", "eventTime": "2019-06-28T14:49:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNEY0dlpzbjlYN2RQQ0NQREhHcXBjNGVwWmdTSFk2cWpNRG1aRWpkNWFjUFJuSExXWHNOY2Y5VjV4NzJpZXpXQWo5TW05aGFoYmtrdW1qeHBZWFJyYUxmMDdIOE9NU2poa24rbVBVQ3c0b1VFeEp6dC9veHdRK0doejByNVpLYWZvd1NJT1B1c0Y4cU9xMWRla0tOZGVvOWtMQmNYK24ybGhmNlFybExTNElqci85dkxMcHVtTDFJOXpLV05UeDd3Z0F0QzJ1d1NhY0RrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034071-4312-4364-8556-9a0a270a74c3", "record_id": "flaws_cloudtrail:0000185:034071-4312-4364-8556-9a0a270a74c3", "row_index": 185, "timestamp": "2019-06-28T14:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034071-4312-4364-8556-9a0a270a74c3", "eventTime": "2019-06-28T14:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT0VBZGhmM2cxYjhJbFFzZm8wb1dJZ1BEM0lMK1hxS0JtbERnNFpUVm5FSkI0cUQrTzEyWDZLYkh4Q0EvRnphT09SR1BFRWt3WkpidHZ0NHMvOEU4QXBNRkQ2UVFhbk5LZHdyUllibnVRbmxleWRubkRKckIrZTBsRXE5OTBhZ2ZQakw1QlcraHpsKzZhK3VhL3BSVVlKYUFWUWgzSlhEOFcxSzh1aHlsbDU1UVJFL0VDU1F1ZXhWWnd1dEdWOWFhWnhIOW9JZ0Z2Um9NZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034071-4312-4364-8556-9a0a270a74c3", "record_id": "flaws_cloudtrail:0000186:034071-4312-4364-8556-9a0a270a74c3", "row_index": 186, "timestamp": "2019-06-28T14:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034071-4312-4364-8556-9a0a270a74c3", "eventTime": "2019-06-28T14:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT0VBZGhmM2cxYjhJbFFzZm8wb1dJZ1BEM0lMK1hxS0JtbERnNFpUVm5FSkI0cUQrTzEyWDZLYkh4Q0EvRnphT09SR1BFRWt3WkpidHZ0NHMvOEU4QXBNRkQ2UVFhbk5LZHdyUllibnVRbmxleWRubkRKckIrZTBsRXE5OTBhZ2ZQakw1QlcraHpsKzZhK3VhL3BSVVlKYUFWUWgzSlhEOFcxSzh1aHlsbDU1UVJFL0VDU1F1ZXhWWnd1dEdWOWFhWnhIOW9JZ0Z2Um9NZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b068550ba-d332-48f9-9f13-2631f1532b9d", "record_id": "flaws_cloudtrail:0000187:b068550ba-d332-48f9-9f13-2631f1532b9d", "row_index": 187, "timestamp": "2019-06-28T14:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b068550ba-d332-48f9-9f13-2631f1532b9d", "eventTime": "2019-06-28T14:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYVpSM1dHZitzWU1remREWHloTjZRUGRZdEFMbi9CRGZGU0hZekYvNzRKdTl2YTBwMUxNeUJaeks5QmpERVdyZWI1V3FVMEgzZmVPWlhMUWNLOGVUdWV4R2RVUmZPSUg5d0w2QnZtVGdCVEpoRE5FS1dGVitJZUhKMVJ2dXZBYkh0UXNqUmxIeXhzVElIT3M1OGx1ZVZUcXJkOEdVVFNneTlXbVkvOC9MWFJKWUlWYmxLc2FMY1E5ZDR2RDl2Nkd4aFdDMzJIZmwxSXF0K2NTaFpKNFcxMWdERFpEeEkwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f889bec-048d-4095-ae8d-f297f7262c1a", "record_id": "flaws_cloudtrail:0000188:6f889bec-048d-4095-ae8d-f297f7262c1a", "row_index": 188, "timestamp": "2019-06-28T14:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f889bec-048d-4095-ae8d-f297f7262c1a", "eventTime": "2019-06-28T14:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0d2lQR2E1VWxReDJXcktuMHBTYStrK1VKSXhqeThMSHBuQitCS1dIVEZ3UXhmMVQ4UXdRRlpLN0lDYWNmWlYrVkZyM3BOSzloYVk2MnhMSThYZlZhelFqaXV2RnJKN0I0YnRGTllQeWIvTFFubytOWlg1OGZwOURhN2laWm5uN25QNDZiSFRON2hGcnFyTmV5Sm9tVWtJZ2VwQWNscjdwQ0svOUxKQ0FMMjlzSW1SSzdXN1RmQXljVURXZU42MXBkWUJQRFpmL3RvN0NUZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b068550ba-d332-48f9-9f13-2631f1532b9d", "record_id": "flaws_cloudtrail:0000189:b068550ba-d332-48f9-9f13-2631f1532b9d", "row_index": 189, "timestamp": "2019-06-28T14:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b068550ba-d332-48f9-9f13-2631f1532b9d", "eventTime": "2019-06-28T14:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYVpSM1dHZitzWU1remREWHloTjZRUGRZdEFMbi9CRGZGU0hZekYvNzRKdTl2YTBwMUxNeUJaeks5QmpERVdyZWI1V3FVMEgzZmVPWlhMUWNLOGVUdWV4R2RVUmZPSUg5d0w2QnZtVGdCVEpoRE5FS1dGVitJZUhKMVJ2dXZBYkh0UXNqUmxIeXhzVElIT3M1OGx1ZVZUcXJkOEdVVFNneTlXbVkvOC9MWFJKWUlWYmxLc2FMY1E5ZDR2RDl2Nkd4aFdDMzJIZmwxSXF0K2NTaFpKNFcxMWdERFpEeEkwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f889bec-048d-4095-ae8d-f297f7262c1a", "record_id": "flaws_cloudtrail:0000190:6f889bec-048d-4095-ae8d-f297f7262c1a", "row_index": 190, "timestamp": "2019-06-28T14:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f889bec-048d-4095-ae8d-f297f7262c1a", "eventTime": "2019-06-28T14:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0d2lQR2E1VWxReDJXcktuMHBTYStrK1VKSXhqeThMSHBuQitCS1dIVEZ3UXhmMVQ4UXdRRlpLN0lDYWNmWlYrVkZyM3BOSzloYVk2MnhMSThYZlZhelFqaXV2RnJKN0I0YnRGTllQeWIvTFFubytOWlg1OGZwOURhN2laWm5uN25QNDZiSFRON2hGcnFyTmV5Sm9tVWtJZ2VwQWNscjdwQ0svOUxKQ0FMMjlzSW1SSzdXN1RmQXljVURXZU42MXBkWUJQRFpmL3RvN0NUZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "686d892b-5de8-41ba-a71d-4a51d15b2290", "record_id": "flaws_cloudtrail:0000191:686d892b-5de8-41ba-a71d-4a51d15b2290", "row_index": 191, "timestamp": "2019-06-28T14:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "686d892b-5de8-41ba-a71d-4a51d15b2290", "eventTime": "2019-06-28T14:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZRXZJaDFRMlphaGNTT0ZjUlBsMzJ5dTd2Z1VwZjg4UnQzcm8vaWZ2QkZtdG5kTkpuOTNLK0NqekFqaG8yeWI5RW1pWmg1aG0zWm04TXpPQzMxV2EwYjZ3OFRVY0VKTWZrWlN4OEU3YS93QVFyQTBQSHN0SGhDMkcvNUtrV01pdTZLNnZvUG5HUi9JWXR4TmpFMVdGMU15bU5LTjVoMU0yYzJzV3VzbksrR21QbmZXcjZJVytPcFZpZXl1VXpqZ0ptNlozRGJSNmVEUGZIb3k0RGQ3cHpPazYyeUNTeUFZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a15ae57-649a-424f-85d4-b39416fc765", "record_id": "flaws_cloudtrail:0000192:3a15ae57-649a-424f-85d4-b39416fc765", "row_index": 192, "timestamp": "2019-06-28T14:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a15ae57-649a-424f-85d4-b39416fc765", "eventTime": "2019-06-28T14:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcnNnUkcxN1NCRHdTTUo4Nk1UcEtiWGFYaDBpaklUVlhEUXQ0L0xGWmhybjVRM0x2bTN2WUk0VU82WVpWTjRZTnZ2dFlEcGwzd1RLc0JTay9weXF0T3RLL0FUT3B0RzhmSHpFSVcvVWFIUmVpV21iZG82QWdEeGttRE8ydldydVVlZEx1MWlKbWNnNzE2T2tzTFFUK21YekVmR1pBeG1yZkJwVVcxc0Rqak54eVg2TC9YVldNSUtGaFV1QXM5TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "686d892b-5de8-41ba-a71d-4a51d15b2290", "record_id": "flaws_cloudtrail:0000193:686d892b-5de8-41ba-a71d-4a51d15b2290", "row_index": 193, "timestamp": "2019-06-28T14:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "686d892b-5de8-41ba-a71d-4a51d15b2290", "eventTime": "2019-06-28T14:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZRXZJaDFRMlphaGNTT0ZjUlBsMzJ5dTd2Z1VwZjg4UnQzcm8vaWZ2QkZtdG5kTkpuOTNLK0NqekFqaG8yeWI5RW1pWmg1aG0zWm04TXpPQzMxV2EwYjZ3OFRVY0VKTWZrWlN4OEU3YS93QVFyQTBQSHN0SGhDMkcvNUtrV01pdTZLNnZvUG5HUi9JWXR4TmpFMVdGMU15bU5LTjVoMU0yYzJzV3VzbksrR21QbmZXcjZJVytPcFZpZXl1VXpqZ0ptNlozRGJSNmVEUGZIb3k0RGQ3cHpPazYyeUNTeUFZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a15ae57-649a-424f-85d4-b39416fc765", "record_id": "flaws_cloudtrail:0000194:3a15ae57-649a-424f-85d4-b39416fc765", "row_index": 194, "timestamp": "2019-06-28T14:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a15ae57-649a-424f-85d4-b39416fc765", "eventTime": "2019-06-28T14:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcnNnUkcxN1NCRHdTTUo4Nk1UcEtiWGFYaDBpaklUVlhEUXQ0L0xGWmhybjVRM0x2bTN2WUk0VU82WVpWTjRZTnZ2dFlEcGwzd1RLc0JTay9weXF0T3RLL0FUT3B0RzhmSHpFSVcvVWFIUmVpV21iZG82QWdEeGttRE8ydldydVVlZEx1MWlKbWNnNzE2T2tzTFFUK21YekVmR1pBeG1yZkJwVVcxc0Rqak54eVg2TC9YVldNSUtGaFV1QXM5TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3819e348-8cf2-47c1-b3be-1662b8c9494a", "record_id": "flaws_cloudtrail:0000195:3819e348-8cf2-47c1-b3be-1662b8c9494a", "row_index": 195, "timestamp": "2019-06-28T14:49:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3819e348-8cf2-47c1-b3be-1662b8c9494a", "eventTime": "2019-06-28T14:49:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3WnRMVmh3eCtzUHZRV0tQdnZoNXpRSXc3WXFiQk82enNybUZHcDhJSXBVYnBUOHNrOTF4a1RVY0xqS0JUelozQjlqR1lDeG5XWTB2TEJzZWRGR09uays5bEZTSjhxa3VZcmlTS0V1QmVhd0xKaThzSm4xUkRER1FCMTJLTGNiYTBEb0wvRWNpekp4RXRTTHl1ek9RSnVNWjRCU0J5WEwxZnlxOVJIU3JnNFVKSnVSdDcwcGdkbVdoRDBQcVRZaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3819e348-8cf2-47c1-b3be-1662b8c9494a", "record_id": "flaws_cloudtrail:0000196:3819e348-8cf2-47c1-b3be-1662b8c9494a", "row_index": 196, "timestamp": "2019-06-28T14:49:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3819e348-8cf2-47c1-b3be-1662b8c9494a", "eventTime": "2019-06-28T14:49:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3WnRMVmh3eCtzUHZRV0tQdnZoNXpRSXc3WXFiQk82enNybUZHcDhJSXBVYnBUOHNrOTF4a1RVY0xqS0JUelozQjlqR1lDeG5XWTB2TEJzZWRGR09uays5bEZTSjhxa3VZcmlTS0V1QmVhd0xKaThzSm4xUkRER1FCMTJLTGNiYTBEb0wvRWNpekp4RXRTTHl1ek9RSnVNWjRCU0J5WEwxZnlxOVJIU3JnNFVKSnVSdDcwcGdkbVdoRDBQcVRZaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "record_id": "flaws_cloudtrail:0000197:1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "row_index": 197, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIVjFnbDkwazBHZlRWSGdRRFozdENHSVRwRzJRVm5tY01ISFdqdFhOeGRXYlZ6N1h2RFdmU0RxQWp4QkJvZWJNMGZaTjB0UDMrdjVYZ2VLWU5lK3lFMXgwOGQ5M2huTVZsU3BQVWMwK3RHck9QOWlsMHBPcmpkbGFjM1N3RmFKUjZnMDhDTk9XWThSTzY2OHc5d3FoUVdSVUppakdwSWNqSHpVS3lOUEUrL2hLOWFmU05VWmRBSWZzdENXR0VKNktDQ1RwYTNoM25HSG1EamlkUEJrbFhSc1dtdWlrejRFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "record_id": "flaws_cloudtrail:0000198:a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "row_index": 198, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRXFSMDM1VVlIcFV3Wml5YU1xSzkrUHRRZU4rYUpIZ2hVeG4zQjJyR0RmVWh2VmN6MVlXSHhBMlV4VWJKdWtTamdQSzc0SzVDa0hFMVJqcEVLNFFSd2VMclFZOVlqYlVVaWJTajdwR3laYytlRVYrNWlJcWEraDIxS3Fub2IxN2YxUGJFelRsa3RMV2lLeGVFc1g3Rld3clNJRXVBcGsrVWF2QTVtUWtHVDI2Y29KZ1oyTEZLRmVXVnUxTVFscHdMV1dPd1c4UUJJdmJrUGRneUw4VFc5WTJzS0ZqMlU0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb6994df-c3f9-461a-ba9a-2715793a8af8", "record_id": "flaws_cloudtrail:0000199:bb6994df-c3f9-461a-ba9a-2715793a8af8", "row_index": 199, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb6994df-c3f9-461a-ba9a-2715793a8af8", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSOG11YmNQbmdVanE5WmZieXAwbkx3NDEzcW51RUtSd3c5cUNDZkdOR1dHK3M2c2MvQXRSYzkxLzRzRHk1dllFUm04dGtpUmVjdTc3K0FlOFcvVjhKUWw1b2toWkNyd0phdTE2aWlOY0Rma0JoaHZycjNqUll5ZUtMcmxHT1ZGQkVjcm1qTGZ3VUFPUDN2bDlDMjRxWFIxcFk3N1FnTHdreC8yakQ5YUtyRHV5MlRkUEx2YnNPbFpZNlJMLzVtVFNuYTVqU2xEa2xPZFdqcGw5T2REekhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "record_id": "flaws_cloudtrail:0000200:1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "row_index": 200, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f924b00-c1b3-4ab9-95ab-2b73fe15c7a4", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIVjFnbDkwazBHZlRWSGdRRFozdENHSVRwRzJRVm5tY01ISFdqdFhOeGRXYlZ6N1h2RFdmU0RxQWp4QkJvZWJNMGZaTjB0UDMrdjVYZ2VLWU5lK3lFMXgwOGQ5M2huTVZsU3BQVWMwK3RHck9QOWlsMHBPcmpkbGFjM1N3RmFKUjZnMDhDTk9XWThSTzY2OHc5d3FoUVdSVUppakdwSWNqSHpVS3lOUEUrL2hLOWFmU05VWmRBSWZzdENXR0VKNktDQ1RwYTNoM25HSG1EamlkUEJrbFhSc1dtdWlrejRFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "record_id": "flaws_cloudtrail:0000201:a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "row_index": 201, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a70f79cf-02da-4ef8-ab23-a03933b9cf6e", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRXFSMDM1VVlIcFV3Wml5YU1xSzkrUHRRZU4rYUpIZ2hVeG4zQjJyR0RmVWh2VmN6MVlXSHhBMlV4VWJKdWtTamdQSzc0SzVDa0hFMVJqcEVLNFFSd2VMclFZOVlqYlVVaWJTajdwR3laYytlRVYrNWlJcWEraDIxS3Fub2IxN2YxUGJFelRsa3RMV2lLeGVFc1g3Rld3clNJRXVBcGsrVWF2QTVtUWtHVDI2Y29KZ1oyTEZLRmVXVnUxTVFscHdMV1dPd1c4UUJJdmJrUGRneUw4VFc5WTJzS0ZqMlU0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb6994df-c3f9-461a-ba9a-2715793a8af8", "record_id": "flaws_cloudtrail:0000202:bb6994df-c3f9-461a-ba9a-2715793a8af8", "row_index": 202, "timestamp": "2019-06-28T14:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb6994df-c3f9-461a-ba9a-2715793a8af8", "eventTime": "2019-06-28T14:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSOG11YmNQbmdVanE5WmZieXAwbkx3NDEzcW51RUtSd3c5cUNDZkdOR1dHK3M2c2MvQXRSYzkxLzRzRHk1dllFUm04dGtpUmVjdTc3K0FlOFcvVjhKUWw1b2toWkNyd0phdTE2aWlOY0Rma0JoaHZycjNqUll5ZUtMcmxHT1ZGQkVjcm1qTGZ3VUFPUDN2bDlDMjRxWFIxcFk3N1FnTHdreC8yakQ5YUtyRHV5MlRkUEx2YnNPbFpZNlJMLzVtVFNuYTVqU2xEa2xPZFdqcGw5T2REekhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "record_id": "flaws_cloudtrail:0000203:dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "row_index": 203, "timestamp": "2019-06-28T14:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "eventTime": "2019-06-28T14:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqUGpFT0FnaGVhbVBEZ0ZrWUp0YVpSdFpCaVljV2lwQzNkOUNkOFMyQUdNSjdtNFZycENTM0VzUnR0NUNVS2VLeUdLMlhLd2kvcE5Yc3c1UTdkc2lRa0IvMjNFVW1JSkcrVlY3RFN2bmg5RnlEYmlVN3YycERWaUxOMG5sSG9CRXZBYjFRTjhXaVRHRGpyWmhLNDNTQ29Jay9GcGpuZm1xaU5NalZHVEp5QmVzU3hndmcyc1FDTU9KbysvNzh1SGhHYUFrYnlwYjNzTUZaaUIwN0llK2tnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "record_id": "flaws_cloudtrail:0000204:bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "row_index": 204, "timestamp": "2019-06-28T14:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "eventTime": "2019-06-28T14:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMXp6cmlCL0gwcDgzNS93cktOTG03SUtWNXFCY3dYQi9XWGdZTFArZHd5YTBOYVF0ZStHeENqWWk2aC93K2pVdzZJSkFCc3MwOGdReW9RR3RWSGp3YVdQeFhHUEk5U0JNVnBiamVwdVlUZkFTbXVzQk1vWERuRFAxS3MvbHVWL2tRRzR5ZTRkNDR4UHdyMThkbENjTThDOUxLYUNnV3NmM0UwUWZja0dzYm5uUEtoTnVmVjV6cGNSVWFWbnMyTk14VmdEUEVoR2V1ZnFuUFpaeEdXZlphdzRrM0ZiaExVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "record_id": "flaws_cloudtrail:0000205:dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "row_index": 205, "timestamp": "2019-06-28T14:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dae10c59-e25f-4af7-8cac-23eca8d0d7f5", "eventTime": "2019-06-28T14:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqUGpFT0FnaGVhbVBEZ0ZrWUp0YVpSdFpCaVljV2lwQzNkOUNkOFMyQUdNSjdtNFZycENTM0VzUnR0NUNVS2VLeUdLMlhLd2kvcE5Yc3c1UTdkc2lRa0IvMjNFVW1JSkcrVlY3RFN2bmg5RnlEYmlVN3YycERWaUxOMG5sSG9CRXZBYjFRTjhXaVRHRGpyWmhLNDNTQ29Jay9GcGpuZm1xaU5NalZHVEp5QmVzU3hndmcyc1FDTU9KbysvNzh1SGhHYUFrYnlwYjNzTUZaaUIwN0llK2tnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "record_id": "flaws_cloudtrail:0000206:bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "row_index": 206, "timestamp": "2019-06-28T14:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2934c2-5d42-4c86-bc69-7eb11dacf3fc", "eventTime": "2019-06-28T14:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMXp6cmlCL0gwcDgzNS93cktOTG03SUtWNXFCY3dYQi9XWGdZTFArZHd5YTBOYVF0ZStHeENqWWk2aC93K2pVdzZJSkFCc3MwOGdReW9RR3RWSGp3YVdQeFhHUEk5U0JNVnBiamVwdVlUZkFTbXVzQk1vWERuRFAxS3MvbHVWL2tRRzR5ZTRkNDR4UHdyMThkbENjTThDOUxLYUNnV3NmM0UwUWZja0dzYm5uUEtoTnVmVjV6cGNSVWFWbnMyTk14VmdEUEVoR2V1ZnFuUFpaeEdXZlphdzRrM0ZiaExVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e142f837-6ffd-43d6-8ed1-06569e6e", "record_id": "flaws_cloudtrail:0000207:e142f837-6ffd-43d6-8ed1-06569e6e", "row_index": 207, "timestamp": "2019-06-28T14:49:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e142f837-6ffd-43d6-8ed1-06569e6e", "eventTime": "2019-06-28T14:49:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFbGJOYkVaZ25ETEpvZGhYbWVHbHRTKzZQZFFGWHNFT2Y3NUlndHUwTnMzMnlFVGlPNHR0aGhDMGViemJwOUYwRjZLT0hKd0xBV2puWXhnS0c5b3Q5RWRRYXA4YndIVzZXVk1oQXBIcHRQU3BDLzNzUmNjdmNUcmt1Wi9vNWZza0srZFJzR3hlNnJMMVBZMmJ5aDhpT1lnaGIxZUJsZE4rWnVaSmw0SWVDT3ZmenRjNkFtR1hzb3hXWE82Zjk0WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e142f837-6ffd-43d6-8ed1-06569e6e", "record_id": "flaws_cloudtrail:0000208:e142f837-6ffd-43d6-8ed1-06569e6e", "row_index": 208, "timestamp": "2019-06-28T14:49:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e142f837-6ffd-43d6-8ed1-06569e6e", "eventTime": "2019-06-28T14:49:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFbGJOYkVaZ25ETEpvZGhYbWVHbHRTKzZQZFFGWHNFT2Y3NUlndHUwTnMzMnlFVGlPNHR0aGhDMGViemJwOUYwRjZLT0hKd0xBV2puWXhnS0c5b3Q5RWRRYXA4YndIVzZXVk1oQXBIcHRQU3BDLzNzUmNjdmNUcmt1Wi9vNWZza0srZFJzR3hlNnJMMVBZMmJ5aDhpT1lnaGIxZUJsZE4rWnVaSmw0SWVDT3ZmenRjNkFtR1hzb3hXWE82Zjk0WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "523423ee-e1f5-472d-89c2-ad5ff772c1c3", "record_id": "flaws_cloudtrail:0000209:523423ee-e1f5-472d-89c2-ad5ff772c1c3", "row_index": 209, "timestamp": "2019-06-28T14:49:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "523423ee-e1f5-472d-89c2-ad5ff772c1c3", "eventTime": "2019-06-28T14:49:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "523423ee-e1f5-472d-89c2-ad5ff772c1c3", "record_id": "flaws_cloudtrail:0000210:523423ee-e1f5-472d-89c2-ad5ff772c1c3", "row_index": 210, "timestamp": "2019-06-28T14:49:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "523423ee-e1f5-472d-89c2-ad5ff772c1c3", "eventTime": "2019-06-28T14:49:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "558f5a1e-670f-4575-abe5-c02e2a735eef", "record_id": "flaws_cloudtrail:0000211:558f5a1e-670f-4575-abe5-c02e2a735eef", "row_index": 211, "timestamp": "2019-06-28T14:50:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "558f5a1e-670f-4575-abe5-c02e2a735eef", "eventTime": "2019-06-28T14:50:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "558f5a1e-670f-4575-abe5-c02e2a735eef", "record_id": "flaws_cloudtrail:0000212:558f5a1e-670f-4575-abe5-c02e2a735eef", "row_index": 212, "timestamp": "2019-06-28T14:50:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "558f5a1e-670f-4575-abe5-c02e2a735eef", "eventTime": "2019-06-28T14:50:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "record_id": "flaws_cloudtrail:0000213:af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "row_index": 213, "timestamp": "2019-06-28T14:50:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "eventTime": "2019-06-28T14:50:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "record_id": "flaws_cloudtrail:0000214:af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "row_index": 214, "timestamp": "2019-06-28T14:50:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af91f2ad-aa61-450d-8a9f-bc2a0b6db4ca", "eventTime": "2019-06-28T14:50:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.188 Python/3.6.8 Linux/4.15.0-29-generic botocore/1.12.178", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8b0695e-e868-4849-ab5b-e3d24aa58838", "record_id": "flaws_cloudtrail:0000215:c8b0695e-e868-4849-ab5b-e3d24aa58838", "row_index": 215, "timestamp": "2019-06-28T14:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8b0695e-e868-4849-ab5b-e3d24aa58838", "eventTime": "2019-06-28T14:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "243483777877"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8b0695e-e868-4849-ab5b-e3d24aa58838", "record_id": "flaws_cloudtrail:0000216:c8b0695e-e868-4849-ab5b-e3d24aa58838", "row_index": 216, "timestamp": "2019-06-28T14:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8b0695e-e868-4849-ab5b-e3d24aa58838", "eventTime": "2019-06-28T14:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "243483777877"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a29231-2e28-4adf-ba74-56bdd83b4046", "record_id": "flaws_cloudtrail:0000217:2a29231-2e28-4adf-ba74-56bdd83b4046", "row_index": 217, "timestamp": "2019-06-28T14:51:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a29231-2e28-4adf-ba74-56bdd83b4046", "eventTime": "2019-06-28T14:51:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a29231-2e28-4adf-ba74-56bdd83b4046", "record_id": "flaws_cloudtrail:0000218:2a29231-2e28-4adf-ba74-56bdd83b4046", "row_index": 218, "timestamp": "2019-06-28T14:51:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.235.231.116", "user_agent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a29231-2e28-4adf-ba74-56bdd83b4046", "eventTime": "2019-06-28T14:51:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.235.231.116", "userAgent": "aws-cli/1.16.189 Python/3.6.0 Windows/10 botocore/1.12.179", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49efad54-efe8-4ce4-83c6-69143ee59e1", "record_id": "flaws_cloudtrail:0000219:49efad54-efe8-4ce4-83c6-69143ee59e1", "row_index": 219, "timestamp": "2019-06-28T14:51:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49efad54-efe8-4ce4-83c6-69143ee59e1", "eventTime": "2019-06-28T14:51:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49efad54-efe8-4ce4-83c6-69143ee59e1", "record_id": "flaws_cloudtrail:0000220:49efad54-efe8-4ce4-83c6-69143ee59e1", "row_index": 220, "timestamp": "2019-06-28T14:51:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49efad54-efe8-4ce4-83c6-69143ee59e1", "eventTime": "2019-06-28T14:51:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890de7e6-6f6e-480c-9739-65d6ac3d29eb", "record_id": "flaws_cloudtrail:0000221:890de7e6-6f6e-480c-9739-65d6ac3d29eb", "row_index": 221, "timestamp": "2019-06-28T14:51:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890de7e6-6f6e-480c-9739-65d6ac3d29eb", "eventTime": "2019-06-28T14:51:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890de7e6-6f6e-480c-9739-65d6ac3d29eb", "record_id": "flaws_cloudtrail:0000222:890de7e6-6f6e-480c-9739-65d6ac3d29eb", "row_index": 222, "timestamp": "2019-06-28T14:51:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890de7e6-6f6e-480c-9739-65d6ac3d29eb", "eventTime": "2019-06-28T14:51:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb82423-b7b9-4840-b497-3c6247ef42bf", "record_id": "flaws_cloudtrail:0000223:fb82423-b7b9-4840-b497-3c6247ef42bf", "row_index": 223, "timestamp": "2019-06-28T14:52:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb82423-b7b9-4840-b497-3c6247ef42bf", "eventTime": "2019-06-28T14:52:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb82423-b7b9-4840-b497-3c6247ef42bf", "record_id": "flaws_cloudtrail:0000224:fb82423-b7b9-4840-b497-3c6247ef42bf", "row_index": 224, "timestamp": "2019-06-28T14:52:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb82423-b7b9-4840-b497-3c6247ef42bf", "eventTime": "2019-06-28T14:52:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "record_id": "flaws_cloudtrail:0000225:2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "row_index": 225, "timestamp": "2019-06-28T14:52:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "eventTime": "2019-06-28T14:52:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNamRQYnBldkYzNHA0NU81WGVQLzZsbWZwbktGR1RMUDV0RUR0cnV0KzRwWGpyM1pndGlXL1FFZ09oa2VMdUhDQXBUOHl0eXJ0aFpNNmRlUS9wVzIvTFo5d1owY3NDNHc0U1VaNWZrSTQ5ZnpDVUl3YTVISldjVEpsNmlCYTlSZ2Fia3AxMUNibHdxeVJmZklmdUhiRThXcnVJREdlV1JBUXMwbGVUdDdsa3ZSODQ2bGt2dXZ2N2pnRGYvaGhJQmVZQis5dG95czkvZkVJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "record_id": "flaws_cloudtrail:0000226:2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "row_index": 226, "timestamp": "2019-06-28T14:52:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e160d1e-83fb-44e9-b4cd-6b531a4cb37e", "eventTime": "2019-06-28T14:52:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNamRQYnBldkYzNHA0NU81WGVQLzZsbWZwbktGR1RMUDV0RUR0cnV0KzRwWGpyM1pndGlXL1FFZ09oa2VMdUhDQXBUOHl0eXJ0aFpNNmRlUS9wVzIvTFo5d1owY3NDNHc0U1VaNWZrSTQ5ZnpDVUl3YTVISldjVEpsNmlCYTlSZ2Fia3AxMUNibHdxeVJmZklmdUhiRThXcnVJREdlV1JBUXMwbGVUdDdsa3ZSODQ2bGt2dXZ2N2pnRGYvaGhJQmVZQis5dG95czkvZkVJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389648-afd5-47c7-962d-7e6cd39a7e1b", "record_id": "flaws_cloudtrail:0000227:389648-afd5-47c7-962d-7e6cd39a7e1b", "row_index": 227, "timestamp": "2019-06-28T14:52:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389648-afd5-47c7-962d-7e6cd39a7e1b", "eventTime": "2019-06-28T14:52:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWbGtqSFdteTdUZkhPU2dLdjJFRjVLSnNGK0FOcFNnaUxvbVYvbWxWU3FPbmU4LzI5YXZTMXRCN2g2RGp6MEVmS1JKNnpmMUQvdStadUF1L0ZtYzNzMkJjQ0lBYmx5MDFiMy9TdHlRMzluRmJLZ0VSZVZmc1pVU3IzeUdSNUN1QXFrSGd5T25IUFA1VlcvemZhL2Vld0d2Z2R0RnVBaEZDQUVQL2M0Wm9EN2NwaFBuYld0dk5PNHRlb1NyekJuL2E4aUxMMmNKcEV4QnlhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389648-afd5-47c7-962d-7e6cd39a7e1b", "record_id": "flaws_cloudtrail:0000228:389648-afd5-47c7-962d-7e6cd39a7e1b", "row_index": 228, "timestamp": "2019-06-28T14:52:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389648-afd5-47c7-962d-7e6cd39a7e1b", "eventTime": "2019-06-28T14:52:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWbGtqSFdteTdUZkhPU2dLdjJFRjVLSnNGK0FOcFNnaUxvbVYvbWxWU3FPbmU4LzI5YXZTMXRCN2g2RGp6MEVmS1JKNnpmMUQvdStadUF1L0ZtYzNzMkJjQ0lBYmx5MDFiMy9TdHlRMzluRmJLZ0VSZVZmc1pVU3IzeUdSNUN1QXFrSGd5T25IUFA1VlcvemZhL2Vld0d2Z2R0RnVBaEZDQUVQL2M0Wm9EN2NwaFBuYld0dk5PNHRlb1NyekJuL2E4aUxMMmNKcEV4QnlhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50464fd4-a8ab-4567-8761-44420c520d8", "record_id": "flaws_cloudtrail:0000229:50464fd4-a8ab-4567-8761-44420c520d8", "row_index": 229, "timestamp": "2019-06-28T14:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50464fd4-a8ab-4567-8761-44420c520d8", "eventTime": "2019-06-28T14:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2eFhKaHJPYTV5ekV5Qi93MlRlaFo0L3hRMXRwRUxteU9uY0EwakhPRmlibVB6VmU2bWthUU5RSXdYZkc3bnc4T1NsUGhMUzd1YTdQM3B2djNWK0xxRTFMWVFPd2RzSjFZSUZucStrVk5OYnR0WjJlUEwvSUlONmJCR2hrRzd1ZjNaZ3lvVVRlYU1Oc3VqNUZ1TWN4TVNRcmdycHNsM3RlSndHUlBYMUVKV1hiUFM3K1JWTmxKVE1vOXhEVmg5QkZkaWpJQWZIUnJBUE9EZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50464fd4-a8ab-4567-8761-44420c520d8", "record_id": "flaws_cloudtrail:0000230:50464fd4-a8ab-4567-8761-44420c520d8", "row_index": 230, "timestamp": "2019-06-28T14:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50464fd4-a8ab-4567-8761-44420c520d8", "eventTime": "2019-06-28T14:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2eFhKaHJPYTV5ekV5Qi93MlRlaFo0L3hRMXRwRUxteU9uY0EwakhPRmlibVB6VmU2bWthUU5RSXdYZkc3bnc4T1NsUGhMUzd1YTdQM3B2djNWK0xxRTFMWVFPd2RzSjFZSUZucStrVk5OYnR0WjJlUEwvSUlONmJCR2hrRzd1ZjNaZ3lvVVRlYU1Oc3VqNUZ1TWN4TVNRcmdycHNsM3RlSndHUlBYMUVKV1hiUFM3K1JWTmxKVE1vOXhEVmg5QkZkaWpJQWZIUnJBUE9EZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dcf11dd-e54c-4982-b909-a15b85f8ae66", "record_id": "flaws_cloudtrail:0000231:1dcf11dd-e54c-4982-b909-a15b85f8ae66", "row_index": 231, "timestamp": "2019-06-28T14:52:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dcf11dd-e54c-4982-b909-a15b85f8ae66", "eventTime": "2019-06-28T14:52:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJweEovOVYwV2lTY1Y1MzRSd2ExSUc5c2NBYm9BbTR6RGF2Q1BvWTdwVHFBSlhtNjRwQTRwaXhPT2JVZUMvQkRYU1NqVVB4eTBsa1BkNVR2TnBmc3dTazdnL1NTN1hnbmpJVEhHaTVCdkdqYXBLRHJpV3h4Z3RvSmpuTDNWMk41cW0rbEt6alg1U0d5T1hRZFJydnhjMXZLdlRXcWlPSzZUVCtpNWdmNEl0NkNWSE5PRm90My9TNUV2QlkxN3dELzk0ZVlxMnVZVFZ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dcf11dd-e54c-4982-b909-a15b85f8ae66", "record_id": "flaws_cloudtrail:0000232:1dcf11dd-e54c-4982-b909-a15b85f8ae66", "row_index": 232, "timestamp": "2019-06-28T14:52:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dcf11dd-e54c-4982-b909-a15b85f8ae66", "eventTime": "2019-06-28T14:52:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJweEovOVYwV2lTY1Y1MzRSd2ExSUc5c2NBYm9BbTR6RGF2Q1BvWTdwVHFBSlhtNjRwQTRwaXhPT2JVZUMvQkRYU1NqVVB4eTBsa1BkNVR2TnBmc3dTazdnL1NTN1hnbmpJVEhHaTVCdkdqYXBLRHJpV3h4Z3RvSmpuTDNWMk41cW0rbEt6alg1U0d5T1hRZFJydnhjMXZLdlRXcWlPSzZUVCtpNWdmNEl0NkNWSE5PRm90My9TNUV2QlkxN3dELzk0ZVlxMnVZVFZ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f584888-afa6-4375-9c3a-c4dd182f3123", "record_id": "flaws_cloudtrail:0000233:f584888-afa6-4375-9c3a-c4dd182f3123", "row_index": 233, "timestamp": "2019-06-28T14:52:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f584888-afa6-4375-9c3a-c4dd182f3123", "eventTime": "2019-06-28T14:52:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcTdWWVBGZlJpdGNoSmwwWGFkb0FsbXQ3Mk9JTnA5RkxSYSt5M1ZWRDRyeFJoNEN3b2xlam5nZ2hCMmY0S2xoYjN0S3VSWEtuNjg3bkpNd25Xd29NOU9keHlpRVNFM2xVdnAvTDhBS3NocWI1MGZjcHF3RlZvRFRPZ0JrTlZZem9mYUZLclcwdWduL3VvMWxjVHl5bTB3YktYd2lxbWdEeldIbzBrOXEvbWpqTVN0UWVpdHNJaWovMksrcXNuakZTcmFZMFpXTkNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f584888-afa6-4375-9c3a-c4dd182f3123", "record_id": "flaws_cloudtrail:0000234:f584888-afa6-4375-9c3a-c4dd182f3123", "row_index": 234, "timestamp": "2019-06-28T14:52:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f584888-afa6-4375-9c3a-c4dd182f3123", "eventTime": "2019-06-28T14:52:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcTdWWVBGZlJpdGNoSmwwWGFkb0FsbXQ3Mk9JTnA5RkxSYSt5M1ZWRDRyeFJoNEN3b2xlam5nZ2hCMmY0S2xoYjN0S3VSWEtuNjg3bkpNd25Xd29NOU9keHlpRVNFM2xVdnAvTDhBS3NocWI1MGZjcHF3RlZvRFRPZ0JrTlZZem9mYUZLclcwdWduL3VvMWxjVHl5bTB3YktYd2lxbWdEeldIbzBrOXEvbWpqTVN0UWVpdHNJaWovMksrcXNuakZTcmFZMFpXTkNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0e58aa-2e49-418b-ab60-beac364660df", "record_id": "flaws_cloudtrail:0000235:ab0e58aa-2e49-418b-ab60-beac364660df", "row_index": 235, "timestamp": "2019-06-28T14:52:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0e58aa-2e49-418b-ab60-beac364660df", "eventTime": "2019-06-28T14:52:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1OGp3SlVTSExzaWEwcUNLd2VsS002aEx4eXNRSU5HeU9uU2tQdUxLeXZKazZjT0FoNC9HaVh6TmI3UFVWVldDQTR6U1NuQk83UVF4TlhQYzRGeEVrSXNKZHBoWUV6QkI0eTlEeGFnM2R3c05LUnl6c05ubiswYlVUNFVQbCt2d2tOQUdIODV6Z09MVkRKbVp1TVlEWjBlSXZXd3lqTVowY1laZldXNkFXZnZvblVqTnpjb1M3V29DaHRqeDFaNnlBd0RyY2R6VUFoY1Fmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0e58aa-2e49-418b-ab60-beac364660df", "record_id": "flaws_cloudtrail:0000236:ab0e58aa-2e49-418b-ab60-beac364660df", "row_index": 236, "timestamp": "2019-06-28T14:52:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0e58aa-2e49-418b-ab60-beac364660df", "eventTime": "2019-06-28T14:52:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1OGp3SlVTSExzaWEwcUNLd2VsS002aEx4eXNRSU5HeU9uU2tQdUxLeXZKazZjT0FoNC9HaVh6TmI3UFVWVldDQTR6U1NuQk83UVF4TlhQYzRGeEVrSXNKZHBoWUV6QkI0eTlEeGFnM2R3c05LUnl6c05ubiswYlVUNFVQbCt2d2tOQUdIODV6Z09MVkRKbVp1TVlEWjBlSXZXd3lqTVowY1laZldXNkFXZnZvblVqTnpjb1M3V29DaHRqeDFaNnlBd0RyY2R6VUFoY1Fmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc65b38b-d2c0-48e4-9085-f7e73a422b65", "record_id": "flaws_cloudtrail:0000237:dc65b38b-d2c0-48e4-9085-f7e73a422b65", "row_index": 237, "timestamp": "2019-06-28T14:52:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc65b38b-d2c0-48e4-9085-f7e73a422b65", "eventTime": "2019-06-28T14:52:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1L1hqUnVQMTJuVDU3OW45NjlKZmJUTm5zUVVlS2I1ZmI5VGJHdFM0S0E4ZEpTYytWeHNLMzM1Z2pRZXp0cFhPVnlWZGNQMlIyZXpxREU5MHB1S0Zxak9aSW0yam5hVWpPajlLbUFCdGZxQWFRN2I5SlY0UHlPMWM0VlpIQWdMSVN1OUFqSnJhR0JnVWc5NUlLS1ZOOTlob3lsZGtkWkNYYWVCdmVtY1hyM1Nhc0NPUTJreDZCVTdYWFprZlVQMm00cC8vdzlobXM5MDVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc65b38b-d2c0-48e4-9085-f7e73a422b65", "record_id": "flaws_cloudtrail:0000238:dc65b38b-d2c0-48e4-9085-f7e73a422b65", "row_index": 238, "timestamp": "2019-06-28T14:52:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc65b38b-d2c0-48e4-9085-f7e73a422b65", "eventTime": "2019-06-28T14:52:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1L1hqUnVQMTJuVDU3OW45NjlKZmJUTm5zUVVlS2I1ZmI5VGJHdFM0S0E4ZEpTYytWeHNLMzM1Z2pRZXp0cFhPVnlWZGNQMlIyZXpxREU5MHB1S0Zxak9aSW0yam5hVWpPajlLbUFCdGZxQWFRN2I5SlY0UHlPMWM0VlpIQWdMSVN1OUFqSnJhR0JnVWc5NUlLS1ZOOTlob3lsZGtkWkNYYWVCdmVtY1hyM1Nhc0NPUTJreDZCVTdYWFprZlVQMm00cC8vdzlobXM5MDVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df0c246-8d57-48a8-8661-7b2c7a493459", "record_id": "flaws_cloudtrail:0000239:4df0c246-8d57-48a8-8661-7b2c7a493459", "row_index": 239, "timestamp": "2019-06-28T14:52:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df0c246-8d57-48a8-8661-7b2c7a493459", "eventTime": "2019-06-28T14:52:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5N0RCZlA1ZVdIZDNGU2Qwak5idDlpeFdwVFEyMUd5SE1jWXhpSHhhUWEyQkwrSFlaNllTVW1hZ2lzc3pPSS90TURSYnBMbkRwU0JaOGt6T3NBaTdTSHM2NStucmpxL3ZoRXBraVAwNE9NZVUydHNKWlRNSGZtd3hETy8vWTZxajF1ZDNFOTNuN2xtTzhUcFhsdTlNaW81a0EvQnJOei9QL0VibDBaQ0pYODRxRE1VNW5Od1V0bXhVeDdGdjVQL0lKdzFtcU9Hb0FRMEZ0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df0c246-8d57-48a8-8661-7b2c7a493459", "record_id": "flaws_cloudtrail:0000240:4df0c246-8d57-48a8-8661-7b2c7a493459", "row_index": 240, "timestamp": "2019-06-28T14:52:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df0c246-8d57-48a8-8661-7b2c7a493459", "eventTime": "2019-06-28T14:52:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5N0RCZlA1ZVdIZDNGU2Qwak5idDlpeFdwVFEyMUd5SE1jWXhpSHhhUWEyQkwrSFlaNllTVW1hZ2lzc3pPSS90TURSYnBMbkRwU0JaOGt6T3NBaTdTSHM2NStucmpxL3ZoRXBraVAwNE9NZVUydHNKWlRNSGZtd3hETy8vWTZxajF1ZDNFOTNuN2xtTzhUcFhsdTlNaW81a0EvQnJOei9QL0VibDBaQ0pYODRxRE1VNW5Od1V0bXhVeDdGdjVQL0lKdzFtcU9Hb0FRMEZ0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "record_id": "flaws_cloudtrail:0000241:53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "row_index": 241, "timestamp": "2019-06-28T14:52:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "eventTime": "2019-06-28T14:52:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZVFqMkJMOVl5VVd5ekc0dXFSL0dzdi9CYXdHU25uOWdKeCtvWGw3YmREQnB4eXFXaWpoTDV6b0hJM29WUXhMNjgxZWxYaXRxRy9QMTNOODlIdTJUakxaU1YrcDFQazdqd001MFAwTUkwdzYwMDRKaS9Ncm9WaWowdkYySE43YkQydCs1VG5tcmhMSVNIWnBFSEZFYlV0cXhURDFjbEd4MWtJVnJXc2xMU2tQV2l1VklDSnhYaFo3aFRNcjZGOGwySEdybnBwZGRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "record_id": "flaws_cloudtrail:0000242:53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "row_index": 242, "timestamp": "2019-06-28T14:52:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53c968ba-5bc5-45ab-82c7-c50ecc9147d2", "eventTime": "2019-06-28T14:52:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZVFqMkJMOVl5VVd5ekc0dXFSL0dzdi9CYXdHU25uOWdKeCtvWGw3YmREQnB4eXFXaWpoTDV6b0hJM29WUXhMNjgxZWxYaXRxRy9QMTNOODlIdTJUakxaU1YrcDFQazdqd001MFAwTUkwdzYwMDRKaS9Ncm9WaWowdkYySE43YkQydCs1VG5tcmhMSVNIWnBFSEZFYlV0cXhURDFjbEd4MWtJVnJXc2xMU2tQV2l1VklDSnhYaFo3aFRNcjZGOGwySEdybnBwZGRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d293174-be93-4e3b-8323-a7d373918bb34", "record_id": "flaws_cloudtrail:0000243:0d293174-be93-4e3b-8323-a7d373918bb34", "row_index": 243, "timestamp": "2019-06-28T14:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d293174-be93-4e3b-8323-a7d373918bb34", "eventTime": "2019-06-28T14:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UGp0KzNGWkdLRVBCUm55RnRnM0FFUjlkMWhUZFdqWG1POEFkV0x1bC95YmFxeHZKNVl6VGdZR0dOcGJuRWZWNTlDNjVtaERlVFlmZitwa3cwdUNBS2NjT1cvbFY2NGptdnB6b3ZIaDdaSlkxOU1NaTV6cFRjblVOay82ZFRwcWh5bEt2Qlpoc0RhUU9IZWJ2M05NSlVvWkY3TnFOK09nb08vWTNJbVU0VlZobEJIQ1VWSmxnYzE4Ykl5dHpvaFVDZnBQQzlEMVhTWVczZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d293174-be93-4e3b-8323-a7d373918bb34", "record_id": "flaws_cloudtrail:0000244:0d293174-be93-4e3b-8323-a7d373918bb34", "row_index": 244, "timestamp": "2019-06-28T14:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d293174-be93-4e3b-8323-a7d373918bb34", "eventTime": "2019-06-28T14:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UGp0KzNGWkdLRVBCUm55RnRnM0FFUjlkMWhUZFdqWG1POEFkV0x1bC95YmFxeHZKNVl6VGdZR0dOcGJuRWZWNTlDNjVtaERlVFlmZitwa3cwdUNBS2NjT1cvbFY2NGptdnB6b3ZIaDdaSlkxOU1NaTV6cFRjblVOay82ZFRwcWh5bEt2Qlpoc0RhUU9IZWJ2M05NSlVvWkY3TnFOK09nb08vWTNJbVU0VlZobEJIQ1VWSmxnYzE4Ykl5dHpvaFVDZnBQQzlEMVhTWVczZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6df6897-3547-43c7-857c-a2a25959009f", "record_id": "flaws_cloudtrail:0000245:c6df6897-3547-43c7-857c-a2a25959009f", "row_index": 245, "timestamp": "2019-06-28T14:52:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6df6897-3547-43c7-857c-a2a25959009f", "eventTime": "2019-06-28T14:52:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4NEVva2VKdkdGZEhZQUdxSkNWamVCRXQ0TGwxVU9TWVdFcWZIMUw4eThKaEd4ZnRrbkJPa21Qa3ErYWhOSks1T2ZJeFV5bEliL3MxOHk1U01GWWhGU1dBZHdqV2JLdE1teGRqZ1dqcnRtbGhUUTZ6SmJyS01keXA4d1hvemJJOUMrcjhJN2paSE50OXBuYkNRVGcwRm5RbDNUU0FFbUEyOElPR1QrWDVrcWYwU1g5dllFRVg2WmlXQzNZTWxQbHlRaytnU0pXL05GN2ppUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6df6897-3547-43c7-857c-a2a25959009f", "record_id": "flaws_cloudtrail:0000246:c6df6897-3547-43c7-857c-a2a25959009f", "row_index": 246, "timestamp": "2019-06-28T14:52:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6df6897-3547-43c7-857c-a2a25959009f", "eventTime": "2019-06-28T14:52:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4NEVva2VKdkdGZEhZQUdxSkNWamVCRXQ0TGwxVU9TWVdFcWZIMUw4eThKaEd4ZnRrbkJPa21Qa3ErYWhOSks1T2ZJeFV5bEliL3MxOHk1U01GWWhGU1dBZHdqV2JLdE1teGRqZ1dqcnRtbGhUUTZ6SmJyS01keXA4d1hvemJJOUMrcjhJN2paSE50OXBuYkNRVGcwRm5RbDNUU0FFbUEyOElPR1QrWDVrcWYwU1g5dllFRVg2WmlXQzNZTWxQbHlRaytnU0pXL05GN2ppUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "record_id": "flaws_cloudtrail:0000247:b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "row_index": 247, "timestamp": "2019-06-28T14:52:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "eventTime": "2019-06-28T14:52:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0dmVDVnhhYVZzSE0yWjU0VjF1N1J2VS9SYW55RVpyL3VrYndFNTRqSnBBTlhmR1Z6ZmlkV1lSaEw5ZHBDWXM4bUoxdUhIUkhENnJWVDFSamNqRTRRa2pVRUNHZDFEcVkxRHEzclhmbzFrcFZJT2NkT25kWUM1ZE5WWmJGUE9UL29XV0pxWEhmUjlvaEhVbTg1bW1LWkZRSXJGVjhabjZ5MmU5elZjWEg0aUNXeUxWSDlOeXVOUWtTbDJrVDMyOFAzaFVXdm9sZm5QWVVEQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "record_id": "flaws_cloudtrail:0000248:b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "row_index": 248, "timestamp": "2019-06-28T14:52:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6dae408-5f3e-4fe8-b596-d5f6b059fe84", "eventTime": "2019-06-28T14:52:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0dmVDVnhhYVZzSE0yWjU0VjF1N1J2VS9SYW55RVpyL3VrYndFNTRqSnBBTlhmR1Z6ZmlkV1lSaEw5ZHBDWXM4bUoxdUhIUkhENnJWVDFSamNqRTRRa2pVRUNHZDFEcVkxRHEzclhmbzFrcFZJT2NkT25kWUM1ZE5WWmJGUE9UL29XV0pxWEhmUjlvaEhVbTg1bW1LWkZRSXJGVjhabjZ5MmU5elZjWEg0aUNXeUxWSDlOeXVOUWtTbDJrVDMyOFAzaFVXdm9sZm5QWVVEQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d618d51b-1023-4791-b7aa-67a1f277e35a", "record_id": "flaws_cloudtrail:0000249:d618d51b-1023-4791-b7aa-67a1f277e35a", "row_index": 249, "timestamp": "2019-06-28T14:52:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d618d51b-1023-4791-b7aa-67a1f277e35a", "eventTime": "2019-06-28T14:52:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQzhDQU9UdVRJSy9kanczS0dGSEh1N216VEEzVGVpSVpIZ2FEMHE0aG53VGRnOTJ2NDhYdHpxbGMzb1VLbFk2V2djN1JBbitrTytQR2pxeExHM2pzZHNkbFBKU29tYTFqV3drd0VmYjZraGFHWHZ0Yng3ODB3MERMMDZLSjVYdVlaTkg4MnkxWlhSWk1YSWxWT1hiSzdvZGN1ck5IcE5VM2RyOXp3WkVBMXZrRFpoYVUxekkwUHRaWE1QamZiVUNmNy93b2ZJR1YrdlVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d618d51b-1023-4791-b7aa-67a1f277e35a", "record_id": "flaws_cloudtrail:0000250:d618d51b-1023-4791-b7aa-67a1f277e35a", "row_index": 250, "timestamp": "2019-06-28T14:52:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d618d51b-1023-4791-b7aa-67a1f277e35a", "eventTime": "2019-06-28T14:52:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQzhDQU9UdVRJSy9kanczS0dGSEh1N216VEEzVGVpSVpIZ2FEMHE0aG53VGRnOTJ2NDhYdHpxbGMzb1VLbFk2V2djN1JBbitrTytQR2pxeExHM2pzZHNkbFBKU29tYTFqV3drd0VmYjZraGFHWHZ0Yng3ODB3MERMMDZLSjVYdVlaTkg4MnkxWlhSWk1YSWxWT1hiSzdvZGN1ck5IcE5VM2RyOXp3WkVBMXZrRFpoYVUxekkwUHRaWE1QamZiVUNmNy93b2ZJR1YrdlVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c357ff2-c80e-4047-b718-6fa0b060e4a5", "record_id": "flaws_cloudtrail:0000251:7c357ff2-c80e-4047-b718-6fa0b060e4a5", "row_index": 251, "timestamp": "2019-06-28T14:52:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c357ff2-c80e-4047-b718-6fa0b060e4a5", "eventTime": "2019-06-28T14:52:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKYVJSTGdqMVJ5SGgzekVuNklTT09QNjJwYUxJUHBsWnZQS0RuRk9SSkozTEFSQ1Y5MkMzZStWbC9NUzA4QXZvTVpYdWlFQW9JcTlReVI5ZmFhSEJEZjZBdGNnZzM2S0RaV1hYT2NQemxPVElwbG01VzhMa09ybmI3akQ4OHVOZTFmRUg5RGtnOVM4b3k1VnBacWR6WnJINm51Q1Axb1hIUCtCZXFTTVRoL2dlUlJYRS9ZaloyRlgxeTdaU0srMDd5VUhxMVljQVYrNEd0MEFFdm5odUp5cGhuSWdTR0hrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c357ff2-c80e-4047-b718-6fa0b060e4a5", "record_id": "flaws_cloudtrail:0000252:7c357ff2-c80e-4047-b718-6fa0b060e4a5", "row_index": 252, "timestamp": "2019-06-28T14:52:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c357ff2-c80e-4047-b718-6fa0b060e4a5", "eventTime": "2019-06-28T14:52:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKYVJSTGdqMVJ5SGgzekVuNklTT09QNjJwYUxJUHBsWnZQS0RuRk9SSkozTEFSQ1Y5MkMzZStWbC9NUzA4QXZvTVpYdWlFQW9JcTlReVI5ZmFhSEJEZjZBdGNnZzM2S0RaV1hYT2NQemxPVElwbG01VzhMa09ybmI3akQ4OHVOZTFmRUg5RGtnOVM4b3k1VnBacWR6WnJINm51Q1Axb1hIUCtCZXFTTVRoL2dlUlJYRS9ZaloyRlgxeTdaU0srMDd5VUhxMVljQVYrNEd0MEFFdm5odUp5cGhuSWdTR0hrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "record_id": "flaws_cloudtrail:0000253:b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "row_index": 253, "timestamp": "2019-06-28T14:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "eventTime": "2019-06-28T14:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuTHR6WGEzNExBendXS1RpSE01SDgrenlvZ3hJSmdQRTNaamZld0syRnRJSGxYRFRGcWw4ek5zVmpOa21BMERTY2h2MWlOSS9aYmZRdVpoVkU1QmV0RTJGbzBuTnZSa0FUTzRwRGZndVNzNGJkMkJXTXdFTDJCcWs5dDB6SlNiZFEzam1FSHpZZGx6N0ptTFNYdmxZaEtiZ1JQU3dUZndtMkdIcHFCQlk5eHltV2Q3d1lGQkI1NzJTbzBQaVB1ZHcyQTZMUE9WTkVaYmswcURNR1F5K0dxdmZRL2dodHNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "record_id": "flaws_cloudtrail:0000254:753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "row_index": 254, "timestamp": "2019-06-28T14:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "eventTime": "2019-06-28T14:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWEFkRHQzMm56ZHo2SEJGTkhOOGNsTy9MRXN0V2dTRWVQcWJLVU5tRlFTclFYYVFKcmFiWXMxUlEwQ1R1a0RVZmdrSzV4Nk9vbHk5cHVIQVRCSXhFY3BJUWo4NWlHRkhBWm10cjN0VGIrQ3lVaXBhVXJyOU5vWTNIMktqdlJxU2k3a0RCUmUwTlFZd0h4TGt1R2hpc1hMbHk0REpMU0RnNmdSNHNuQmpmdXltMXRBS0krMi9ydURvWVlEb2w1bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "record_id": "flaws_cloudtrail:0000255:b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "row_index": 255, "timestamp": "2019-06-28T14:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97dd2d8-ed29-4e08-aed9-e5db4f5ea96b", "eventTime": "2019-06-28T14:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuTHR6WGEzNExBendXS1RpSE01SDgrenlvZ3hJSmdQRTNaamZld0syRnRJSGxYRFRGcWw4ek5zVmpOa21BMERTY2h2MWlOSS9aYmZRdVpoVkU1QmV0RTJGbzBuTnZSa0FUTzRwRGZndVNzNGJkMkJXTXdFTDJCcWs5dDB6SlNiZFEzam1FSHpZZGx6N0ptTFNYdmxZaEtiZ1JQU3dUZndtMkdIcHFCQlk5eHltV2Q3d1lGQkI1NzJTbzBQaVB1ZHcyQTZMUE9WTkVaYmswcURNR1F5K0dxdmZRL2dodHNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "record_id": "flaws_cloudtrail:0000256:753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "row_index": 256, "timestamp": "2019-06-28T14:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "753e96c6-4637-44dd-98d5-3df6fb0e4ae3", "eventTime": "2019-06-28T14:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWEFkRHQzMm56ZHo2SEJGTkhOOGNsTy9MRXN0V2dTRWVQcWJLVU5tRlFTclFYYVFKcmFiWXMxUlEwQ1R1a0RVZmdrSzV4Nk9vbHk5cHVIQVRCSXhFY3BJUWo4NWlHRkhBWm10cjN0VGIrQ3lVaXBhVXJyOU5vWTNIMktqdlJxU2k3a0RCUmUwTlFZd0h4TGt1R2hpc1hMbHk0REpMU0RnNmdSNHNuQmpmdXltMXRBS0krMi9ydURvWVlEb2w1bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa22deeb-7e26-4927-bddb-6e7bfc247dba", "record_id": "flaws_cloudtrail:0000257:aa22deeb-7e26-4927-bddb-6e7bfc247dba", "row_index": 257, "timestamp": "2019-06-28T14:52:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa22deeb-7e26-4927-bddb-6e7bfc247dba", "eventTime": "2019-06-28T14:52:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWU8zalRDV1FNcmdJcm5YdXgxcGVWZTVrR0FudVdiVGduV2hUQTNuRzFFVHJnQU16YlczUXgyQjlreWVsRGN0OCtjT2p6SmpDaVFxMGl3dnJ4d3p1blFQUmludTk3a2hNaGY2WElSRmtkRWhQWUl5Z2w5bitMV0JqRzZnV1F5dFprK0JxS1NkUlYyLzBRNmVFalg2RHFWbXJiMUVWYXNTVTZ0MWkwdk9xY2tyWTQ1RmQxRDVTREMxWWtIL0RSRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa22deeb-7e26-4927-bddb-6e7bfc247dba", "record_id": "flaws_cloudtrail:0000258:aa22deeb-7e26-4927-bddb-6e7bfc247dba", "row_index": 258, "timestamp": "2019-06-28T14:52:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa22deeb-7e26-4927-bddb-6e7bfc247dba", "eventTime": "2019-06-28T14:52:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWU8zalRDV1FNcmdJcm5YdXgxcGVWZTVrR0FudVdiVGduV2hUQTNuRzFFVHJnQU16YlczUXgyQjlreWVsRGN0OCtjT2p6SmpDaVFxMGl3dnJ4d3p1blFQUmludTk3a2hNaGY2WElSRmtkRWhQWUl5Z2w5bitMV0JqRzZnV1F5dFprK0JxS1NkUlYyLzBRNmVFalg2RHFWbXJiMUVWYXNTVTZ0MWkwdk9xY2tyWTQ1RmQxRDVTREMxWWtIL0RSRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edd5967-b1fe-4112-9488-f00c7642e8fd", "record_id": "flaws_cloudtrail:0000259:4edd5967-b1fe-4112-9488-f00c7642e8fd", "row_index": 259, "timestamp": "2019-06-28T14:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edd5967-b1fe-4112-9488-f00c7642e8fd", "eventTime": "2019-06-28T14:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZczRsWmRoNFFJTFRqWWpGNnBVWTdPSzNCazcwb3lZbWkxSnVsRVlnQ2tJZ2dpL3FMSjVPREx1VXZmakY0Nzc4bi9Ob3ZYR0NyVXJ2VWluUjVPeGwyK1NBZVdISUtZa2FqVkd4TjVRWGpaalUwd2hkV0hQNHpSTkJpR2VYQ2o5T3NSU01lejl3cWo3dEhXcUhncjdCd3FvSkllQ0IybWF3cEM0eUdRQVk4U3h4bUdrbGtkRy9YVTdHZHdjY2FyY01tZ1ZtVXhvRXRiYTZXRW9WYjMxTTN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd667ed-67bf-4ce1-a68a-7541a6026f34", "record_id": "flaws_cloudtrail:0000260:4dd667ed-67bf-4ce1-a68a-7541a6026f34", "row_index": 260, "timestamp": "2019-06-28T14:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd667ed-67bf-4ce1-a68a-7541a6026f34", "eventTime": "2019-06-28T14:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4S1ZpYy9tKzhVbHZVZzhydHBaRFUvWDlwaEs1dGx1dGE2b0t4YjBBVDRPd1NEL2ZMSndBQ3ZwbldybFNBYkV2MkQyM0cxdmphOTI2cnZuSEZZVmRxUUFFVFRhWFpPeDFIV1RlMVNHRm5qMzFjaDJKK2NqZGRiUlM5REV2Mi9QbGRUTUpqUkJ0N1ltY2pKMktzNkU3U0txVXdJVWpvakhrMXV5V0VqbG1NU1ltQ0FrdTc4MWlxck0wTzh4MHl2dWdPY0FLRmUrRDhKZElhZ1cvVEpxRHpTUlozR0p1bE1JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edd5967-b1fe-4112-9488-f00c7642e8fd", "record_id": "flaws_cloudtrail:0000261:4edd5967-b1fe-4112-9488-f00c7642e8fd", "row_index": 261, "timestamp": "2019-06-28T14:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edd5967-b1fe-4112-9488-f00c7642e8fd", "eventTime": "2019-06-28T14:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZczRsWmRoNFFJTFRqWWpGNnBVWTdPSzNCazcwb3lZbWkxSnVsRVlnQ2tJZ2dpL3FMSjVPREx1VXZmakY0Nzc4bi9Ob3ZYR0NyVXJ2VWluUjVPeGwyK1NBZVdISUtZa2FqVkd4TjVRWGpaalUwd2hkV0hQNHpSTkJpR2VYQ2o5T3NSU01lejl3cWo3dEhXcUhncjdCd3FvSkllQ0IybWF3cEM0eUdRQVk4U3h4bUdrbGtkRy9YVTdHZHdjY2FyY01tZ1ZtVXhvRXRiYTZXRW9WYjMxTTN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd667ed-67bf-4ce1-a68a-7541a6026f34", "record_id": "flaws_cloudtrail:0000262:4dd667ed-67bf-4ce1-a68a-7541a6026f34", "row_index": 262, "timestamp": "2019-06-28T14:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd667ed-67bf-4ce1-a68a-7541a6026f34", "eventTime": "2019-06-28T14:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4S1ZpYy9tKzhVbHZVZzhydHBaRFUvWDlwaEs1dGx1dGE2b0t4YjBBVDRPd1NEL2ZMSndBQ3ZwbldybFNBYkV2MkQyM0cxdmphOTI2cnZuSEZZVmRxUUFFVFRhWFpPeDFIV1RlMVNHRm5qMzFjaDJKK2NqZGRiUlM5REV2Mi9QbGRUTUpqUkJ0N1ltY2pKMktzNkU3U0txVXdJVWpvakhrMXV5V0VqbG1NU1ltQ0FrdTc4MWlxck0wTzh4MHl2dWdPY0FLRmUrRDhKZElhZ1cvVEpxRHpTUlozR0p1bE1JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "record_id": "flaws_cloudtrail:0000263:ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "row_index": 263, "timestamp": "2019-06-28T14:52:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "eventTime": "2019-06-28T14:52:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Q1pWaklBV1dORnRVVXI1M2wraDd5V0R4b2hUQzNBL1NKSi9VTExyNTdNQjlUcHU1Q0Q1d2VydmVIUGU2VlBQRkc4R1RMK0ppdDhWNk1xTzArNFNOUDdlRE9UUXdtS2lpTVU1RzhraXBkSWIwYzFmZEZZV2VEUG5qY01hQVQ0N3pCRjRRN2ZRa09uNzBhK0hQT1BXd0RTaGlnTGtaZ3NCOTRJa3pYVGhFdkplc3dUaWg2c0hvaURhNHlBejJGMmliRm5FVFpGcit3NG5TZ3JCaW42VmFQbTdjOHBRNGpJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "record_id": "flaws_cloudtrail:0000264:ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "row_index": 264, "timestamp": "2019-06-28T14:52:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab010846d-5744-440c-bc7c-f2eeabf2d0fe", "eventTime": "2019-06-28T14:52:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Q1pWaklBV1dORnRVVXI1M2wraDd5V0R4b2hUQzNBL1NKSi9VTExyNTdNQjlUcHU1Q0Q1d2VydmVIUGU2VlBQRkc4R1RMK0ppdDhWNk1xTzArNFNOUDdlRE9UUXdtS2lpTVU1RzhraXBkSWIwYzFmZEZZV2VEUG5qY01hQVQ0N3pCRjRRN2ZRa09uNzBhK0hQT1BXd0RTaGlnTGtaZ3NCOTRJa3pYVGhFdkplc3dUaWg2c0hvaURhNHlBejJGMmliRm5FVFpGcit3NG5TZ3JCaW42VmFQbTdjOHBRNGpJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d36253b-4792-48e8-898e-9c4e65c4d293", "record_id": "flaws_cloudtrail:0000265:8d36253b-4792-48e8-898e-9c4e65c4d293", "row_index": 265, "timestamp": "2019-06-28T14:52:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d36253b-4792-48e8-898e-9c4e65c4d293", "eventTime": "2019-06-28T14:52:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTFJXejhxMFd1djJ5NG1sWTd1aElYWFNKN3JEVVZ2TWhXK3I0VFdFMEh3RHE2Z0J5SHROUXpmU1pieFRFbVNDMVlIMXVKMkJGQXVzZTRSUzQrM20wb1JWWHRFMGZDTWkzL2Z0ZzRhdDEyaTVtekpTTnRrRHY3YW5FeUJma2lWYmZ2ZFZUb2JGWDh3eTVYNkh1OEd6V3hzd2F3c3NwRlFlWnN0eFpSQm5rOFRPRHBKNFNUQzZkYSthdjJqMlFBTmlKQkNyeW5TQmRIM2E4MHNxRFRJN1Z3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d36253b-4792-48e8-898e-9c4e65c4d293", "record_id": "flaws_cloudtrail:0000266:8d36253b-4792-48e8-898e-9c4e65c4d293", "row_index": 266, "timestamp": "2019-06-28T14:52:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d36253b-4792-48e8-898e-9c4e65c4d293", "eventTime": "2019-06-28T14:52:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTFJXejhxMFd1djJ5NG1sWTd1aElYWFNKN3JEVVZ2TWhXK3I0VFdFMEh3RHE2Z0J5SHROUXpmU1pieFRFbVNDMVlIMXVKMkJGQXVzZTRSUzQrM20wb1JWWHRFMGZDTWkzL2Z0ZzRhdDEyaTVtekpTTnRrRHY3YW5FeUJma2lWYmZ2ZFZUb2JGWDh3eTVYNkh1OEd6V3hzd2F3c3NwRlFlWnN0eFpSQm5rOFRPRHBKNFNUQzZkYSthdjJqMlFBTmlKQkNyeW5TQmRIM2E4MHNxRFRJN1Z3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1942bfe6-0027-4e08-b98a-2c8484437342", "record_id": "flaws_cloudtrail:0000267:1942bfe6-0027-4e08-b98a-2c8484437342", "row_index": 267, "timestamp": "2019-06-28T14:52:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1942bfe6-0027-4e08-b98a-2c8484437342", "eventTime": "2019-06-28T14:52:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2Z0ZUVFU3YmdCRWpKVFRIcmNKVS9uWEJUZ1ZvK2VsTlhLRTVkK21Cdk9lOUJUZEVuMGpJK0hob2NhaDZDSWZBV3E1RkhzNm5jUFkyZmlISUIrRGZrUUxqTW56TTdva3dYTTJhZGd3SlhaSUZJSTFjdkp0REI5TGRzWnNXU3ZCZldNM1I4emlEUXRiWWlxZmVmT3ZEMy90L3BESnVMZEgzZVlkbDRTUnc3MFFhcDNLOVAvWGtIallMNysyM3NlbG5xeUVOVHNZL3J6UXRDV0ZZeEFaYlFRNlJ5bGt1YUNzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1942bfe6-0027-4e08-b98a-2c8484437342", "record_id": "flaws_cloudtrail:0000268:1942bfe6-0027-4e08-b98a-2c8484437342", "row_index": 268, "timestamp": "2019-06-28T14:52:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1942bfe6-0027-4e08-b98a-2c8484437342", "eventTime": "2019-06-28T14:52:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2Z0ZUVFU3YmdCRWpKVFRIcmNKVS9uWEJUZ1ZvK2VsTlhLRTVkK21Cdk9lOUJUZEVuMGpJK0hob2NhaDZDSWZBV3E1RkhzNm5jUFkyZmlISUIrRGZrUUxqTW56TTdva3dYTTJhZGd3SlhaSUZJSTFjdkp0REI5TGRzWnNXU3ZCZldNM1I4emlEUXRiWWlxZmVmT3ZEMy90L3BESnVMZEgzZVlkbDRTUnc3MFFhcDNLOVAvWGtIallMNysyM3NlbG5xeUVOVHNZL3J6UXRDV0ZZeEFaYlFRNlJ5bGt1YUNzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3eb56cb-45bd-4432-a77a-5b54c1e72404", "record_id": "flaws_cloudtrail:0000269:b3eb56cb-45bd-4432-a77a-5b54c1e72404", "row_index": 269, "timestamp": "2019-06-28T14:52:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3eb56cb-45bd-4432-a77a-5b54c1e72404", "eventTime": "2019-06-28T14:52:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSjlES0FEemNTeEszSUFHNndXWUV5TTlxeGlsV0NSZlFtRG5ENncwZlZpN21oQXNpWU1qVzFWN1NEWWpUeVpudG8rbk0zanlKaHpzamxSeXVteU1VeEJBcm9QM0pmLytlNTZ6VjdvZHMxSHpabTU2N3RtVy9kc0hwR1dWQi9hQ24rVmIyQUNBcFdVMGJNVjF1YnV2M0FRUCtRMy9FUWQzWGY3OEY0dEJTTDQrMEcvSysxc0lqZks2cHJGdW1jUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3eb56cb-45bd-4432-a77a-5b54c1e72404", "record_id": "flaws_cloudtrail:0000270:b3eb56cb-45bd-4432-a77a-5b54c1e72404", "row_index": 270, "timestamp": "2019-06-28T14:52:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3eb56cb-45bd-4432-a77a-5b54c1e72404", "eventTime": "2019-06-28T14:52:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/16.7.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSjlES0FEemNTeEszSUFHNndXWUV5TTlxeGlsV0NSZlFtRG5ENncwZlZpN21oQXNpWU1qVzFWN1NEWWpUeVpudG8rbk0zanlKaHpzamxSeXVteU1VeEJBcm9QM0pmLytlNTZ6VjdvZHMxSHpabTU2N3RtVy9kc0hwR1dWQi9hQ24rVmIyQUNBcFdVMGJNVjF1YnV2M0FRUCtRMy9FUWQzWGY3OEY0dEJTTDQrMEcvSysxc0lqZks2cHJGdW1jUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e50229-79f8-4743-b057-e3ccd9cd3d82", "record_id": "flaws_cloudtrail:0000271:5e50229-79f8-4743-b057-e3ccd9cd3d82", "row_index": 271, "timestamp": "2019-06-28T14:53:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e50229-79f8-4743-b057-e3ccd9cd3d82", "eventTime": "2019-06-28T14:53:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "243483777877"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e50229-79f8-4743-b057-e3ccd9cd3d82", "record_id": "flaws_cloudtrail:0000272:5e50229-79f8-4743-b057-e3ccd9cd3d82", "row_index": 272, "timestamp": "2019-06-28T14:53:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e50229-79f8-4743-b057-e3ccd9cd3d82", "eventTime": "2019-06-28T14:53:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "243483777877"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e16acb7-1d37-441c-89e8-e659bec4a70a", "record_id": "flaws_cloudtrail:0000273:1e16acb7-1d37-441c-89e8-e659bec4a70a", "row_index": 273, "timestamp": "2019-06-28T14:54:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e16acb7-1d37-441c-89e8-e659bec4a70a", "eventTime": "2019-06-28T14:54:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e16acb7-1d37-441c-89e8-e659bec4a70a", "record_id": "flaws_cloudtrail:0000274:1e16acb7-1d37-441c-89e8-e659bec4a70a", "row_index": 274, "timestamp": "2019-06-28T14:54:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.214.220.150", "user_agent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e16acb7-1d37-441c-89e8-e659bec4a70a", "eventTime": "2019-06-28T14:54:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.214.220.150", "userAgent": "aws-cli/1.16.80 Python/3.7.2 Darwin/18.6.0 botocore/1.12.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a2fe48-8368-4add-9aac-ade6172a7180", "record_id": "flaws_cloudtrail:0000275:98a2fe48-8368-4add-9aac-ade6172a7180", "row_index": 275, "timestamp": "2019-06-28T14:54:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.189 Python/2.7.10 Darwin/18.6.0 botocore/1.12.179", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a2fe48-8368-4add-9aac-ade6172a7180", "eventTime": "2019-06-28T14:54:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.189 Python/2.7.10 Darwin/18.6.0 botocore/1.12.179", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a2fe48-8368-4add-9aac-ade6172a7180", "record_id": "flaws_cloudtrail:0000276:98a2fe48-8368-4add-9aac-ade6172a7180", "row_index": 276, "timestamp": "2019-06-28T14:54:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.109.251.4", "user_agent": "aws-cli/1.16.189 Python/2.7.10 Darwin/18.6.0 botocore/1.12.179", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a2fe48-8368-4add-9aac-ade6172a7180", "eventTime": "2019-06-28T14:54:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.109.251.4", "userAgent": "aws-cli/1.16.189 Python/2.7.10 Darwin/18.6.0 botocore/1.12.179", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "record_id": "flaws_cloudtrail:0000277:eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "row_index": 277, "timestamp": "2019-06-28T15:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "eventTime": "2019-06-28T15:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVDMQBKWUW7SR2E08", "expiration": "Jun 28, 2019 9:46:00 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "record_id": "flaws_cloudtrail:0000278:eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "row_index": 278, "timestamp": "2019-06-28T15:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb3ca355-f4e4-41d7-9a2f-e84c193ca110", "eventTime": "2019-06-28T15:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVDMQBKWUW7SR2E08", "expiration": "Jun 28, 2019 9:46:00 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "record_id": "flaws_cloudtrail:0000279:9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "row_index": 279, "timestamp": "2019-06-28T16:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "eventTime": "2019-06-28T16:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7LZLH1HUIIU9R271", "expiration": "Jun 28, 2019 11:01:30 PM", "sessionToken": "AgoJb3JpZ2luX2VjEBkaCXVzLXdlc3QtMiJGMEQCIFpHkwxdTChp3tCou0FmBe9kyLuV0wAOVHMevKtH8/eiAiAcUMlLaQtEf/daSaIQ51S64Q1a6/VpmDHZLvOwPJNAyyraAwhiEAAaDDk3NTQyNjI2MjAyOSIMUogkH7az8/2vjSuKKrcDD7uBN/Gqnc9kg0Gxu9ykBIhnSyzbef3aghGFYBjJswqP6YennOuhR7sgwiW4N6Czjxwhdlnm/pXKqY9pV/lRdpv4471JegxlgdPhNUFjOKEmevth3VLG55whRSrAUNpzUnBIPWX0Kum2bY+YflGqaW0MUIZZGGFZ16wFZKhoAUQsBSHWZOZsFuj+CZKFg5u7YEiYffHrzvC3ETzXRwJnPWTgvO6+jA+FcIwkzKHvCrnAj1YPI7G3Pr3ff0sz/1x0vxpPYzrVXmVabc4YZg3SBixTp3aX35eDdiYujOveqCoMjQqmi6EomDOyHxYQmtljtbeEa+OiZwmxoP7+FfIHp50mgidZZ8gBr6zjmCIrbFsZx9dA0Jf6c7xszv23ckfO8yFs6+SwG7H8rR6dj3cm6fa/8WMgBOX3CAiCDf6yWY0EZAb02IqwtjM5oMML9iHzHBp6F2zEXWTUjm8756kMI/5/3OAgLo4bqc7xAxZN1xT0JbiY0jMjVV9JP0LcM648Q2T0qyRg3x90pUn2jG5OHpK/0iY/TPrmB5FoeKdQ7mow0pXFzNHdDtVg9djOcQLzsQIsMRsmTzDEgNnoBTq1ATZAb7YEsy8rDjDyU595SGmM67o8PydMVH7ZjpJQSCs3I5rEGLmuiPhNXBFbylQedYyP/i5lJ9CnoNwvzf0cd2J3LfQXuSUHw7rOyhG7BYBq++Nkpig0BlYEzBVrtd5oRtEzLiQrKr8TD3cMyJHIIdk9pkhvRIYVxs6ZNvSwBPUwcylfz/U47LIl/AUJmsqTUkb/fW6kuIC4Uzo8lWgakmARzdBje2Ci60sjJce3Sl3AEzoNO78="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "record_id": "flaws_cloudtrail:0000280:9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "row_index": 280, "timestamp": "2019-06-28T16:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a0f8a1e-b28d-4a43-940d-14152eeaca5a", "eventTime": "2019-06-28T16:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7LZLH1HUIIU9R271", "expiration": "Jun 28, 2019 11:01:30 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ed15c3-6ac3-49d0-a01f-71717da71d86", "record_id": "flaws_cloudtrail:0000281:d1ed15c3-6ac3-49d0-a01f-71717da71d86", "row_index": 281, "timestamp": "2019-06-28T16:53:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.248.50", "user_agent": "[aws-cli/1.16.189 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.179]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ed15c3-6ac3-49d0-a01f-71717da71d86", "eventTime": "2019-06-28T16:53:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.248.50", "userAgent": "[aws-cli/1.16.189 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.179]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ed15c3-6ac3-49d0-a01f-71717da71d86", "record_id": "flaws_cloudtrail:0000282:d1ed15c3-6ac3-49d0-a01f-71717da71d86", "row_index": 282, "timestamp": "2019-06-28T16:53:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.248.50", "user_agent": "[aws-cli/1.16.189 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.179]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ed15c3-6ac3-49d0-a01f-71717da71d86", "eventTime": "2019-06-28T16:53:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.248.50", "userAgent": "[aws-cli/1.16.189 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.179]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30838c8-7721-492d-b6d9-9acbdf6b018c", "record_id": "flaws_cloudtrail:0000283:30838c8-7721-492d-b6d9-9acbdf6b018c", "row_index": 283, "timestamp": "2019-06-28T17:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30838c8-7721-492d-b6d9-9acbdf6b018c", "eventTime": "2019-06-28T17:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL154YPP1CGQYWIMS", "expiration": "Jun 28, 2019 11:49:10 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30838c8-7721-492d-b6d9-9acbdf6b018c", "record_id": "flaws_cloudtrail:0000284:30838c8-7721-492d-b6d9-9acbdf6b018c", "row_index": 284, "timestamp": "2019-06-28T17:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30838c8-7721-492d-b6d9-9acbdf6b018c", "eventTime": "2019-06-28T17:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL154YPP1CGQYWIMS", "expiration": "Jun 28, 2019 11:49:10 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213ae5c0-23c1-4548-8003-3808da527918", "record_id": "flaws_cloudtrail:0000285:213ae5c0-23c1-4548-8003-3808da527918", "row_index": 285, "timestamp": "2019-06-28T17:45:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 495, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213ae5c0-23c1-4548-8003-3808da527918", "eventTime": "2019-06-28T17:45:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1c777b3-88a9-40ac-97cd-0f52531369b2", "record_id": "flaws_cloudtrail:0000286:e1c777b3-88a9-40ac-97cd-0f52531369b2", "row_index": 286, "timestamp": "2019-06-28T17:46:14Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 524, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1c777b3-88a9-40ac-97cd-0f52531369b2", "eventTime": "2019-06-28T17:46:14Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38caa807-05b4-4702-906a-1f07d6f353cb", "record_id": "flaws_cloudtrail:0000287:38caa807-05b4-4702-906a-1f07d6f353cb", "row_index": 287, "timestamp": "2019-06-28T17:47:40Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 524, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38caa807-05b4-4702-906a-1f07d6f353cb", "eventTime": "2019-06-28T17:47:40Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "801ea9f0-a39f-4e42-978d-b1b971f6f797", "record_id": "flaws_cloudtrail:0000288:801ea9f0-a39f-4e42-978d-b1b971f6f797", "row_index": 288, "timestamp": "2019-06-28T17:48:37Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "801ea9f0-a39f-4e42-978d-b1b971f6f797", "eventTime": "2019-06-28T17:48:37Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf41dd2-b728-43cd-8f68-ab34337369fa", "record_id": "flaws_cloudtrail:0000289:cdf41dd2-b728-43cd-8f68-ab34337369fa", "row_index": 289, "timestamp": "2019-06-28T17:49:38Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 525, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf41dd2-b728-43cd-8f68-ab34337369fa", "eventTime": "2019-06-28T17:49:38Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b32edf0-c2df-4e15-bbc8-78aeab461b4e", "record_id": "flaws_cloudtrail:0000290:6b32edf0-c2df-4e15-bbc8-78aeab461b4e", "row_index": 290, "timestamp": "2019-06-28T17:51:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 495, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b32edf0-c2df-4e15-bbc8-78aeab461b4e", "eventTime": "2019-06-28T17:51:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab34d9f-8213-4afd-b9e8-10e9eac70f83", "record_id": "flaws_cloudtrail:0000291:0ab34d9f-8213-4afd-b9e8-10e9eac70f83", "row_index": 291, "timestamp": "2019-06-28T17:51:41Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 490, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab34d9f-8213-4afd-b9e8-10e9eac70f83", "eventTime": "2019-06-28T17:51:41Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b57c56e-b2a2-4a41-bc82-d7c7e210d801", "record_id": "flaws_cloudtrail:0000292:4b57c56e-b2a2-4a41-bc82-d7c7e210d801", "row_index": 292, "timestamp": "2019-06-28T17:52:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 500, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b57c56e-b2a2-4a41-bc82-d7c7e210d801", "eventTime": "2019-06-28T17:52:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf13a62-d5c5-4154-8482-9344eea6d005", "record_id": "flaws_cloudtrail:0000293:fdf13a62-d5c5-4154-8482-9344eea6d005", "row_index": 293, "timestamp": "2019-06-28T17:52:59Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf13a62-d5c5-4154-8482-9344eea6d005", "eventTime": "2019-06-28T17:52:59Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc0e3f7-ca33-499e-9af4-5b4ea658a4eb", "record_id": "flaws_cloudtrail:0000294:5dc0e3f7-ca33-499e-9af4-5b4ea658a4eb", "row_index": 294, "timestamp": "2019-06-28T17:53:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 488, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc0e3f7-ca33-499e-9af4-5b4ea658a4eb", "eventTime": "2019-06-28T17:53:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3ebf80f-9395-4231-8633-dad1c866057d", "record_id": "flaws_cloudtrail:0000295:b3ebf80f-9395-4231-8633-dad1c866057d", "row_index": 295, "timestamp": "2019-06-28T17:54:38Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3ebf80f-9395-4231-8633-dad1c866057d", "eventTime": "2019-06-28T17:54:38Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c6d9b1-3904-45df-b741-b988570ff215", "record_id": "flaws_cloudtrail:0000296:40c6d9b1-3904-45df-b741-b988570ff215", "row_index": 296, "timestamp": "2019-06-28T17:56:48Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA4CTKTLQWIK6VQ8NQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.200.194.218", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 497, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c6d9b1-3904-45df-b741-b988570ff215", "eventTime": "2019-06-28T17:56:48Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.200.194.218", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA4CTKTLQWIK6VQ8NQ", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "record_id": "flaws_cloudtrail:0000297:9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "row_index": 297, "timestamp": "2019-06-28T18:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "eventTime": "2019-06-28T18:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYKU0T66KV7ESBG9B", "expiration": "Jun 29, 2019 12:35:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "record_id": "flaws_cloudtrail:0000298:9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "row_index": 298, "timestamp": "2019-06-28T18:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dcafe8d-9d3b-4572-bcdc-b0c62de69f2b", "eventTime": "2019-06-28T18:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYKU0T66KV7ESBG9B", "expiration": "Jun 29, 2019 12:35:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87c28f9-0ff5-45e7-9007-e58b816b2e19", "record_id": "flaws_cloudtrail:0000299:e87c28f9-0ff5-45e7-9007-e58b816b2e19", "row_index": 299, "timestamp": "2019-06-28T18:30:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1920, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87c28f9-0ff5-45e7-9007-e58b816b2e19", "eventTime": "2019-06-28T18:30:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXIFKE6SK92N9NVIC", "expiration": "Jun 28, 2019 7:30:54 PM", "sessionToken": "AgoGb3JpZ2luEG4aCXVzLXdlc3QtMiKAAnDidICyqmPAJe38Fu2G3Pr3b6WXGiQUqp5Hk3rqz5Etyj3xK+HcH/TVA+alv59el6C4s9GhR/wF5F9v+ojxgKw3rMB2JT43gF5U64ijmzbm+bVKIkmpYJh5pfPcb9nufz50UdFJsv0t+7/KixMC1JnMXBpLytqolx/FR6Cc54VslokOzrTtKK7SMyHFe3ZbAlOUzjH/E9KZZ0O6jzmsgiICKGDC1KxDN/H8LMpdYnk2KHXEKaW1iixJmD2I3ynk/9gfYd7HpKO3dMaKd4HdeRTabofSMzDJ8stvXKrfh+cFwRuDAtI7DxcrWe6r4a3n2c9mRBD4klIB1GCHYL5TakQq6AIIZBAAGgw5NzU0MjYyNjIwMjkiDEm7SxAzeeJRmW5QDCrFAlM84AXLXbfXELJmCuP7UI45kzRlkGXQit34Jr7eX+jq/K1qghDawxClGXZQBHyjneVi1f6HzrcLT/Zqx+fWNfDziuk/W6MJVDGucR6lI+wqx7tVR6n8JYuPCAZCrYK8YhJzdTK52F/IIs9sjwPtZTRNl6B/ShOcQMjgCL6alOP2t2BR5rbfgUk0wP8ayqyuHyiWog6yh9vp7ryELrysCAAxUamYrJYUpS4S6L1LiQWpZS+y7qxkNbemVyOybUMMQzWzQqzRjESGsU/Lj8Qutfb17X6qqjv82vmCh79TvPAoBlW61EhMn0/uaNghaGi6EEh3WpOYMh3xg2PucEuIv3IrCYGOmH3ctSICxZeAZKqeF1OzAHhOuzsP7MyzP9V5E7DFYluVg8hsfhrgXb21fybdLT9W/SniCSKljfT3QVJnGDyhBSIw3rnZ6AU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87c28f9-0ff5-45e7-9007-e58b816b2e19", "record_id": "flaws_cloudtrail:0000300:e87c28f9-0ff5-45e7-9007-e58b816b2e19", "row_index": 300, "timestamp": "2019-06-28T18:30:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1920, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87c28f9-0ff5-45e7-9007-e58b816b2e19", "eventTime": "2019-06-28T18:30:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXIFKE6SK92N9NVIC", "expiration": "Jun 28, 2019 7:30:54 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12a0807-04c6-4f8c-91f6-c759c4d60613", "record_id": "flaws_cloudtrail:0000301:b12a0807-04c6-4f8c-91f6-c759c4d60613", "row_index": 301, "timestamp": "2019-06-28T19:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12a0807-04c6-4f8c-91f6-c759c4d60613", "eventTime": "2019-06-28T19:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0PVACIDF5UD3BHEF", "expiration": "Jun 29, 2019 1:44:33 AM", "sessionToken": "AgoJb3JpZ2luX2VjEBwaCXVzLXdlc3QtMiJHMEUCIQDaNhjQp2VvKnR8Tokk6qg0MB0a9yrJVvtQzySvrx3tqAIgQRzoIzXNwJuyxe4brpUP9iIP1F/XRKlxSk8tkIb8Fkkq2gMIZRAAGgw5NzU0MjYyNjIwMjkiDJFS/W312kAwnCU5OSq3AzkZUy9oWYB6hu570kev0E6Y1imQ9NxywMuqHZBaHlqFqPz9aG5eqGBr49R+sT/fsYztRU7K8BEnQVsqJTKbd6B4sO99F6EdU/XSS6c20rsOGXVHKnjx+viXkGEY7ULCKu5ACvp9/naIeRYkq+ppKBiSW9n/wkxH7/rL3oFEOIIp4UKTV/f79o3ClLAeF3ZlvN29LdIfGZfDX6JnRLSxGU3/ErCIeNLwdSP2G7gUWQUGd5OynueDMDvE9SKi8ya8y2hcLlBFpVeP4XErNx+P0UgNscjAra3FCPkNaWcxg9s5ddMQseI4rWNelBtFMD+p+1/GiEK3PoXTBybfnayt6x91pPqKYaikdntYhPkQ6VyKd4zYUMLS57UJ5/5v5BL0ZSmPWqZxkXsbuORPiYRl8A6i3nfnpHXpkQpdShThbtyDP7G2a//3EXlxfyfYH7CwfuVcVYGBjNofyDDkf/XFiQQvt9+jaKJ8UEb8h98oFCxp4wl1Ry5SxEzQrRJD7oalYAhLpyZwnhqpOjQR9nmZTtb78cGm0o3KiIrN7Qmmn7ScYH0/kF0tMBO9FoVLzKPncHjaKxR3+ssw9NTZ6AU6tAFy8SpuMLhewckVie2ClbVb3gVQOIO31OQVNu/vemUWV3FFCPGc7aZ25ZUji2kQ6lhiZ5Y3L8mbkBEZQKEbTE99VT7fv3xZGhY1hj1VGSOSPyJgZOjpVIvnQZX4+8kEdFqzovI6Jcp1qm2gZKLbfOphqICUMp7g3lYE/x/76O3nBbiweSeKOdUKRw4S89kNXQvdu5XyQHWYuJTSuAGnGr1+7b1ZG/hEbpuIe+mVv1ga4aYvnJw="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12a0807-04c6-4f8c-91f6-c759c4d60613", "record_id": "flaws_cloudtrail:0000302:b12a0807-04c6-4f8c-91f6-c759c4d60613", "row_index": 302, "timestamp": "2019-06-28T19:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12a0807-04c6-4f8c-91f6-c759c4d60613", "eventTime": "2019-06-28T19:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0PVACIDF5UD3BHEF", "expiration": "Jun 29, 2019 1:44:33 AM", "sessionToken": "AgoJb3JpZ2luX2VjEBwaCXVzLXdlc3QtMiJHMEUCIQDaNhjQp2VvKnR8Tokk6qg0MB0a9yrJVvtQzySvrx3tqAIgQRzoIzXNwJuyxe4brpUP9iIP1F/XRKlxSk8tkIb8Fkkq2gMIZRAAGgw5NzU0MjYyNjIwMjkiDJFS/W312kAwnCU5OSq3AzkZUy9oWYB6hu570kev0E6Y1imQ9NxywMuqHZBaHlqFqPz9aG5eqGBr49R+sT/fsYztRU7K8BEnQVsqJTKbd6B4sO99F6EdU/XSS6c20rsOGXVHKnjx+viXkGEY7ULCKu5ACvp9/naIeRYkq+ppKBiSW9n/wkxH7/rL3oFEOIIp4UKTV/f79o3ClLAeF3ZlvN29LdIfGZfDX6JnRLSxGU3/ErCIeNLwdSP2G7gUWQUGd5OynueDMDvE9SKi8ya8y2hcLlBFpVeP4XErNx+P0UgNscjAra3FCPkNaWcxg9s5ddMQseI4rWNelBtFMD+p+1/GiEK3PoXTBybfnayt6x91pPqKYaikdntYhPkQ6VyKd4zYUMLS57UJ5/5v5BL0ZSmPWqZxkXsbuORPiYRl8A6i3nfnpHXpkQpdShThbtyDP7G2a//3EXlxfyfYH7CwfuVcVYGBjNofyDDkf/XFiQQvt9+jaKJ8UEb8h98oFCxp4wl1Ry5SxEzQrRJD7oalYAhLpyZwnhqpOjQR9nmZTtb78cGm0o3KiIrN7Qmmn7ScYH0/kF0tMBO9FoVLzKPncHjaKxR3+ssw9NTZ6AU6tAFy8SpuMLhewckVie2ClbVb3gVQOIO31OQVNu/vemUWV3FFCPGc7aZ25ZUji2kQ6lhiZ5Y3L8mbkBEZQKEbTE99VT7fv3xZGhY1hj1VGSOSPyJgZOjpVIvnQZX4+8kEdFqzovI6Jcp1qm2gZKLbfOphqICUMp7g3lYE/x/76O3nBbiweSeKOdUKRw4S89kNXQvdu5XyQHWYuJTSuAGnGr1+7b1ZG/hEbpuIe+mVv1ga4aYvnJw="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "record_id": "flaws_cloudtrail:0000303:f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "row_index": 303, "timestamp": "2019-06-28T20:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "eventTime": "2019-06-28T20:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZ288TU28E5TZZWU", "expiration": "Jun 29, 2019 2:36:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "record_id": "flaws_cloudtrail:0000304:f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "row_index": 304, "timestamp": "2019-06-28T20:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f92a0d6e-7c13-4a0b-bd36-5c5613f53eb9", "eventTime": "2019-06-28T20:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZ288TU28E5TZZWU", "expiration": "Jun 29, 2019 2:36:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eab9510-96b6-4f20-8dbd-caa1c4922879", "record_id": "flaws_cloudtrail:0000305:6eab9510-96b6-4f20-8dbd-caa1c4922879", "row_index": 305, "timestamp": "2019-06-28T20:36:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eab9510-96b6-4f20-8dbd-caa1c4922879", "eventTime": "2019-06-28T20:36:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eab9510-96b6-4f20-8dbd-caa1c4922879", "record_id": "flaws_cloudtrail:0000306:6eab9510-96b6-4f20-8dbd-caa1c4922879", "row_index": 306, "timestamp": "2019-06-28T20:36:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eab9510-96b6-4f20-8dbd-caa1c4922879", "eventTime": "2019-06-28T20:36:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecfbad00-bef3-4972-b801-2102d782968d3", "record_id": "flaws_cloudtrail:0000307:ecfbad00-bef3-4972-b801-2102d782968d3", "row_index": 307, "timestamp": "2019-06-28T20:44:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecfbad00-bef3-4972-b801-2102d782968d3", "eventTime": "2019-06-28T20:44:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecfbad00-bef3-4972-b801-2102d782968d3", "record_id": "flaws_cloudtrail:0000308:ecfbad00-bef3-4972-b801-2102d782968d3", "row_index": 308, "timestamp": "2019-06-28T20:44:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecfbad00-bef3-4972-b801-2102d782968d3", "eventTime": "2019-06-28T20:44:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427fe0d8-6681-43cf-8ae8-5be87a603b91", "record_id": "flaws_cloudtrail:0000309:427fe0d8-6681-43cf-8ae8-5be87a603b91", "row_index": 309, "timestamp": "2019-06-28T20:47:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427fe0d8-6681-43cf-8ae8-5be87a603b91", "eventTime": "2019-06-28T20:47:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427fe0d8-6681-43cf-8ae8-5be87a603b91", "record_id": "flaws_cloudtrail:0000310:427fe0d8-6681-43cf-8ae8-5be87a603b91", "row_index": 310, "timestamp": "2019-06-28T20:47:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427fe0d8-6681-43cf-8ae8-5be87a603b91", "eventTime": "2019-06-28T20:47:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "record_id": "flaws_cloudtrail:0000311:a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "row_index": 311, "timestamp": "2019-06-28T20:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "eventTime": "2019-06-28T20:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "record_id": "flaws_cloudtrail:0000312:a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "row_index": 312, "timestamp": "2019-06-28T20:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d62e7a-e5e9-4029-acf6-97c2fd924c53", "eventTime": "2019-06-28T20:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c228f4-ee87-45a7-932a-d5d5c412d454", "record_id": "flaws_cloudtrail:0000313:30c228f4-ee87-45a7-932a-d5d5c412d454", "row_index": 313, "timestamp": "2019-06-28T20:49:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c228f4-ee87-45a7-932a-d5d5c412d454", "eventTime": "2019-06-28T20:49:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c228f4-ee87-45a7-932a-d5d5c412d454", "record_id": "flaws_cloudtrail:0000314:30c228f4-ee87-45a7-932a-d5d5c412d454", "row_index": 314, "timestamp": "2019-06-28T20:49:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c228f4-ee87-45a7-932a-d5d5c412d454", "eventTime": "2019-06-28T20:49:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d491a91-6919-4012-9f7e-e0b28a4eb79f", "record_id": "flaws_cloudtrail:0000315:7d491a91-6919-4012-9f7e-e0b28a4eb79f", "row_index": 315, "timestamp": "2019-06-28T20:49:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d491a91-6919-4012-9f7e-e0b28a4eb79f", "eventTime": "2019-06-28T20:49:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyZ2lOSW1lY3l2bWI3dGM0NXJMVkN6SzdLRDJaMExyVndWclIwZG9UanhIdUdWWVlUbzlLQTlEVStjVjR3YTB2TmxMVUhTMldXMGF1WnRUM2M3OHZXM3dsZEFyeGE3Mlp1T1FESEQvd0hjMm0yR1o3Ylc1QXlRUnRabkI5MFJxL1EwWERiM2RnUG1FV2g3MEwvMXp0dFl0dzlPQ0pqVFRPUlN5TEFwSmdxOGJ3VGM5NEdyMFZFTmZVc0NzWTFLV3YxZGUzV3pDM2RuVW9WZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d491a91-6919-4012-9f7e-e0b28a4eb79f", "record_id": "flaws_cloudtrail:0000316:7d491a91-6919-4012-9f7e-e0b28a4eb79f", "row_index": 316, "timestamp": "2019-06-28T20:49:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d491a91-6919-4012-9f7e-e0b28a4eb79f", "eventTime": "2019-06-28T20:49:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyZ2lOSW1lY3l2bWI3dGM0NXJMVkN6SzdLRDJaMExyVndWclIwZG9UanhIdUdWWVlUbzlLQTlEVStjVjR3YTB2TmxMVUhTMldXMGF1WnRUM2M3OHZXM3dsZEFyeGE3Mlp1T1FESEQvd0hjMm0yR1o3Ylc1QXlRUnRabkI5MFJxL1EwWERiM2RnUG1FV2g3MEwvMXp0dFl0dzlPQ0pqVFRPUlN5TEFwSmdxOGJ3VGM5NEdyMFZFTmZVc0NzWTFLV3YxZGUzV3pDM2RuVW9WZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d08690-dd2f-442f-9aeb-f5c7be60b525", "record_id": "flaws_cloudtrail:0000317:e1d08690-dd2f-442f-9aeb-f5c7be60b525", "row_index": 317, "timestamp": "2019-06-28T20:49:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d08690-dd2f-442f-9aeb-f5c7be60b525", "eventTime": "2019-06-28T20:49:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSHBpZGRENTRPa1BZaVNEd0RFK2FWVnNQNTBsUFhiY09od1Q4RzdjbUpRNjZaNjE0aVZsdkMzWmkrUDUyUG04S2ZrT0dubmtUcGlNMXBlNVFmNUR6dnpJSkhmVjYxcFlxYSt1MkFWMEpqT2toZ09zcmdpenZuRndNZDVYc29NSHNWdjA3VVJuSWc4bjY2WVVjWHRLZnEyRjIrRTl5Q2ZOQkR0NTRDMW5RN2ZjN1EzRDBJb1JyVm11aGY0VUlGUEhuMERNMmViTDFLYlhXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d08690-dd2f-442f-9aeb-f5c7be60b525", "record_id": "flaws_cloudtrail:0000318:e1d08690-dd2f-442f-9aeb-f5c7be60b525", "row_index": 318, "timestamp": "2019-06-28T20:49:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d08690-dd2f-442f-9aeb-f5c7be60b525", "eventTime": "2019-06-28T20:49:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSHBpZGRENTRPa1BZaVNEd0RFK2FWVnNQNTBsUFhiY09od1Q4RzdjbUpRNjZaNjE0aVZsdkMzWmkrUDUyUG04S2ZrT0dubmtUcGlNMXBlNVFmNUR6dnpJSkhmVjYxcFlxYSt1MkFWMEpqT2toZ09zcmdpenZuRndNZDVYc29NSHNWdjA3VVJuSWc4bjY2WVVjWHRLZnEyRjIrRTl5Q2ZOQkR0NTRDMW5RN2ZjN1EzRDBJb1JyVm11aGY0VUlGUEhuMERNMmViTDFLYlhXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82ba7d1-3613-4387-93d0-49229fb3", "record_id": "flaws_cloudtrail:0000319:c82ba7d1-3613-4387-93d0-49229fb3", "row_index": 319, "timestamp": "2019-06-28T20:49:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82ba7d1-3613-4387-93d0-49229fb3", "eventTime": "2019-06-28T20:49:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvSVVmRnk1ZFJhM3RzYlhESDdDYUs5VUFXaHRYQVR6TUZuanRDWkROM0hlWVZES1lIZEVONmthaGs3UVFFZ2ppeGZ0YnE5YzFBbGRsSGpObWtYL00yd2Zjcit5Mmpnank0czdZemN0OGFyWml4N08wVGZaVUpsY0xNRGlZNXhFeVNwWTNlbVUyUEZSVkZnMVIyY3ViUHpWZmFwb2h2NlRWa1d5V2JpamI2Z0NRaXBVV014NmoxQU56NDlNbGZtWEZWaXh3bXo5c1Y4WVNxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82ba7d1-3613-4387-93d0-49229fb3", "record_id": "flaws_cloudtrail:0000320:c82ba7d1-3613-4387-93d0-49229fb3", "row_index": 320, "timestamp": "2019-06-28T20:49:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82ba7d1-3613-4387-93d0-49229fb3", "eventTime": "2019-06-28T20:49:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvSVVmRnk1ZFJhM3RzYlhESDdDYUs5VUFXaHRYQVR6TUZuanRDWkROM0hlWVZES1lIZEVONmthaGs3UVFFZ2ppeGZ0YnE5YzFBbGRsSGpObWtYL00yd2Zjcit5Mmpnank0czdZemN0OGFyWml4N08wVGZaVUpsY0xNRGlZNXhFeVNwWTNlbVUyUEZSVkZnMVIyY3ViUHpWZmFwb2h2NlRWa1d5V2JpamI2Z0NRaXBVV014NmoxQU56NDlNbGZtWEZWaXh3bXo5c1Y4WVNxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa7c8489-aecf-42b9-a125-b355eb286f92", "record_id": "flaws_cloudtrail:0000321:fa7c8489-aecf-42b9-a125-b355eb286f92", "row_index": 321, "timestamp": "2019-06-28T20:49:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa7c8489-aecf-42b9-a125-b355eb286f92", "eventTime": "2019-06-28T20:49:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUDFPQk1JeGJZSzR4N1NuVWlQR3NNT1E0eGFBN1phME5Qa0FnQXdZMGsrQnZ3bEdsS0xDUzA0NW0yMnk1OGlMaFhNRHgvNk13Vzc5ZW9kSnBCT0FaWERzbXRIWmhla3EreEFQMW5LdHAzbUtYSDN5OXpZZVZHUTVwVkgvK2cyd3BkOGF6NlgydUhCR2Z4VUZDK24ya09UQ2k2NXhlNit5K0lneW9nZ0NDQVRleEhKYWhFOFNnR3lRaWdBNzFkVnRCaC9XYytJNWt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa7c8489-aecf-42b9-a125-b355eb286f92", "record_id": "flaws_cloudtrail:0000322:fa7c8489-aecf-42b9-a125-b355eb286f92", "row_index": 322, "timestamp": "2019-06-28T20:49:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa7c8489-aecf-42b9-a125-b355eb286f92", "eventTime": "2019-06-28T20:49:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUDFPQk1JeGJZSzR4N1NuVWlQR3NNT1E0eGFBN1phME5Qa0FnQXdZMGsrQnZ3bEdsS0xDUzA0NW0yMnk1OGlMaFhNRHgvNk13Vzc5ZW9kSnBCT0FaWERzbXRIWmhla3EreEFQMW5LdHAzbUtYSDN5OXpZZVZHUTVwVkgvK2cyd3BkOGF6NlgydUhCR2Z4VUZDK24ya09UQ2k2NXhlNit5K0lneW9nZ0NDQVRleEhKYWhFOFNnR3lRaWdBNzFkVnRCaC9XYytJNWt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "record_id": "flaws_cloudtrail:0000323:77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "row_index": 323, "timestamp": "2019-06-28T20:49:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "eventTime": "2019-06-28T20:49:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRaDNpbHMyRis2V1FNeWpTSkhKMmh4S1U1dDh5UzdDd0FSWFBmeU5zYXhmQk1McEhoenViaXA5ZzYwcUVXdW5Bdlo4YmdMYWE0UzZQWC9yMmdTblhkM2Y3KzVMMEQyT2NhdTlxa2NNOWg0QzJVVFpBc1NJSXhmSmozVENDSW8vZDUyWDd1Sys4c00xeUNuL3htT1RpbUFLODFMamRVeGlaRjF2WFB1Q1crbXBPSjhoYXY4SG0yRDRqUzIyTFBYcWU2TDRQQWJvOUFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "record_id": "flaws_cloudtrail:0000324:77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "row_index": 324, "timestamp": "2019-06-28T20:49:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ae992e-6bb3-4d70-a64f-c27f3ee5918e", "eventTime": "2019-06-28T20:49:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRaDNpbHMyRis2V1FNeWpTSkhKMmh4S1U1dDh5UzdDd0FSWFBmeU5zYXhmQk1McEhoenViaXA5ZzYwcUVXdW5Bdlo4YmdMYWE0UzZQWC9yMmdTblhkM2Y3KzVMMEQyT2NhdTlxa2NNOWg0QzJVVFpBc1NJSXhmSmozVENDSW8vZDUyWDd1Sys4c00xeUNuL3htT1RpbUFLODFMamRVeGlaRjF2WFB1Q1crbXBPSjhoYXY4SG0yRDRqUzIyTFBYcWU2TDRQQWJvOUFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b754f2ec-b045-4d54-b8bd-a9ef36e31852", "record_id": "flaws_cloudtrail:0000325:b754f2ec-b045-4d54-b8bd-a9ef36e31852", "row_index": 325, "timestamp": "2019-06-28T20:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b754f2ec-b045-4d54-b8bd-a9ef36e31852", "eventTime": "2019-06-28T20:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUmZZT0ViQ1FOSkVGaW9id3VYa1hmT1FFVCsrMVVlWEI0ZEYwOXFhZElPb3pQM3FjSzlBWDY0NmhFeldMc2dXcFpNZVpjRU84MS84WGlxMmhSNUVQbld3b3FIQWtrYmwvd0hNQUJObUcxdnZHTlVOTUNxMHpmSXpqbUFBcHdid3gyS3dnV3laMHpOeFE5SHJVRm5QaFlneGVHazg4UUZ4ZHpFYTNyYXJ5VTE5MjVCdnQzOTY5R1BRVlpnSDdzbWIvTy9ZeU1xb096WnduQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b754f2ec-b045-4d54-b8bd-a9ef36e31852", "record_id": "flaws_cloudtrail:0000326:b754f2ec-b045-4d54-b8bd-a9ef36e31852", "row_index": 326, "timestamp": "2019-06-28T20:49:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b754f2ec-b045-4d54-b8bd-a9ef36e31852", "eventTime": "2019-06-28T20:49:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUmZZT0ViQ1FOSkVGaW9id3VYa1hmT1FFVCsrMVVlWEI0ZEYwOXFhZElPb3pQM3FjSzlBWDY0NmhFeldMc2dXcFpNZVpjRU84MS84WGlxMmhSNUVQbld3b3FIQWtrYmwvd0hNQUJObUcxdnZHTlVOTUNxMHpmSXpqbUFBcHdid3gyS3dnV3laMHpOeFE5SHJVRm5QaFlneGVHazg4UUZ4ZHpFYTNyYXJ5VTE5MjVCdnQzOTY5R1BRVlpnSDdzbWIvTy9ZeU1xb096WnduQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e78e471a-7cd4-44e8-9f40-df28e7e907ae", "record_id": "flaws_cloudtrail:0000327:e78e471a-7cd4-44e8-9f40-df28e7e907ae", "row_index": 327, "timestamp": "2019-06-28T20:49:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e78e471a-7cd4-44e8-9f40-df28e7e907ae", "eventTime": "2019-06-28T20:49:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMRU1VVnRrNllvUmlEVVFGQ0cvSzE3dVROT2t2M3Ztd3o2VmsyTCs4Q0Y5aFBFR1RWeGh6bUZwM1kwWGtpcjBWczExRWRFa3lOMDhnbi9MUzZOZFBSck5sZGJ3TFR5dmhkVkJRZlE5Rld2ZnYybmtNUWNQMWVSZnB1U0ZYWkU5WnhQdUpQNHNLRUhNSkNxaW9VQlJqZHM2N013TUdWVnZLZ2U0UDFhZU8vVktsSlpad3lzdFZyOUxITDJUaTYvS1ZLbzNDWEtPMmc5VVNMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e78e471a-7cd4-44e8-9f40-df28e7e907ae", "record_id": "flaws_cloudtrail:0000328:e78e471a-7cd4-44e8-9f40-df28e7e907ae", "row_index": 328, "timestamp": "2019-06-28T20:49:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e78e471a-7cd4-44e8-9f40-df28e7e907ae", "eventTime": "2019-06-28T20:49:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMRU1VVnRrNllvUmlEVVFGQ0cvSzE3dVROT2t2M3Ztd3o2VmsyTCs4Q0Y5aFBFR1RWeGh6bUZwM1kwWGtpcjBWczExRWRFa3lOMDhnbi9MUzZOZFBSck5sZGJ3TFR5dmhkVkJRZlE5Rld2ZnYybmtNUWNQMWVSZnB1U0ZYWkU5WnhQdUpQNHNLRUhNSkNxaW9VQlJqZHM2N013TUdWVnZLZ2U0UDFhZU8vVktsSlpad3lzdFZyOUxITDJUaTYvS1ZLbzNDWEtPMmc5VVNMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04f879f-3cfb-4446-bb0e-25190c99d9dd", "record_id": "flaws_cloudtrail:0000329:d04f879f-3cfb-4446-bb0e-25190c99d9dd", "row_index": 329, "timestamp": "2019-06-28T20:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04f879f-3cfb-4446-bb0e-25190c99d9dd", "eventTime": "2019-06-28T20:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0cWtFYUpYb2pKMENQOXgwZ2ZoWERIa0tKVDdZRDByYWZkOFVHaXlYMFdqK3ZUZXUwS2toaWE3cnpiSFAzM2xPQllHQlNIR0ZxVHcxT2VKNVhtamtES3FhdWxvSms5UkliNG1RWWpHQWMwL1pOK3dVYkIzTEhXV0FRWStwcmJhNU05V2J4Tmt6VTFqQ3VUdnB3SkpBTS9NNi9kVmsvZHlEZVVWTWduTjN5NTA1em1zRHB0MVV0QkRRUkoxbVVVOXRwT1pGZWZTRmVXY2VyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04f879f-3cfb-4446-bb0e-25190c99d9dd", "record_id": "flaws_cloudtrail:0000330:d04f879f-3cfb-4446-bb0e-25190c99d9dd", "row_index": 330, "timestamp": "2019-06-28T20:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04f879f-3cfb-4446-bb0e-25190c99d9dd", "eventTime": "2019-06-28T20:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0cWtFYUpYb2pKMENQOXgwZ2ZoWERIa0tKVDdZRDByYWZkOFVHaXlYMFdqK3ZUZXUwS2toaWE3cnpiSFAzM2xPQllHQlNIR0ZxVHcxT2VKNVhtamtES3FhdWxvSms5UkliNG1RWWpHQWMwL1pOK3dVYkIzTEhXV0FRWStwcmJhNU05V2J4Tmt6VTFqQ3VUdnB3SkpBTS9NNi9kVmsvZHlEZVVWTWduTjN5NTA1em1zRHB0MVV0QkRRUkoxbVVVOXRwT1pGZWZTRmVXY2VyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "record_id": "flaws_cloudtrail:0000331:d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "row_index": 331, "timestamp": "2019-06-28T20:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "eventTime": "2019-06-28T20:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJueTdWc3kxOXk4SHhxejUyZ0R1WmgrZERvbjUzMW9MbEV2YklCVVFrYm90cEwybGQ4OVg2TkpEQ2ovekUwZkJpVll3WE9iZ1gyQXdNZjlreC90ZHBnclJkMjM2cUYyYUFpaERRZWJBUTR5YnhpSEtnNDB2WEFYSDNSejNkd3Z2SWlXTnBYMGtIZHhoNFBvaHlrNFEwTWNHVWNzenN5R3JsNVhDeUVaN0tWWU5kODFTNEh6VGZtbXg3QXRFWWk4R3F5UmV0YURJZmpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "record_id": "flaws_cloudtrail:0000332:d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "row_index": 332, "timestamp": "2019-06-28T20:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d465ea0d-d008-4d72-a66e-c9bb91ad0a5e", "eventTime": "2019-06-28T20:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJueTdWc3kxOXk4SHhxejUyZ0R1WmgrZERvbjUzMW9MbEV2YklCVVFrYm90cEwybGQ4OVg2TkpEQ2ovekUwZkJpVll3WE9iZ1gyQXdNZjlreC90ZHBnclJkMjM2cUYyYUFpaERRZWJBUTR5YnhpSEtnNDB2WEFYSDNSejNkd3Z2SWlXTnBYMGtIZHhoNFBvaHlrNFEwTWNHVWNzenN5R3JsNVhDeUVaN0tWWU5kODFTNEh6VGZtbXg3QXRFWWk4R3F5UmV0YURJZmpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83cbb7d3-93aa-4e33-844d-290dc86b050b", "record_id": "flaws_cloudtrail:0000333:83cbb7d3-93aa-4e33-844d-290dc86b050b", "row_index": 333, "timestamp": "2019-06-28T20:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83cbb7d3-93aa-4e33-844d-290dc86b050b", "eventTime": "2019-06-28T20:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsUFBzMlk3ZXZNVFV4VFRCSjNQdTBXMmU3WHY2K0lJZkR0MVNqQUV4alR1WWs1VE4zTEZ3QWZhNGdmNk1PZmhiSFdLb3laUCt1VFBIcU5tYjd3R09Hcy9scHd0NU9RVHZYbE5KdzIwc1RNRU5YcWQ0UEM5KzY3VDNVQnlndGlEaEMydW4wemEvQ3BYdHBYTVljMG5rUDVTN2RqWkJHUU1PRGxMaFlRSWtyMGxsd3J3U3ZFc1dId1VCVVhUYUF5NXNsRWV2clc0aGF5Z2tXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83cbb7d3-93aa-4e33-844d-290dc86b050b", "record_id": "flaws_cloudtrail:0000334:83cbb7d3-93aa-4e33-844d-290dc86b050b", "row_index": 334, "timestamp": "2019-06-28T20:49:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83cbb7d3-93aa-4e33-844d-290dc86b050b", "eventTime": "2019-06-28T20:49:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsUFBzMlk3ZXZNVFV4VFRCSjNQdTBXMmU3WHY2K0lJZkR0MVNqQUV4alR1WWs1VE4zTEZ3QWZhNGdmNk1PZmhiSFdLb3laUCt1VFBIcU5tYjd3R09Hcy9scHd0NU9RVHZYbE5KdzIwc1RNRU5YcWQ0UEM5KzY3VDNVQnlndGlEaEMydW4wemEvQ3BYdHBYTVljMG5rUDVTN2RqWkJHUU1PRGxMaFlRSWtyMGxsd3J3U3ZFc1dId1VCVVhUYUF5NXNsRWV2clc0aGF5Z2tXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feb97a7d-3f19-4e4d-a7af-a330a9405862", "record_id": "flaws_cloudtrail:0000335:feb97a7d-3f19-4e4d-a7af-a330a9405862", "row_index": 335, "timestamp": "2019-06-28T20:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feb97a7d-3f19-4e4d-a7af-a330a9405862", "eventTime": "2019-06-28T20:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPcWtSRzlNSEZyeHRLaEZ2bThLc2V2YkxkQWhvQTVHZkNLQi93dW9zM0x0OHo0M2ZnQUtSTnl6Y1YyOHN0VUZRMllGVlBQQ2NURi8zQUx2eVpzNWhvRkNBRmppbXpBcXZTVkoxRk5SUVlxMnhjRjNPM05YN3pLTDgycmM0V3J4U3dvbWZvTDBEdDZFZ0piODNhRVNrVUF3MDhUUmI0NHpsaGJSamUvY3U4OG9YQXpHNXZYQmRQYktQczFTVmxNaHk0dEJ0bjF6dW1wREpUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feb97a7d-3f19-4e4d-a7af-a330a9405862", "record_id": "flaws_cloudtrail:0000336:feb97a7d-3f19-4e4d-a7af-a330a9405862", "row_index": 336, "timestamp": "2019-06-28T20:49:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feb97a7d-3f19-4e4d-a7af-a330a9405862", "eventTime": "2019-06-28T20:49:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPcWtSRzlNSEZyeHRLaEZ2bThLc2V2YkxkQWhvQTVHZkNLQi93dW9zM0x0OHo0M2ZnQUtSTnl6Y1YyOHN0VUZRMllGVlBQQ2NURi8zQUx2eVpzNWhvRkNBRmppbXpBcXZTVkoxRk5SUVlxMnhjRjNPM05YN3pLTDgycmM0V3J4U3dvbWZvTDBEdDZFZ0piODNhRVNrVUF3MDhUUmI0NHpsaGJSamUvY3U4OG9YQXpHNXZYQmRQYktQczFTVmxNaHk0dEJ0bjF6dW1wREpUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d3e83b-92ed-4631-8575-6de91e307664", "record_id": "flaws_cloudtrail:0000337:13d3e83b-92ed-4631-8575-6de91e307664", "row_index": 337, "timestamp": "2019-06-28T20:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d3e83b-92ed-4631-8575-6de91e307664", "eventTime": "2019-06-28T20:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkdVF6ZUQ4TGRFd0JDU0ZSWjUwRDV0eDVTRVNoeDczZlkvUW0veTdOOEZWME5FT0liRzd6VWMzNmowNHJCalgzeWJ4YmE5eUtUZ2s4L3E3S0hCVjJUOWp3cWxVaUZHUFJRL2s5RE1PellHaUlCejR6bDJyei9lK3hvOEM4Mi9DbWNZc1dUNlFyejhrWkptaFM4bHZ1Vkt3MzRUOHJTVC80alpLWnIzb0VNVGJXMHprbUVpYmg1Z2QzczZGSWNEVThMbWZhUk95Sm1aVCs3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d3e83b-92ed-4631-8575-6de91e307664", "record_id": "flaws_cloudtrail:0000338:13d3e83b-92ed-4631-8575-6de91e307664", "row_index": 338, "timestamp": "2019-06-28T20:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d3e83b-92ed-4631-8575-6de91e307664", "eventTime": "2019-06-28T20:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkdVF6ZUQ4TGRFd0JDU0ZSWjUwRDV0eDVTRVNoeDczZlkvUW0veTdOOEZWME5FT0liRzd6VWMzNmowNHJCalgzeWJ4YmE5eUtUZ2s4L3E3S0hCVjJUOWp3cWxVaUZHUFJRL2s5RE1PellHaUlCejR6bDJyei9lK3hvOEM4Mi9DbWNZc1dUNlFyejhrWkptaFM4bHZ1Vkt3MzRUOHJTVC80alpLWnIzb0VNVGJXMHprbUVpYmg1Z2QzczZGSWNEVThMbWZhUk95Sm1aVCs3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a34f7ab4-a033-4936-b32e-996781c63a8f", "record_id": "flaws_cloudtrail:0000339:a34f7ab4-a033-4936-b32e-996781c63a8f", "row_index": 339, "timestamp": "2019-06-28T20:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a34f7ab4-a033-4936-b32e-996781c63a8f", "eventTime": "2019-06-28T20:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZitQejFseTVTc05PTm1NdktCaElhWTB2M1RwakdSK2JTNkZRM1ZsbWFiVEJ5bFRxTDdXTXRWK3ozc2UrN3hWOVVlM1FveHR5ZnlwSFV2ZVdoUnRuTVJQcnQwcENIZzdyUW0zN1lqOGVvYkFzT2gvZzc5QzVGL2FVQ1YvMWtNZHl6UXVTZEY4a0lWM3JFK0FBdWFWK1dwZ09wWFNMekVTcGVCeTV6SHhROEgyTjVDaUdXY1E0NzRsWmQ5dXo0NzBSeEZUWkF3UENLKy9TQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a34f7ab4-a033-4936-b32e-996781c63a8f", "record_id": "flaws_cloudtrail:0000340:a34f7ab4-a033-4936-b32e-996781c63a8f", "row_index": 340, "timestamp": "2019-06-28T20:49:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a34f7ab4-a033-4936-b32e-996781c63a8f", "eventTime": "2019-06-28T20:49:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZitQejFseTVTc05PTm1NdktCaElhWTB2M1RwakdSK2JTNkZRM1ZsbWFiVEJ5bFRxTDdXTXRWK3ozc2UrN3hWOVVlM1FveHR5ZnlwSFV2ZVdoUnRuTVJQcnQwcENIZzdyUW0zN1lqOGVvYkFzT2gvZzc5QzVGL2FVQ1YvMWtNZHl6UXVTZEY4a0lWM3JFK0FBdWFWK1dwZ09wWFNMekVTcGVCeTV6SHhROEgyTjVDaUdXY1E0NzRsWmQ5dXo0NzBSeEZUWkF3UENLKy9TQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7054fb-acab-460b-92d8-b485cd5a9656", "record_id": "flaws_cloudtrail:0000341:7f7054fb-acab-460b-92d8-b485cd5a9656", "row_index": 341, "timestamp": "2019-06-28T20:49:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7054fb-acab-460b-92d8-b485cd5a9656", "eventTime": "2019-06-28T20:49:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0MWNWRjdBbXlJQUNqTzNPMXBCTWVESitCTHExZnhNMkM4ZThQYW9GekxncmFhWEx2WG4zSEx6a3ZtNWx3R1JUM0RDazU3aVA3Ri9ITDRTQjQxMUNnSlg3QmIvQTF4NXZQOTh4bWNkRzRiNTlTS3ZQc0M3WVZwL3ZHb1I3TzdZOGlzSEJhbTJJSTZiMm9WU21rTUVmOWNxeXY2cjFia3FqMDBySjBTVW9kT0pQN1ZGcVphVXFldnNDcnQzY2QwakJBc3RUWnZ6SmR6eDJNTkNiRHhkSkNHOHZiUWI2ZFIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7054fb-acab-460b-92d8-b485cd5a9656", "record_id": "flaws_cloudtrail:0000342:7f7054fb-acab-460b-92d8-b485cd5a9656", "row_index": 342, "timestamp": "2019-06-28T20:49:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7054fb-acab-460b-92d8-b485cd5a9656", "eventTime": "2019-06-28T20:49:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0MWNWRjdBbXlJQUNqTzNPMXBCTWVESitCTHExZnhNMkM4ZThQYW9GekxncmFhWEx2WG4zSEx6a3ZtNWx3R1JUM0RDazU3aVA3Ri9ITDRTQjQxMUNnSlg3QmIvQTF4NXZQOTh4bWNkRzRiNTlTS3ZQc0M3WVZwL3ZHb1I3TzdZOGlzSEJhbTJJSTZiMm9WU21rTUVmOWNxeXY2cjFia3FqMDBySjBTVW9kT0pQN1ZGcVphVXFldnNDcnQzY2QwakJBc3RUWnZ6SmR6eDJNTkNiRHhkSkNHOHZiUWI2ZFIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957cfc55-5d47-4944-a2be-476ed3e6b201", "record_id": "flaws_cloudtrail:0000343:957cfc55-5d47-4944-a2be-476ed3e6b201", "row_index": 343, "timestamp": "2019-06-28T20:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957cfc55-5d47-4944-a2be-476ed3e6b201", "eventTime": "2019-06-28T20:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0M3Q5aVF5MUJ2NzNhNHNDNFlIcFlCZUpiNDFsSjZQL2pjSExxSEZPcjFPTDNHTmtmdUNvVFUwdXE1bmhFZnc4LysrOG9nKzVZMEZsd3JOZnVlMENOZGlOQnUrWUxmQnZ6cXhMS290clVjUmx1bklUWERzamF4NjhlUlFWSDF6S0hCTStFdlQyK0JwaUN5SFBxeDFBTS96RS8rSkdxeFFxa056SkpyVkZzVkF0RXI3UUVXSENtWXB6ZmRram1OUkdYMExMeThCSUtvZW5rd2k4ZVErU3lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "record_id": "flaws_cloudtrail:0000344:3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "row_index": 344, "timestamp": "2019-06-28T20:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "eventTime": "2019-06-28T20:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVE1wZktjdWJjSmNaeXFmWFZJaitsQ25vZmovSk9ZM1Mrb0FYM3FqbFo5a0xpTmd0bFZBYmxUZE9ueENjM1pFaSs3ZENLL3Q0WHRRMGErMzlUNXhSOGVqeFdXdWVOaFpKMDFsY1k4bmsxVGxJZ0g0VzZlZ095Y1FlK0g2YkRMaHlHcEJoWTVVbCs5Ry9leVp6WkpoZXR5Tk1GT0FZYThFZTBERGJLVDc0TFQ1cEl4S0hyaUZNR2QxL2VaaTV2amdsVjJ5emdBU0cveE5aaWRYL05qWmxEQnZ2MlBTSW9vPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957cfc55-5d47-4944-a2be-476ed3e6b201", "record_id": "flaws_cloudtrail:0000345:957cfc55-5d47-4944-a2be-476ed3e6b201", "row_index": 345, "timestamp": "2019-06-28T20:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957cfc55-5d47-4944-a2be-476ed3e6b201", "eventTime": "2019-06-28T20:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0M3Q5aVF5MUJ2NzNhNHNDNFlIcFlCZUpiNDFsSjZQL2pjSExxSEZPcjFPTDNHTmtmdUNvVFUwdXE1bmhFZnc4LysrOG9nKzVZMEZsd3JOZnVlMENOZGlOQnUrWUxmQnZ6cXhMS290clVjUmx1bklUWERzamF4NjhlUlFWSDF6S0hCTStFdlQyK0JwaUN5SFBxeDFBTS96RS8rSkdxeFFxa056SkpyVkZzVkF0RXI3UUVXSENtWXB6ZmRram1OUkdYMExMeThCSUtvZW5rd2k4ZVErU3lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "record_id": "flaws_cloudtrail:0000346:3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "row_index": 346, "timestamp": "2019-06-28T20:49:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c019a72-b83b-443d-a0d7-83cf6ae2cab5", "eventTime": "2019-06-28T20:49:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVE1wZktjdWJjSmNaeXFmWFZJaitsQ25vZmovSk9ZM1Mrb0FYM3FqbFo5a0xpTmd0bFZBYmxUZE9ueENjM1pFaSs3ZENLL3Q0WHRRMGErMzlUNXhSOGVqeFdXdWVOaFpKMDFsY1k4bmsxVGxJZ0g0VzZlZ095Y1FlK0g2YkRMaHlHcEJoWTVVbCs5Ry9leVp6WkpoZXR5Tk1GT0FZYThFZTBERGJLVDc0TFQ1cEl4S0hyaUZNR2QxL2VaaTV2amdsVjJ5emdBU0cveE5aaWRYL05qWmxEQnZ2MlBTSW9vPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "record_id": "flaws_cloudtrail:0000347:a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "row_index": 347, "timestamp": "2019-06-28T20:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "eventTime": "2019-06-28T20:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmQjJoQUI4RkdEUm1rTzNYdXVVZzAzSEtnTnJBR0xvRXNiWkxBVlJWMmVWL2hJd1pDZWV6NkFtS0c2ZDhxWHZZUE9pSU9qM1Rlc2tMeUVNSWdtUTJybFpSNDAwUjlEcHVOMWUyaWV3dkh1bWRQU3cxdzA1TUZidkNpY0dsam11SGdYeDVUUUtqcU5zaVJZOG1QMlJOb2Zkck1nSXRxS0xMTElDcmJXR0JsYlJCQVlWN3ZEQWpieE4zdG5JKzlJbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "record_id": "flaws_cloudtrail:0000348:a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "row_index": 348, "timestamp": "2019-06-28T20:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e331c4-9c3c-41b5-9e6f-2adba2949a3a", "eventTime": "2019-06-28T20:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmQjJoQUI4RkdEUm1rTzNYdXVVZzAzSEtnTnJBR0xvRXNiWkxBVlJWMmVWL2hJd1pDZWV6NkFtS0c2ZDhxWHZZUE9pSU9qM1Rlc2tMeUVNSWdtUTJybFpSNDAwUjlEcHVOMWUyaWV3dkh1bWRQU3cxdzA1TUZidkNpY0dsam11SGdYeDVUUUtqcU5zaVJZOG1QMlJOb2Zkck1nSXRxS0xMTElDcmJXR0JsYlJCQVlWN3ZEQWpieE4zdG5JKzlJbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae335fe-b997-44ea-bfbb-cbe269af1c55", "record_id": "flaws_cloudtrail:0000349:1ae335fe-b997-44ea-bfbb-cbe269af1c55", "row_index": 349, "timestamp": "2019-06-28T20:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae335fe-b997-44ea-bfbb-cbe269af1c55", "eventTime": "2019-06-28T20:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpY2ZVMEFmWEg2QmwrME0vY000RTF3aW15ZnRabG8xWHduRTlUb2RPMzh1K0Jhb3JDckFIT0lPVzZhZTVuR2hqZm0vUkpHOVR0TVJZR1NZRjQwd1dNOEFDcUd6WFZXcEtMbWU0STdEYXI1a1NiUnUyOXloTHFLQ241L0xUNVR4clZtbkppbnNMT1dQdWpBK0taL25UVFNsZ3lVTWZyanpkOGFoRngrMnZmaDN0WTZza1VCemwxSk1GTU00NHlHN3FlQjRBdFBJaVBtaVN0NkswVVR3UEJSMEZWbW9BMFpnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "record_id": "flaws_cloudtrail:0000350:44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "row_index": 350, "timestamp": "2019-06-28T20:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "eventTime": "2019-06-28T20:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBc2VSUEVPSVJCaktyb1E1WlQzYS9SQkxQVytFamxxTEhwNUc5YmJ2UTN0TDBFb1NJZG1aV2dUWEdqd3RHZko3OEZMTzN3ZjV2TU1WWEdOK2VoQlZkVS9VWmF1U3pxUDYvQVZsZWY2N0VsQTI4YzltWGxxK0NkUEgzbFlONENLR0hlV3lWem1sV0RtcFc3RXMvQVpqUGhPZTJhZlRFOVU1MmVaNE10cUV0R0VMZU1oN21yTjBQWDlWclFsK0NpRHRxUkZOcjZITFc1UmNTY3RtZW1MN1hnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae335fe-b997-44ea-bfbb-cbe269af1c55", "record_id": "flaws_cloudtrail:0000351:1ae335fe-b997-44ea-bfbb-cbe269af1c55", "row_index": 351, "timestamp": "2019-06-28T20:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae335fe-b997-44ea-bfbb-cbe269af1c55", "eventTime": "2019-06-28T20:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpY2ZVMEFmWEg2QmwrME0vY000RTF3aW15ZnRabG8xWHduRTlUb2RPMzh1K0Jhb3JDckFIT0lPVzZhZTVuR2hqZm0vUkpHOVR0TVJZR1NZRjQwd1dNOEFDcUd6WFZXcEtMbWU0STdEYXI1a1NiUnUyOXloTHFLQ241L0xUNVR4clZtbkppbnNMT1dQdWpBK0taL25UVFNsZ3lVTWZyanpkOGFoRngrMnZmaDN0WTZza1VCemwxSk1GTU00NHlHN3FlQjRBdFBJaVBtaVN0NkswVVR3UEJSMEZWbW9BMFpnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "record_id": "flaws_cloudtrail:0000352:44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "row_index": 352, "timestamp": "2019-06-28T20:49:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b07294-9bc5-4ee2-b4d7-15e0782a1b9b", "eventTime": "2019-06-28T20:49:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBc2VSUEVPSVJCaktyb1E1WlQzYS9SQkxQVytFamxxTEhwNUc5YmJ2UTN0TDBFb1NJZG1aV2dUWEdqd3RHZko3OEZMTzN3ZjV2TU1WWEdOK2VoQlZkVS9VWmF1U3pxUDYvQVZsZWY2N0VsQTI4YzltWGxxK0NkUEgzbFlONENLR0hlV3lWem1sV0RtcFc3RXMvQVpqUGhPZTJhZlRFOVU1MmVaNE10cUV0R0VMZU1oN21yTjBQWDlWclFsK0NpRHRxUkZOcjZITFc1UmNTY3RtZW1MN1hnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a546970-070c-4e61-a190-f6102c51c14b", "record_id": "flaws_cloudtrail:0000353:2a546970-070c-4e61-a190-f6102c51c14b", "row_index": 353, "timestamp": "2019-06-28T20:49:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a546970-070c-4e61-a190-f6102c51c14b", "eventTime": "2019-06-28T20:49:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJicGdDSnk5UHEyL2Q0V0FiUUdidjgvNjZkUDl0eWhqSzEzbHRTbFF2bHlBUUZhUzFHZmhlRVh3WUU4YUN1Z1pITXZzNVRhQ3dKeUd3d0NVMGF3N0FVcXdyMnlncjlNSmFLQ2N6WDNrUm9Za2EwVTdrOFZKc2cvZkloZkgwSVV2Z25NeVRQN3dxS1JqdGdkaEZrVWpLeVppSHJTNWpjUFdiU1pNb2xKaEpTbzNXemlrNjdua3lpMklXbGgySi94dmdMdUNnZ0RXZEwwb00rQUdlUHdTMVhYQXk5cmRmN3JvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a546970-070c-4e61-a190-f6102c51c14b", "record_id": "flaws_cloudtrail:0000354:2a546970-070c-4e61-a190-f6102c51c14b", "row_index": 354, "timestamp": "2019-06-28T20:49:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a546970-070c-4e61-a190-f6102c51c14b", "eventTime": "2019-06-28T20:49:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJicGdDSnk5UHEyL2Q0V0FiUUdidjgvNjZkUDl0eWhqSzEzbHRTbFF2bHlBUUZhUzFHZmhlRVh3WUU4YUN1Z1pITXZzNVRhQ3dKeUd3d0NVMGF3N0FVcXdyMnlncjlNSmFLQ2N6WDNrUm9Za2EwVTdrOFZKc2cvZkloZkgwSVV2Z25NeVRQN3dxS1JqdGdkaEZrVWpLeVppSHJTNWpjUFdiU1pNb2xKaEpTbzNXemlrNjdua3lpMklXbGgySi94dmdMdUNnZ0RXZEwwb00rQUdlUHdTMVhYQXk5cmRmN3JvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ace361d-551a-4c53-9735-a9cfe30113", "record_id": "flaws_cloudtrail:0000355:1ace361d-551a-4c53-9735-a9cfe30113", "row_index": 355, "timestamp": "2019-06-28T20:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ace361d-551a-4c53-9735-a9cfe30113", "eventTime": "2019-06-28T20:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMXN3UGxzS0d6Q21VVG1hcS9iOW9vQmZJckxnd200VG9tUHpPeEdqeno5VGEzSlFHeFd6TUdSZ2JlbU9pdHk5MTVWRzY5N3QyV1hhMzFJbmx2T0dDWFlVek5wWmhrMnFIZTJXMEVlYVpwMHRGNDhzV1d4Z0hpcXp2a2w3RVNtMUl0czdQMDZHalpiTzFDQ2JhdUMzdk0vRVJsa25xcWh5Z3d5UWRTTEtyeTFEL3hYUCtzT3VWWnJKZHdmRnhkV2F2SjZrZEViMkFPRDVjeWdyMzY3WUdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ace361d-551a-4c53-9735-a9cfe30113", "record_id": "flaws_cloudtrail:0000356:1ace361d-551a-4c53-9735-a9cfe30113", "row_index": 356, "timestamp": "2019-06-28T20:49:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ace361d-551a-4c53-9735-a9cfe30113", "eventTime": "2019-06-28T20:49:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMXN3UGxzS0d6Q21VVG1hcS9iOW9vQmZJckxnd200VG9tUHpPeEdqeno5VGEzSlFHeFd6TUdSZ2JlbU9pdHk5MTVWRzY5N3QyV1hhMzFJbmx2T0dDWFlVek5wWmhrMnFIZTJXMEVlYVpwMHRGNDhzV1d4Z0hpcXp2a2w3RVNtMUl0czdQMDZHalpiTzFDQ2JhdUMzdk0vRVJsa25xcWh5Z3d5UWRTTEtyeTFEL3hYUCtzT3VWWnJKZHdmRnhkV2F2SjZrZEViMkFPRDVjeWdyMzY3WUdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e938c438-2a55-4320-99e6-d7edb83897", "record_id": "flaws_cloudtrail:0000357:e938c438-2a55-4320-99e6-d7edb83897", "row_index": 357, "timestamp": "2019-06-28T20:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e938c438-2a55-4320-99e6-d7edb83897", "eventTime": "2019-06-28T20:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRENPSHBHRFQ4c0FBd0dxVm8wTlpSWW5YbFRwdUpZMENGMS85dFIvdjhDTGZyQUk5Q1lpamRoOTVLZVMxSTNxM0E0VVFQVzd3T1gwQXVibTVoS3hOaXpLVGUvRG1ESmsxOTVUUVpIajNGWm04VFR2Q2c5b0loNVNyOWJBaWw1TnhENmFGRkMwMG9vc2VKWW9rNnlFd1RicEREMG9vOGN2T3FCcXM3cTZpWDNoa055ZlNTY0FtODRPbmlJT2dmQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf04379-cc8e-4587-a345-585206b604763", "record_id": "flaws_cloudtrail:0000358:bcf04379-cc8e-4587-a345-585206b604763", "row_index": 358, "timestamp": "2019-06-28T20:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf04379-cc8e-4587-a345-585206b604763", "eventTime": "2019-06-28T20:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTTNJTGM0VDJEWUxGcUFQOHNhYXh0SnY5TzJXTXNiZ2RJeDA1VFB4QjFOY1RsaEZTenJXcFlDVU9RSTlsbXFObHZaYUdLcHhmOXEwVGkyZTVqUjRCeEd0WjZXYmsrVERTZThNQnp6V1QwbGI5TCtUeDZqQnV2dzlGL2FzQVo5UXd1czQxdDVTTFhHakdBcENvQVBjV1ZYelBLSWdvK1JlYVEva1VCcUFmbGZzTUljUkNNNXlrOFRjSVcyRE5WbndIc3FoMkNXYmR3VEJNSUtLankxK3h3OG96eWhLcXBJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e938c438-2a55-4320-99e6-d7edb83897", "record_id": "flaws_cloudtrail:0000359:e938c438-2a55-4320-99e6-d7edb83897", "row_index": 359, "timestamp": "2019-06-28T20:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e938c438-2a55-4320-99e6-d7edb83897", "eventTime": "2019-06-28T20:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRENPSHBHRFQ4c0FBd0dxVm8wTlpSWW5YbFRwdUpZMENGMS85dFIvdjhDTGZyQUk5Q1lpamRoOTVLZVMxSTNxM0E0VVFQVzd3T1gwQXVibTVoS3hOaXpLVGUvRG1ESmsxOTVUUVpIajNGWm04VFR2Q2c5b0loNVNyOWJBaWw1TnhENmFGRkMwMG9vc2VKWW9rNnlFd1RicEREMG9vOGN2T3FCcXM3cTZpWDNoa055ZlNTY0FtODRPbmlJT2dmQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf04379-cc8e-4587-a345-585206b604763", "record_id": "flaws_cloudtrail:0000360:bcf04379-cc8e-4587-a345-585206b604763", "row_index": 360, "timestamp": "2019-06-28T20:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf04379-cc8e-4587-a345-585206b604763", "eventTime": "2019-06-28T20:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTTNJTGM0VDJEWUxGcUFQOHNhYXh0SnY5TzJXTXNiZ2RJeDA1VFB4QjFOY1RsaEZTenJXcFlDVU9RSTlsbXFObHZaYUdLcHhmOXEwVGkyZTVqUjRCeEd0WjZXYmsrVERTZThNQnp6V1QwbGI5TCtUeDZqQnV2dzlGL2FzQVo5UXd1czQxdDVTTFhHakdBcENvQVBjV1ZYelBLSWdvK1JlYVEva1VCcUFmbGZzTUljUkNNNXlrOFRjSVcyRE5WbndIc3FoMkNXYmR3VEJNSUtLankxK3h3OG96eWhLcXBJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "record_id": "flaws_cloudtrail:0000361:b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "row_index": 361, "timestamp": "2019-06-28T20:57:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "eventTime": "2019-06-28T20:57:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "record_id": "flaws_cloudtrail:0000362:b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "row_index": 362, "timestamp": "2019-06-28T20:57:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.238.24.236", "user_agent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b072f1ae-8d29-472a-9f9f-b4a01b6926bd", "eventTime": "2019-06-28T20:57:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.238.24.236", "userAgent": "aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "record_id": "flaws_cloudtrail:0000363:6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "row_index": 363, "timestamp": "2019-06-28T21:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "eventTime": "2019-06-28T21:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4X7ZQW6KLF2VLMB8", "expiration": "Jun 29, 2019 3:49:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "record_id": "flaws_cloudtrail:0000364:6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "row_index": 364, "timestamp": "2019-06-28T21:28:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6111e1ce-a6d7-4370-9654-55a0e9bfc37e", "eventTime": "2019-06-28T21:28:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4X7ZQW6KLF2VLMB8", "expiration": "Jun 29, 2019 3:49:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35a07442-f17d-496e-9ac7-96e953a7696a", "record_id": "flaws_cloudtrail:0000365:35a07442-f17d-496e-9ac7-96e953a7696a", "row_index": 365, "timestamp": "2019-06-28T22:27:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35a07442-f17d-496e-9ac7-96e953a7696a", "eventTime": "2019-06-28T22:27:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a01b481-6223-4142-8fc6-d25c3ff2859b", "record_id": "flaws_cloudtrail:0000366:5a01b481-6223-4142-8fc6-d25c3ff2859b", "row_index": 366, "timestamp": "2019-06-28T22:27:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a01b481-6223-4142-8fc6-d25c3ff2859b", "eventTime": "2019-06-28T22:27:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416e75a9-7fa1-4e43-8de9-552e0b446e14", "record_id": "flaws_cloudtrail:0000367:416e75a9-7fa1-4e43-8de9-552e0b446e14", "row_index": 367, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416e75a9-7fa1-4e43-8de9-552e0b446e14", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "record_id": "flaws_cloudtrail:0000368:249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "row_index": 368, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e007b62f-dfe4-40a3-a49e-36a56191b6ac", "record_id": "flaws_cloudtrail:0000369:e007b62f-dfe4-40a3-a49e-36a56191b6ac", "row_index": 369, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e007b62f-dfe4-40a3-a49e-36a56191b6ac", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "record_id": "flaws_cloudtrail:0000370:9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "row_index": 370, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd692495-d423-48dd-848f-8aa3d458808d", "record_id": "flaws_cloudtrail:0000371:0fd692495-d423-48dd-848f-8aa3d458808d", "row_index": 371, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd692495-d423-48dd-848f-8aa3d458808d", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "record_id": "flaws_cloudtrail:0000372:1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "row_index": 372, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89da8f66-90f3-4481-b0e2-2dd79811edf", "record_id": "flaws_cloudtrail:0000373:89da8f66-90f3-4481-b0e2-2dd79811edf", "row_index": 373, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 947, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89da8f66-90f3-4481-b0e2-2dd79811edf", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692807f73-e72a-460e-8e31-80bc3c41df9d", "record_id": "flaws_cloudtrail:0000374:692807f73-e72a-460e-8e31-80bc3c41df9d", "row_index": 374, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692807f73-e72a-460e-8e31-80bc3c41df9d", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "record_id": "flaws_cloudtrail:0000375:8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "row_index": 375, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "record_id": "flaws_cloudtrail:0000376:10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "row_index": 376, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5517db02-fb70-4ed3-8203-d1f97be7f8e6", "record_id": "flaws_cloudtrail:0000377:5517db02-fb70-4ed3-8203-d1f97be7f8e6", "row_index": 377, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5517db02-fb70-4ed3-8203-d1f97be7f8e6", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "record_id": "flaws_cloudtrail:0000378:0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "row_index": 378, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "record_id": "flaws_cloudtrail:0000379:bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "row_index": 379, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5734ea-07f7-4023-8a59-378ab87ca9b3", "record_id": "flaws_cloudtrail:0000380:9d5734ea-07f7-4023-8a59-378ab87ca9b3", "row_index": 380, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5734ea-07f7-4023-8a59-378ab87ca9b3", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "554061a7-2e90-47ef-a3a9-485cfca0ddab", "record_id": "flaws_cloudtrail:0000381:554061a7-2e90-47ef-a3a9-485cfca0ddab", "row_index": 381, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "554061a7-2e90-47ef-a3a9-485cfca0ddab", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78581c1b-a204-4605-95f3-a6112dde98cf", "record_id": "flaws_cloudtrail:0000382:78581c1b-a204-4605-95f3-a6112dde98cf", "row_index": 382, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78581c1b-a204-4605-95f3-a6112dde98cf", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35a07442-f17d-496e-9ac7-96e953a7696a", "record_id": "flaws_cloudtrail:0000383:35a07442-f17d-496e-9ac7-96e953a7696a", "row_index": 383, "timestamp": "2019-06-28T22:27:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35a07442-f17d-496e-9ac7-96e953a7696a", "eventTime": "2019-06-28T22:27:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a01b481-6223-4142-8fc6-d25c3ff2859b", "record_id": "flaws_cloudtrail:0000384:5a01b481-6223-4142-8fc6-d25c3ff2859b", "row_index": 384, "timestamp": "2019-06-28T22:27:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a01b481-6223-4142-8fc6-d25c3ff2859b", "eventTime": "2019-06-28T22:27:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416e75a9-7fa1-4e43-8de9-552e0b446e14", "record_id": "flaws_cloudtrail:0000385:416e75a9-7fa1-4e43-8de9-552e0b446e14", "row_index": 385, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416e75a9-7fa1-4e43-8de9-552e0b446e14", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "record_id": "flaws_cloudtrail:0000386:249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "row_index": 386, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249dc6f6-6f02-49f6-b54a-40a1f9e10ddb", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e007b62f-dfe4-40a3-a49e-36a56191b6ac", "record_id": "flaws_cloudtrail:0000387:e007b62f-dfe4-40a3-a49e-36a56191b6ac", "row_index": 387, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e007b62f-dfe4-40a3-a49e-36a56191b6ac", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "record_id": "flaws_cloudtrail:0000388:9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "row_index": 388, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9873adb2-aaf8-4618-8a1d-3a4da3bb4259", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd692495-d423-48dd-848f-8aa3d458808d", "record_id": "flaws_cloudtrail:0000389:0fd692495-d423-48dd-848f-8aa3d458808d", "row_index": 389, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd692495-d423-48dd-848f-8aa3d458808d", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "record_id": "flaws_cloudtrail:0000390:1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "row_index": 390, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3c7af1-55a7-4603-a2bd-bc639e9260b0", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89da8f66-90f3-4481-b0e2-2dd79811edf", "record_id": "flaws_cloudtrail:0000391:89da8f66-90f3-4481-b0e2-2dd79811edf", "row_index": 391, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 947, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89da8f66-90f3-4481-b0e2-2dd79811edf", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692807f73-e72a-460e-8e31-80bc3c41df9d", "record_id": "flaws_cloudtrail:0000392:692807f73-e72a-460e-8e31-80bc3c41df9d", "row_index": 392, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692807f73-e72a-460e-8e31-80bc3c41df9d", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "record_id": "flaws_cloudtrail:0000393:8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "row_index": 393, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d42f8c7-1427-4eac-b184-fc51dcab9ba0", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "record_id": "flaws_cloudtrail:0000394:10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "row_index": 394, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10dd83ba-7f2a-4b5e-bc8d-e56d2c67f67e", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5517db02-fb70-4ed3-8203-d1f97be7f8e6", "record_id": "flaws_cloudtrail:0000395:5517db02-fb70-4ed3-8203-d1f97be7f8e6", "row_index": 395, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5517db02-fb70-4ed3-8203-d1f97be7f8e6", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "record_id": "flaws_cloudtrail:0000396:0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "row_index": 396, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee0d045-f1d8-4b68-a0c3-51b51a8c95b4", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "record_id": "flaws_cloudtrail:0000397:bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "row_index": 397, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae4c037-5b86-45b4-93b5-4a96daaf7dbb", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5734ea-07f7-4023-8a59-378ab87ca9b3", "record_id": "flaws_cloudtrail:0000398:9d5734ea-07f7-4023-8a59-378ab87ca9b3", "row_index": 398, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5734ea-07f7-4023-8a59-378ab87ca9b3", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "554061a7-2e90-47ef-a3a9-485cfca0ddab", "record_id": "flaws_cloudtrail:0000399:554061a7-2e90-47ef-a3a9-485cfca0ddab", "row_index": 399, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "554061a7-2e90-47ef-a3a9-485cfca0ddab", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78581c1b-a204-4605-95f3-a6112dde98cf", "record_id": "flaws_cloudtrail:0000400:78581c1b-a204-4605-95f3-a6112dde98cf", "row_index": 400, "timestamp": "2019-06-28T22:27:36Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78581c1b-a204-4605-95f3-a6112dde98cf", "eventTime": "2019-06-28T22:27:36Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e404e4b9-7770-4536-a076-b99290de062", "record_id": "flaws_cloudtrail:0000401:e404e4b9-7770-4536-a076-b99290de062", "row_index": 401, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e404e4b9-7770-4536-a076-b99290de062", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "904708fe5-cb0a-423d-96aa-0a515b278fba", "record_id": "flaws_cloudtrail:0000402:904708fe5-cb0a-423d-96aa-0a515b278fba", "row_index": 402, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "904708fe5-cb0a-423d-96aa-0a515b278fba", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d99bb2b-d479-4306-9081-aef103606b892", "record_id": "flaws_cloudtrail:0000403:4d99bb2b-d479-4306-9081-aef103606b892", "row_index": 403, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d99bb2b-d479-4306-9081-aef103606b892", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "record_id": "flaws_cloudtrail:0000404:7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "row_index": 404, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8446fc4-f09c-4fab-ab82-49014a349e", "record_id": "flaws_cloudtrail:0000405:a8446fc4-f09c-4fab-ab82-49014a349e", "row_index": 405, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8446fc4-f09c-4fab-ab82-49014a349e", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e404e4b9-7770-4536-a076-b99290de062", "record_id": "flaws_cloudtrail:0000406:e404e4b9-7770-4536-a076-b99290de062", "row_index": 406, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e404e4b9-7770-4536-a076-b99290de062", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "904708fe5-cb0a-423d-96aa-0a515b278fba", "record_id": "flaws_cloudtrail:0000407:904708fe5-cb0a-423d-96aa-0a515b278fba", "row_index": 407, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "904708fe5-cb0a-423d-96aa-0a515b278fba", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d99bb2b-d479-4306-9081-aef103606b892", "record_id": "flaws_cloudtrail:0000408:4d99bb2b-d479-4306-9081-aef103606b892", "row_index": 408, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d99bb2b-d479-4306-9081-aef103606b892", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "record_id": "flaws_cloudtrail:0000409:7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "row_index": 409, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c7427dd-0d80-4b5e-a8f7-3016ece0e659", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8446fc4-f09c-4fab-ab82-49014a349e", "record_id": "flaws_cloudtrail:0000410:a8446fc4-f09c-4fab-ab82-49014a349e", "row_index": 410, "timestamp": "2019-06-28T22:28:01Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8446fc4-f09c-4fab-ab82-49014a349e", "eventTime": "2019-06-28T22:28:01Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "record_id": "flaws_cloudtrail:0000411:6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "row_index": 411, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf2514ec-468d-4baa-b567-d15f09d9891e", "record_id": "flaws_cloudtrail:0000412:cf2514ec-468d-4baa-b567-d15f09d9891e", "row_index": 412, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf2514ec-468d-4baa-b567-d15f09d9891e", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6420fe93-596b-45e5-8f24-09c58ef351f5", "record_id": "flaws_cloudtrail:0000413:6420fe93-596b-45e5-8f24-09c58ef351f5", "row_index": 413, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6420fe93-596b-45e5-8f24-09c58ef351f5", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09909-3d45-40d5-b4ec-fb2be3700d7f", "record_id": "flaws_cloudtrail:0000414:09909-3d45-40d5-b4ec-fb2be3700d7f", "row_index": 414, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09909-3d45-40d5-b4ec-fb2be3700d7f", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3658f5de-774d-4c01-a34d-493393c7609b", "record_id": "flaws_cloudtrail:0000415:3658f5de-774d-4c01-a34d-493393c7609b", "row_index": 415, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3658f5de-774d-4c01-a34d-493393c7609b", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a76ce9a-5359-463b-8bd1-65b036509ae", "record_id": "flaws_cloudtrail:0000416:5a76ce9a-5359-463b-8bd1-65b036509ae", "row_index": 416, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a76ce9a-5359-463b-8bd1-65b036509ae", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0a004d-7ada-4b30-ad75-9039b1094b36", "record_id": "flaws_cloudtrail:0000417:ff0a004d-7ada-4b30-ad75-9039b1094b36", "row_index": 417, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0a004d-7ada-4b30-ad75-9039b1094b36", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7d6ff75-ce57-4049-a43e-35afa43ce46f", "record_id": "flaws_cloudtrail:0000418:e7d6ff75-ce57-4049-a43e-35afa43ce46f", "row_index": 418, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7d6ff75-ce57-4049-a43e-35afa43ce46f", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c1b89f-175c-43ec-8cb8-afbd509b8107", "record_id": "flaws_cloudtrail:0000419:93c1b89f-175c-43ec-8cb8-afbd509b8107", "row_index": 419, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c1b89f-175c-43ec-8cb8-afbd509b8107", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd6c6d74-2e2a-455c-abba-66d9e66a9805", "record_id": "flaws_cloudtrail:0000420:fd6c6d74-2e2a-455c-abba-66d9e66a9805", "row_index": 420, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd6c6d74-2e2a-455c-abba-66d9e66a9805", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b82044a-3f8e-4a22-a597-7651f520c6e0", "record_id": "flaws_cloudtrail:0000421:0b82044a-3f8e-4a22-a597-7651f520c6e0", "row_index": 421, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b82044a-3f8e-4a22-a597-7651f520c6e0", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f538a14-cf6a-42f7-a443-81947a0a26", "record_id": "flaws_cloudtrail:0000422:2f538a14-cf6a-42f7-a443-81947a0a26", "row_index": 422, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f538a14-cf6a-42f7-a443-81947a0a26", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "record_id": "flaws_cloudtrail:0000423:d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "row_index": 423, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f462585f-6f2d-4782-a578-89fd1ce525297", "record_id": "flaws_cloudtrail:0000424:0f462585f-6f2d-4782-a578-89fd1ce525297", "row_index": 424, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f462585f-6f2d-4782-a578-89fd1ce525297", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8099f3-e5f8-4946-abfc-e7081933f453", "record_id": "flaws_cloudtrail:0000425:0f8099f3-e5f8-4946-abfc-e7081933f453", "row_index": 425, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8099f3-e5f8-4946-abfc-e7081933f453", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22adad5b-672e-4432-9b06-69058c84bd0", "record_id": "flaws_cloudtrail:0000426:22adad5b-672e-4432-9b06-69058c84bd0", "row_index": 426, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22adad5b-672e-4432-9b06-69058c84bd0", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "record_id": "flaws_cloudtrail:0000427:6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "row_index": 427, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa697e6-1c05-4cc3-80b9-b6d6c05fbdc7", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf2514ec-468d-4baa-b567-d15f09d9891e", "record_id": "flaws_cloudtrail:0000428:cf2514ec-468d-4baa-b567-d15f09d9891e", "row_index": 428, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf2514ec-468d-4baa-b567-d15f09d9891e", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6420fe93-596b-45e5-8f24-09c58ef351f5", "record_id": "flaws_cloudtrail:0000429:6420fe93-596b-45e5-8f24-09c58ef351f5", "row_index": 429, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6420fe93-596b-45e5-8f24-09c58ef351f5", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09909-3d45-40d5-b4ec-fb2be3700d7f", "record_id": "flaws_cloudtrail:0000430:09909-3d45-40d5-b4ec-fb2be3700d7f", "row_index": 430, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09909-3d45-40d5-b4ec-fb2be3700d7f", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3658f5de-774d-4c01-a34d-493393c7609b", "record_id": "flaws_cloudtrail:0000431:3658f5de-774d-4c01-a34d-493393c7609b", "row_index": 431, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3658f5de-774d-4c01-a34d-493393c7609b", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a76ce9a-5359-463b-8bd1-65b036509ae", "record_id": "flaws_cloudtrail:0000432:5a76ce9a-5359-463b-8bd1-65b036509ae", "row_index": 432, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a76ce9a-5359-463b-8bd1-65b036509ae", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0a004d-7ada-4b30-ad75-9039b1094b36", "record_id": "flaws_cloudtrail:0000433:ff0a004d-7ada-4b30-ad75-9039b1094b36", "row_index": 433, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0a004d-7ada-4b30-ad75-9039b1094b36", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7d6ff75-ce57-4049-a43e-35afa43ce46f", "record_id": "flaws_cloudtrail:0000434:e7d6ff75-ce57-4049-a43e-35afa43ce46f", "row_index": 434, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7d6ff75-ce57-4049-a43e-35afa43ce46f", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c1b89f-175c-43ec-8cb8-afbd509b8107", "record_id": "flaws_cloudtrail:0000435:93c1b89f-175c-43ec-8cb8-afbd509b8107", "row_index": 435, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c1b89f-175c-43ec-8cb8-afbd509b8107", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd6c6d74-2e2a-455c-abba-66d9e66a9805", "record_id": "flaws_cloudtrail:0000436:fd6c6d74-2e2a-455c-abba-66d9e66a9805", "row_index": 436, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd6c6d74-2e2a-455c-abba-66d9e66a9805", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b82044a-3f8e-4a22-a597-7651f520c6e0", "record_id": "flaws_cloudtrail:0000437:0b82044a-3f8e-4a22-a597-7651f520c6e0", "row_index": 437, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b82044a-3f8e-4a22-a597-7651f520c6e0", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f538a14-cf6a-42f7-a443-81947a0a26", "record_id": "flaws_cloudtrail:0000438:2f538a14-cf6a-42f7-a443-81947a0a26", "row_index": 438, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f538a14-cf6a-42f7-a443-81947a0a26", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "record_id": "flaws_cloudtrail:0000439:d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "row_index": 439, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d8328b-295f-41d9-9e8c-c8a8dbfcc40a", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f462585f-6f2d-4782-a578-89fd1ce525297", "record_id": "flaws_cloudtrail:0000440:0f462585f-6f2d-4782-a578-89fd1ce525297", "row_index": 440, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f462585f-6f2d-4782-a578-89fd1ce525297", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8099f3-e5f8-4946-abfc-e7081933f453", "record_id": "flaws_cloudtrail:0000441:0f8099f3-e5f8-4946-abfc-e7081933f453", "row_index": 441, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8099f3-e5f8-4946-abfc-e7081933f453", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22adad5b-672e-4432-9b06-69058c84bd0", "record_id": "flaws_cloudtrail:0000442:22adad5b-672e-4432-9b06-69058c84bd0", "row_index": 442, "timestamp": "2019-06-28T22:28:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22adad5b-672e-4432-9b06-69058c84bd0", "eventTime": "2019-06-28T22:28:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51b84292-4fc9-44ec-9690-c5227a46a00d", "record_id": "flaws_cloudtrail:0000443:51b84292-4fc9-44ec-9690-c5227a46a00d", "row_index": 443, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51b84292-4fc9-44ec-9690-c5227a46a00d", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "record_id": "flaws_cloudtrail:0000444:429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "row_index": 444, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30308-c58e-427e-8cc1-259a782fb04d", "record_id": "flaws_cloudtrail:0000445:d30308-c58e-427e-8cc1-259a782fb04d", "row_index": 445, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30308-c58e-427e-8cc1-259a782fb04d", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "record_id": "flaws_cloudtrail:0000446:2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "row_index": 446, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "record_id": "flaws_cloudtrail:0000447:7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "row_index": 447, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "record_id": "flaws_cloudtrail:0000448:6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "row_index": 448, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dde0a9b-6129-456f-9352-7556a07143", "record_id": "flaws_cloudtrail:0000449:8dde0a9b-6129-456f-9352-7556a07143", "row_index": 449, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dde0a9b-6129-456f-9352-7556a07143", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fe7667-c892-4137-ad43-9df9f81cb14b", "record_id": "flaws_cloudtrail:0000450:95fe7667-c892-4137-ad43-9df9f81cb14b", "row_index": 450, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fe7667-c892-4137-ad43-9df9f81cb14b", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2313da-8fa3-4c72-9484-4ac77488cd8", "record_id": "flaws_cloudtrail:0000451:ba2313da-8fa3-4c72-9484-4ac77488cd8", "row_index": 451, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2313da-8fa3-4c72-9484-4ac77488cd8", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538f2155-9fb6-4c29-a208-8914c8faef46", "record_id": "flaws_cloudtrail:0000452:538f2155-9fb6-4c29-a208-8914c8faef46", "row_index": 452, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538f2155-9fb6-4c29-a208-8914c8faef46", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4e7a00-3f16-4317-993b-a0dfc6d09093", "record_id": "flaws_cloudtrail:0000453:3e4e7a00-3f16-4317-993b-a0dfc6d09093", "row_index": 453, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4e7a00-3f16-4317-993b-a0dfc6d09093", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2fca7d7-fab1-4551-ad76-317e47025a2", "record_id": "flaws_cloudtrail:0000454:b2fca7d7-fab1-4551-ad76-317e47025a2", "row_index": 454, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2fca7d7-fab1-4551-ad76-317e47025a2", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d006c9-0356-4ff3-92c0-c82faff5a54a", "record_id": "flaws_cloudtrail:0000455:01d006c9-0356-4ff3-92c0-c82faff5a54a", "row_index": 455, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d006c9-0356-4ff3-92c0-c82faff5a54a", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e123bd93-50a7-41cc-9321-06b107ce35cf", "record_id": "flaws_cloudtrail:0000456:e123bd93-50a7-41cc-9321-06b107ce35cf", "row_index": 456, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e123bd93-50a7-41cc-9321-06b107ce35cf", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2058b26f-222b-4301-81d7-f05ce50653", "record_id": "flaws_cloudtrail:0000457:2058b26f-222b-4301-81d7-f05ce50653", "row_index": 457, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2058b26f-222b-4301-81d7-f05ce50653", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf503e13-f12b-471f-8406-ceb5e2da153f", "record_id": "flaws_cloudtrail:0000458:bf503e13-f12b-471f-8406-ceb5e2da153f", "row_index": 458, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf503e13-f12b-471f-8406-ceb5e2da153f", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4711ff94-1a83-4c8d-9f66-04ded32d6d27", "record_id": "flaws_cloudtrail:0000459:4711ff94-1a83-4c8d-9f66-04ded32d6d27", "row_index": 459, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4711ff94-1a83-4c8d-9f66-04ded32d6d27", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51b84292-4fc9-44ec-9690-c5227a46a00d", "record_id": "flaws_cloudtrail:0000460:51b84292-4fc9-44ec-9690-c5227a46a00d", "row_index": 460, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51b84292-4fc9-44ec-9690-c5227a46a00d", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "record_id": "flaws_cloudtrail:0000461:429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "row_index": 461, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "429d8057-0e2f-44cc-bb5d-92e16d9f2b1f", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30308-c58e-427e-8cc1-259a782fb04d", "record_id": "flaws_cloudtrail:0000462:d30308-c58e-427e-8cc1-259a782fb04d", "row_index": 462, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30308-c58e-427e-8cc1-259a782fb04d", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "record_id": "flaws_cloudtrail:0000463:2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "row_index": 463, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f09b194-4e53-4ad6-9096-1f0d8dcab6f5", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "record_id": "flaws_cloudtrail:0000464:7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "row_index": 464, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7feb8a79-d90b-48a9-8692-b8f6bdafd25a", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "record_id": "flaws_cloudtrail:0000465:6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "row_index": 465, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ee118309-6fc6-4fcb-b4f0-a62dc8b793602", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dde0a9b-6129-456f-9352-7556a07143", "record_id": "flaws_cloudtrail:0000466:8dde0a9b-6129-456f-9352-7556a07143", "row_index": 466, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dde0a9b-6129-456f-9352-7556a07143", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fe7667-c892-4137-ad43-9df9f81cb14b", "record_id": "flaws_cloudtrail:0000467:95fe7667-c892-4137-ad43-9df9f81cb14b", "row_index": 467, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fe7667-c892-4137-ad43-9df9f81cb14b", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2313da-8fa3-4c72-9484-4ac77488cd8", "record_id": "flaws_cloudtrail:0000468:ba2313da-8fa3-4c72-9484-4ac77488cd8", "row_index": 468, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2313da-8fa3-4c72-9484-4ac77488cd8", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538f2155-9fb6-4c29-a208-8914c8faef46", "record_id": "flaws_cloudtrail:0000469:538f2155-9fb6-4c29-a208-8914c8faef46", "row_index": 469, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538f2155-9fb6-4c29-a208-8914c8faef46", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4e7a00-3f16-4317-993b-a0dfc6d09093", "record_id": "flaws_cloudtrail:0000470:3e4e7a00-3f16-4317-993b-a0dfc6d09093", "row_index": 470, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4e7a00-3f16-4317-993b-a0dfc6d09093", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2fca7d7-fab1-4551-ad76-317e47025a2", "record_id": "flaws_cloudtrail:0000471:b2fca7d7-fab1-4551-ad76-317e47025a2", "row_index": 471, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2fca7d7-fab1-4551-ad76-317e47025a2", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d006c9-0356-4ff3-92c0-c82faff5a54a", "record_id": "flaws_cloudtrail:0000472:01d006c9-0356-4ff3-92c0-c82faff5a54a", "row_index": 472, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d006c9-0356-4ff3-92c0-c82faff5a54a", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e123bd93-50a7-41cc-9321-06b107ce35cf", "record_id": "flaws_cloudtrail:0000473:e123bd93-50a7-41cc-9321-06b107ce35cf", "row_index": 473, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e123bd93-50a7-41cc-9321-06b107ce35cf", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2058b26f-222b-4301-81d7-f05ce50653", "record_id": "flaws_cloudtrail:0000474:2058b26f-222b-4301-81d7-f05ce50653", "row_index": 474, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2058b26f-222b-4301-81d7-f05ce50653", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf503e13-f12b-471f-8406-ceb5e2da153f", "record_id": "flaws_cloudtrail:0000475:bf503e13-f12b-471f-8406-ceb5e2da153f", "row_index": 475, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf503e13-f12b-471f-8406-ceb5e2da153f", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4711ff94-1a83-4c8d-9f66-04ded32d6d27", "record_id": "flaws_cloudtrail:0000476:4711ff94-1a83-4c8d-9f66-04ded32d6d27", "row_index": 476, "timestamp": "2019-06-28T22:28:03Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4711ff94-1a83-4c8d-9f66-04ded32d6d27", "eventTime": "2019-06-28T22:28:03Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbab3a62-11c8-408c-9440-d264a4766e7d", "record_id": "flaws_cloudtrail:0000477:cbab3a62-11c8-408c-9440-d264a4766e7d", "row_index": 477, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbab3a62-11c8-408c-9440-d264a4766e7d", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53668-8ba9-40ec-a429-010446fc1bea", "record_id": "flaws_cloudtrail:0000478:53668-8ba9-40ec-a429-010446fc1bea", "row_index": 478, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53668-8ba9-40ec-a429-010446fc1bea", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "record_id": "flaws_cloudtrail:0000479:9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "row_index": 479, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "record_id": "flaws_cloudtrail:0000480:93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "row_index": 480, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd749aeb-dada-49e1-a6d5-ad112dc262ec", "record_id": "flaws_cloudtrail:0000481:dd749aeb-dada-49e1-a6d5-ad112dc262ec", "row_index": 481, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd749aeb-dada-49e1-a6d5-ad112dc262ec", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "record_id": "flaws_cloudtrail:0000482:1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "row_index": 482, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae124adf-edbb-4731-92e3-e023b88790b", "record_id": "flaws_cloudtrail:0000483:ae124adf-edbb-4731-92e3-e023b88790b", "row_index": 483, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae124adf-edbb-4731-92e3-e023b88790b", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "record_id": "flaws_cloudtrail:0000484:d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "row_index": 484, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8f44249-7c1a-42f8-a298-123d72418", "record_id": "flaws_cloudtrail:0000485:f8f44249-7c1a-42f8-a298-123d72418", "row_index": 485, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8f44249-7c1a-42f8-a298-123d72418", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "record_id": "flaws_cloudtrail:0000486:17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "row_index": 486, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbab3a62-11c8-408c-9440-d264a4766e7d", "record_id": "flaws_cloudtrail:0000487:cbab3a62-11c8-408c-9440-d264a4766e7d", "row_index": 487, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbab3a62-11c8-408c-9440-d264a4766e7d", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53668-8ba9-40ec-a429-010446fc1bea", "record_id": "flaws_cloudtrail:0000488:53668-8ba9-40ec-a429-010446fc1bea", "row_index": 488, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53668-8ba9-40ec-a429-010446fc1bea", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "record_id": "flaws_cloudtrail:0000489:9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "row_index": 489, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fd1abe6-c2d7-4343-bf1c-891fcc557ffc", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "record_id": "flaws_cloudtrail:0000490:93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "row_index": 490, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93dce3d3-7a29-4c14-8ef8-226ff4f38dfa", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd749aeb-dada-49e1-a6d5-ad112dc262ec", "record_id": "flaws_cloudtrail:0000491:dd749aeb-dada-49e1-a6d5-ad112dc262ec", "row_index": 491, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd749aeb-dada-49e1-a6d5-ad112dc262ec", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "record_id": "flaws_cloudtrail:0000492:1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "row_index": 492, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd9f72d-13af-4e90-9fae-7a3c3f5c76be", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae124adf-edbb-4731-92e3-e023b88790b", "record_id": "flaws_cloudtrail:0000493:ae124adf-edbb-4731-92e3-e023b88790b", "row_index": 493, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae124adf-edbb-4731-92e3-e023b88790b", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "record_id": "flaws_cloudtrail:0000494:d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "row_index": 494, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d38bb173-3e06-4ab8-b1c3-2fe148d81a8f", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8f44249-7c1a-42f8-a298-123d72418", "record_id": "flaws_cloudtrail:0000495:f8f44249-7c1a-42f8-a298-123d72418", "row_index": 495, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8f44249-7c1a-42f8-a298-123d72418", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "record_id": "flaws_cloudtrail:0000496:17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "row_index": 496, "timestamp": "2019-06-28T22:28:04Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17eb35e8-7e73-4a0f-8f5a-d3e2ec729fd5", "eventTime": "2019-06-28T22:28:04Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e024496-7da1-4e4a-9d5c-552d6ed54ff7", "record_id": "flaws_cloudtrail:0000497:e024496-7da1-4e4a-9d5c-552d6ed54ff7", "row_index": 497, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e024496-7da1-4e4a-9d5c-552d6ed54ff7", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6671d83d-92f1-4828-ad5c-010ed7956cd5", "record_id": "flaws_cloudtrail:0000498:6671d83d-92f1-4828-ad5c-010ed7956cd5", "row_index": 498, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6671d83d-92f1-4828-ad5c-010ed7956cd5", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fedb528-7a78-4228-9d4c-d6603ac9a188", "record_id": "flaws_cloudtrail:0000499:3fedb528-7a78-4228-9d4c-d6603ac9a188", "row_index": 499, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fedb528-7a78-4228-9d4c-d6603ac9a188", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5203ab41-741a-4d3c-8095-231c7e073d4d", "record_id": "flaws_cloudtrail:0000500:5203ab41-741a-4d3c-8095-231c7e073d4d", "row_index": 500, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5203ab41-741a-4d3c-8095-231c7e073d4d", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "record_id": "flaws_cloudtrail:0000501:7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "row_index": 501, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996288f2-98e6-4805-a8a4-d889336a15", "record_id": "flaws_cloudtrail:0000502:996288f2-98e6-4805-a8a4-d889336a15", "row_index": 502, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996288f2-98e6-4805-a8a4-d889336a15", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11916-4fc7-442d-80c5-f529fa113203", "record_id": "flaws_cloudtrail:0000503:11916-4fc7-442d-80c5-f529fa113203", "row_index": 503, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11916-4fc7-442d-80c5-f529fa113203", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e462c9-e386-4bc6-bead-ad5558cbd9b6", "record_id": "flaws_cloudtrail:0000504:20e462c9-e386-4bc6-bead-ad5558cbd9b6", "row_index": 504, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e462c9-e386-4bc6-bead-ad5558cbd9b6", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0161edaa-79a8-403c-8241-229add4e5ba7", "record_id": "flaws_cloudtrail:0000505:0161edaa-79a8-403c-8241-229add4e5ba7", "row_index": 505, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0161edaa-79a8-403c-8241-229add4e5ba7", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399b93dc-731a-4c27-94e2-39454c8455c1", "record_id": "flaws_cloudtrail:0000506:399b93dc-731a-4c27-94e2-39454c8455c1", "row_index": 506, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399b93dc-731a-4c27-94e2-39454c8455c1", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbd54eb-e801-4fa8-b9e6-a674833dd", "record_id": "flaws_cloudtrail:0000507:bbbd54eb-e801-4fa8-b9e6-a674833dd", "row_index": 507, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbd54eb-e801-4fa8-b9e6-a674833dd", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "record_id": "flaws_cloudtrail:0000508:e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "row_index": 508, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620e3a77-b53a-4a09-a6bf-40da6f728ba1", "record_id": "flaws_cloudtrail:0000509:620e3a77-b53a-4a09-a6bf-40da6f728ba1", "row_index": 509, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620e3a77-b53a-4a09-a6bf-40da6f728ba1", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d0fef0d-c6c1-4361-925f-9529f37534f0", "record_id": "flaws_cloudtrail:0000510:1d0fef0d-c6c1-4361-925f-9529f37534f0", "row_index": 510, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d0fef0d-c6c1-4361-925f-9529f37534f0", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064b0d20-72a1-4978-af27-1cacbfe17c95", "record_id": "flaws_cloudtrail:0000511:064b0d20-72a1-4978-af27-1cacbfe17c95", "row_index": 511, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064b0d20-72a1-4978-af27-1cacbfe17c95", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067fa293-f944-4a5d-8d22-7db498715ad58", "record_id": "flaws_cloudtrail:0000512:067fa293-f944-4a5d-8d22-7db498715ad58", "row_index": 512, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067fa293-f944-4a5d-8d22-7db498715ad58", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e024496-7da1-4e4a-9d5c-552d6ed54ff7", "record_id": "flaws_cloudtrail:0000513:e024496-7da1-4e4a-9d5c-552d6ed54ff7", "row_index": 513, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e024496-7da1-4e4a-9d5c-552d6ed54ff7", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6671d83d-92f1-4828-ad5c-010ed7956cd5", "record_id": "flaws_cloudtrail:0000514:6671d83d-92f1-4828-ad5c-010ed7956cd5", "row_index": 514, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6671d83d-92f1-4828-ad5c-010ed7956cd5", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fedb528-7a78-4228-9d4c-d6603ac9a188", "record_id": "flaws_cloudtrail:0000515:3fedb528-7a78-4228-9d4c-d6603ac9a188", "row_index": 515, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fedb528-7a78-4228-9d4c-d6603ac9a188", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5203ab41-741a-4d3c-8095-231c7e073d4d", "record_id": "flaws_cloudtrail:0000516:5203ab41-741a-4d3c-8095-231c7e073d4d", "row_index": 516, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5203ab41-741a-4d3c-8095-231c7e073d4d", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "record_id": "flaws_cloudtrail:0000517:7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "row_index": 517, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9eb3ee-355f-4eeb-bdea-cfd77b1900fd", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996288f2-98e6-4805-a8a4-d889336a15", "record_id": "flaws_cloudtrail:0000518:996288f2-98e6-4805-a8a4-d889336a15", "row_index": 518, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996288f2-98e6-4805-a8a4-d889336a15", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11916-4fc7-442d-80c5-f529fa113203", "record_id": "flaws_cloudtrail:0000519:11916-4fc7-442d-80c5-f529fa113203", "row_index": 519, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11916-4fc7-442d-80c5-f529fa113203", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e462c9-e386-4bc6-bead-ad5558cbd9b6", "record_id": "flaws_cloudtrail:0000520:20e462c9-e386-4bc6-bead-ad5558cbd9b6", "row_index": 520, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e462c9-e386-4bc6-bead-ad5558cbd9b6", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0161edaa-79a8-403c-8241-229add4e5ba7", "record_id": "flaws_cloudtrail:0000521:0161edaa-79a8-403c-8241-229add4e5ba7", "row_index": 521, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0161edaa-79a8-403c-8241-229add4e5ba7", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399b93dc-731a-4c27-94e2-39454c8455c1", "record_id": "flaws_cloudtrail:0000522:399b93dc-731a-4c27-94e2-39454c8455c1", "row_index": 522, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399b93dc-731a-4c27-94e2-39454c8455c1", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbd54eb-e801-4fa8-b9e6-a674833dd", "record_id": "flaws_cloudtrail:0000523:bbbd54eb-e801-4fa8-b9e6-a674833dd", "row_index": 523, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbd54eb-e801-4fa8-b9e6-a674833dd", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "record_id": "flaws_cloudtrail:0000524:e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "row_index": 524, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ca8fbb-57d5-42c0-b174-8acd7eeca0ea", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620e3a77-b53a-4a09-a6bf-40da6f728ba1", "record_id": "flaws_cloudtrail:0000525:620e3a77-b53a-4a09-a6bf-40da6f728ba1", "row_index": 525, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620e3a77-b53a-4a09-a6bf-40da6f728ba1", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d0fef0d-c6c1-4361-925f-9529f37534f0", "record_id": "flaws_cloudtrail:0000526:1d0fef0d-c6c1-4361-925f-9529f37534f0", "row_index": 526, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d0fef0d-c6c1-4361-925f-9529f37534f0", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064b0d20-72a1-4978-af27-1cacbfe17c95", "record_id": "flaws_cloudtrail:0000527:064b0d20-72a1-4978-af27-1cacbfe17c95", "row_index": 527, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064b0d20-72a1-4978-af27-1cacbfe17c95", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067fa293-f944-4a5d-8d22-7db498715ad58", "record_id": "flaws_cloudtrail:0000528:067fa293-f944-4a5d-8d22-7db498715ad58", "row_index": 528, "timestamp": "2019-06-28T22:28:06Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067fa293-f944-4a5d-8d22-7db498715ad58", "eventTime": "2019-06-28T22:28:06Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc59d8d6-2567-4103-a561-fc764ede0585", "record_id": "flaws_cloudtrail:0000529:fc59d8d6-2567-4103-a561-fc764ede0585", "row_index": 529, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc59d8d6-2567-4103-a561-fc764ede0585", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490c4e63-f8db-41a1-b90c-b6a4c578e275", "record_id": "flaws_cloudtrail:0000530:490c4e63-f8db-41a1-b90c-b6a4c578e275", "row_index": 530, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490c4e63-f8db-41a1-b90c-b6a4c578e275", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a20572-df78-477c-baf1-1ebdccb9358d", "record_id": "flaws_cloudtrail:0000531:5a20572-df78-477c-baf1-1ebdccb9358d", "row_index": 531, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a20572-df78-477c-baf1-1ebdccb9358d", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6c487f-31bd-481d-b898-2f50cecb19ee", "record_id": "flaws_cloudtrail:0000532:ab6c487f-31bd-481d-b898-2f50cecb19ee", "row_index": 532, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6c487f-31bd-481d-b898-2f50cecb19ee", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "record_id": "flaws_cloudtrail:0000533:a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "row_index": 533, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b0eefa-a6bf-442b-8711-1da2ba97d10c", "record_id": "flaws_cloudtrail:0000534:16b0eefa-a6bf-442b-8711-1da2ba97d10c", "row_index": 534, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b0eefa-a6bf-442b-8711-1da2ba97d10c", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b292ea74-bb09-4a86-88f7-90bcfd456ad1", "record_id": "flaws_cloudtrail:0000535:b292ea74-bb09-4a86-88f7-90bcfd456ad1", "row_index": 535, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b292ea74-bb09-4a86-88f7-90bcfd456ad1", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "record_id": "flaws_cloudtrail:0000536:b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "row_index": 536, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d791881-6029-44f4-8743-28cf2cd8ebad", "record_id": "flaws_cloudtrail:0000537:2d791881-6029-44f4-8743-28cf2cd8ebad", "row_index": 537, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d791881-6029-44f4-8743-28cf2cd8ebad", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "record_id": "flaws_cloudtrail:0000538:8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "row_index": 538, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe8fe30b-2426-4332-a3a6-11844a054a6", "record_id": "flaws_cloudtrail:0000539:fe8fe30b-2426-4332-a3a6-11844a054a6", "row_index": 539, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe8fe30b-2426-4332-a3a6-11844a054a6", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0b3241d-f337-4331-a421-b1c61fd9dc4c", "record_id": "flaws_cloudtrail:0000540:f0b3241d-f337-4331-a421-b1c61fd9dc4c", "row_index": 540, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0b3241d-f337-4331-a421-b1c61fd9dc4c", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0603a691-9f18-44b2-8880-842439f177914", "record_id": "flaws_cloudtrail:0000541:0603a691-9f18-44b2-8880-842439f177914", "row_index": 541, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0603a691-9f18-44b2-8880-842439f177914", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614135d-9344-455d-8bf5-2eb91d1e29a6", "record_id": "flaws_cloudtrail:0000542:614135d-9344-455d-8bf5-2eb91d1e29a6", "row_index": 542, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614135d-9344-455d-8bf5-2eb91d1e29a6", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ad0020b-0972-4b99-a432-d490b108ece2", "record_id": "flaws_cloudtrail:0000543:6ad0020b-0972-4b99-a432-d490b108ece2", "row_index": 543, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ad0020b-0972-4b99-a432-d490b108ece2", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc59d8d6-2567-4103-a561-fc764ede0585", "record_id": "flaws_cloudtrail:0000544:fc59d8d6-2567-4103-a561-fc764ede0585", "row_index": 544, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc59d8d6-2567-4103-a561-fc764ede0585", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490c4e63-f8db-41a1-b90c-b6a4c578e275", "record_id": "flaws_cloudtrail:0000545:490c4e63-f8db-41a1-b90c-b6a4c578e275", "row_index": 545, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490c4e63-f8db-41a1-b90c-b6a4c578e275", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a20572-df78-477c-baf1-1ebdccb9358d", "record_id": "flaws_cloudtrail:0000546:5a20572-df78-477c-baf1-1ebdccb9358d", "row_index": 546, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a20572-df78-477c-baf1-1ebdccb9358d", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6c487f-31bd-481d-b898-2f50cecb19ee", "record_id": "flaws_cloudtrail:0000547:ab6c487f-31bd-481d-b898-2f50cecb19ee", "row_index": 547, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6c487f-31bd-481d-b898-2f50cecb19ee", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "record_id": "flaws_cloudtrail:0000548:a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "row_index": 548, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f0e997-2ab4-44de-96b5-0e3f3d1fc14e", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b0eefa-a6bf-442b-8711-1da2ba97d10c", "record_id": "flaws_cloudtrail:0000549:16b0eefa-a6bf-442b-8711-1da2ba97d10c", "row_index": 549, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b0eefa-a6bf-442b-8711-1da2ba97d10c", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b292ea74-bb09-4a86-88f7-90bcfd456ad1", "record_id": "flaws_cloudtrail:0000550:b292ea74-bb09-4a86-88f7-90bcfd456ad1", "row_index": 550, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b292ea74-bb09-4a86-88f7-90bcfd456ad1", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "record_id": "flaws_cloudtrail:0000551:b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "row_index": 551, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b582b52f-ac0f-4cd4-98f8-c8e9673d3b87", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d791881-6029-44f4-8743-28cf2cd8ebad", "record_id": "flaws_cloudtrail:0000552:2d791881-6029-44f4-8743-28cf2cd8ebad", "row_index": 552, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d791881-6029-44f4-8743-28cf2cd8ebad", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "record_id": "flaws_cloudtrail:0000553:8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "row_index": 553, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fb7e6a1-5a73-473f-9cab-a9cc28abda8f", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe8fe30b-2426-4332-a3a6-11844a054a6", "record_id": "flaws_cloudtrail:0000554:fe8fe30b-2426-4332-a3a6-11844a054a6", "row_index": 554, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe8fe30b-2426-4332-a3a6-11844a054a6", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0b3241d-f337-4331-a421-b1c61fd9dc4c", "record_id": "flaws_cloudtrail:0000555:f0b3241d-f337-4331-a421-b1c61fd9dc4c", "row_index": 555, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0b3241d-f337-4331-a421-b1c61fd9dc4c", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0603a691-9f18-44b2-8880-842439f177914", "record_id": "flaws_cloudtrail:0000556:0603a691-9f18-44b2-8880-842439f177914", "row_index": 556, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0603a691-9f18-44b2-8880-842439f177914", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614135d-9344-455d-8bf5-2eb91d1e29a6", "record_id": "flaws_cloudtrail:0000557:614135d-9344-455d-8bf5-2eb91d1e29a6", "row_index": 557, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614135d-9344-455d-8bf5-2eb91d1e29a6", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ad0020b-0972-4b99-a432-d490b108ece2", "record_id": "flaws_cloudtrail:0000558:6ad0020b-0972-4b99-a432-d490b108ece2", "row_index": 558, "timestamp": "2019-06-28T22:28:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ad0020b-0972-4b99-a432-d490b108ece2", "eventTime": "2019-06-28T22:28:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72ee425-2cef-40c0-8a8d-3a93b19570b7", "record_id": "flaws_cloudtrail:0000559:d72ee425-2cef-40c0-8a8d-3a93b19570b7", "row_index": 559, "timestamp": "2019-06-28T22:28:09Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72ee425-2cef-40c0-8a8d-3a93b19570b7", "eventTime": "2019-06-28T22:28:09Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72ee425-2cef-40c0-8a8d-3a93b19570b7", "record_id": "flaws_cloudtrail:0000560:d72ee425-2cef-40c0-8a8d-3a93b19570b7", "row_index": 560, "timestamp": "2019-06-28T22:28:09Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72ee425-2cef-40c0-8a8d-3a93b19570b7", "eventTime": "2019-06-28T22:28:09Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "record_id": "flaws_cloudtrail:0000561:6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "row_index": 561, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c76c118-c543-43f1-bb41-27e0e75ae06d", "record_id": "flaws_cloudtrail:0000562:3c76c118-c543-43f1-bb41-27e0e75ae06d", "row_index": 562, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c76c118-c543-43f1-bb41-27e0e75ae06d", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2817cfe4-575e-4e49-b619-866d219ea111", "record_id": "flaws_cloudtrail:0000563:2817cfe4-575e-4e49-b619-866d219ea111", "row_index": 563, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2817cfe4-575e-4e49-b619-866d219ea111", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "record_id": "flaws_cloudtrail:0000564:1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "row_index": 564, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bc28ee6-ad06-4839-a62a-478d7045f318", "record_id": "flaws_cloudtrail:0000565:9bc28ee6-ad06-4839-a62a-478d7045f318", "row_index": 565, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bc28ee6-ad06-4839-a62a-478d7045f318", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04fbd21d-246e-42be-adc4-6c3b3d651a9a", "record_id": "flaws_cloudtrail:0000566:04fbd21d-246e-42be-adc4-6c3b3d651a9a", "row_index": 566, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04fbd21d-246e-42be-adc4-6c3b3d651a9a", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06469ad7-de02-4090-95b6-336f2f520dd3", "record_id": "flaws_cloudtrail:0000567:06469ad7-de02-4090-95b6-336f2f520dd3", "row_index": 567, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06469ad7-de02-4090-95b6-336f2f520dd3", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "record_id": "flaws_cloudtrail:0000568:ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "row_index": 568, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b110dd-3b3c-4cca-a77c-1e31f5171647", "record_id": "flaws_cloudtrail:0000569:77b110dd-3b3c-4cca-a77c-1e31f5171647", "row_index": 569, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b110dd-3b3c-4cca-a77c-1e31f5171647", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e378706-8136-463d-80f2-a776e5f17a6b", "record_id": "flaws_cloudtrail:0000570:e7e378706-8136-463d-80f2-a776e5f17a6b", "row_index": 570, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e378706-8136-463d-80f2-a776e5f17a6b", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "record_id": "flaws_cloudtrail:0000571:1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "row_index": 571, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fb0b81-834f-4965-bc65-d2b7274dc16a", "record_id": "flaws_cloudtrail:0000572:91fb0b81-834f-4965-bc65-d2b7274dc16a", "row_index": 572, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fb0b81-834f-4965-bc65-d2b7274dc16a", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3fabf0-49af-4530-8a24-a71acbd1a956", "record_id": "flaws_cloudtrail:0000573:8d3fabf0-49af-4530-8a24-a71acbd1a956", "row_index": 573, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3fabf0-49af-4530-8a24-a71acbd1a956", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "record_id": "flaws_cloudtrail:0000574:9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "row_index": 574, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a6d2f17-1c1f-4281-9a37-febe74d6550e", "record_id": "flaws_cloudtrail:0000575:5a6d2f17-1c1f-4281-9a37-febe74d6550e", "row_index": 575, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a6d2f17-1c1f-4281-9a37-febe74d6550e", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb00e8ee-b188-4c9a-a105-fb32c55f590e", "record_id": "flaws_cloudtrail:0000576:eb00e8ee-b188-4c9a-a105-fb32c55f590e", "row_index": 576, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb00e8ee-b188-4c9a-a105-fb32c55f590e", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "record_id": "flaws_cloudtrail:0000577:6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "row_index": 577, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6226ef66-4492-4e46-bdc0-e7a72a29bcdb", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c76c118-c543-43f1-bb41-27e0e75ae06d", "record_id": "flaws_cloudtrail:0000578:3c76c118-c543-43f1-bb41-27e0e75ae06d", "row_index": 578, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c76c118-c543-43f1-bb41-27e0e75ae06d", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2817cfe4-575e-4e49-b619-866d219ea111", "record_id": "flaws_cloudtrail:0000579:2817cfe4-575e-4e49-b619-866d219ea111", "row_index": 579, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2817cfe4-575e-4e49-b619-866d219ea111", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "record_id": "flaws_cloudtrail:0000580:1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "row_index": 580, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed5aeac-8b5a-4da2-817d-916b9ba1dd51", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bc28ee6-ad06-4839-a62a-478d7045f318", "record_id": "flaws_cloudtrail:0000581:9bc28ee6-ad06-4839-a62a-478d7045f318", "row_index": 581, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bc28ee6-ad06-4839-a62a-478d7045f318", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04fbd21d-246e-42be-adc4-6c3b3d651a9a", "record_id": "flaws_cloudtrail:0000582:04fbd21d-246e-42be-adc4-6c3b3d651a9a", "row_index": 582, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04fbd21d-246e-42be-adc4-6c3b3d651a9a", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06469ad7-de02-4090-95b6-336f2f520dd3", "record_id": "flaws_cloudtrail:0000583:06469ad7-de02-4090-95b6-336f2f520dd3", "row_index": 583, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06469ad7-de02-4090-95b6-336f2f520dd3", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "record_id": "flaws_cloudtrail:0000584:ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "row_index": 584, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2e66d1-eee3-4b72-87ad-5a5a9099af73", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b110dd-3b3c-4cca-a77c-1e31f5171647", "record_id": "flaws_cloudtrail:0000585:77b110dd-3b3c-4cca-a77c-1e31f5171647", "row_index": 585, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b110dd-3b3c-4cca-a77c-1e31f5171647", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e378706-8136-463d-80f2-a776e5f17a6b", "record_id": "flaws_cloudtrail:0000586:e7e378706-8136-463d-80f2-a776e5f17a6b", "row_index": 586, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e378706-8136-463d-80f2-a776e5f17a6b", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "record_id": "flaws_cloudtrail:0000587:1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "row_index": 587, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d53fbe5-770a-41a7-8bfb-d6704a9ca91f", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fb0b81-834f-4965-bc65-d2b7274dc16a", "record_id": "flaws_cloudtrail:0000588:91fb0b81-834f-4965-bc65-d2b7274dc16a", "row_index": 588, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fb0b81-834f-4965-bc65-d2b7274dc16a", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3fabf0-49af-4530-8a24-a71acbd1a956", "record_id": "flaws_cloudtrail:0000589:8d3fabf0-49af-4530-8a24-a71acbd1a956", "row_index": 589, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3fabf0-49af-4530-8a24-a71acbd1a956", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "record_id": "flaws_cloudtrail:0000590:9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "row_index": 590, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9df3f0-6292-4581-bd2e-b9ccea7065dc", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a6d2f17-1c1f-4281-9a37-febe74d6550e", "record_id": "flaws_cloudtrail:0000591:5a6d2f17-1c1f-4281-9a37-febe74d6550e", "row_index": 591, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a6d2f17-1c1f-4281-9a37-febe74d6550e", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb00e8ee-b188-4c9a-a105-fb32c55f590e", "record_id": "flaws_cloudtrail:0000592:eb00e8ee-b188-4c9a-a105-fb32c55f590e", "row_index": 592, "timestamp": "2019-06-28T22:28:11Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb00e8ee-b188-4c9a-a105-fb32c55f590e", "eventTime": "2019-06-28T22:28:11Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "record_id": "flaws_cloudtrail:0000593:c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "row_index": 593, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1166b6-bd94-46db-9a9e-3b062c03b71b", "record_id": "flaws_cloudtrail:0000594:da1166b6-bd94-46db-9a9e-3b062c03b71b", "row_index": 594, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1166b6-bd94-46db-9a9e-3b062c03b71b", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d81c31b6-fc72-493e-831c-04ea548d32d0", "record_id": "flaws_cloudtrail:0000595:d81c31b6-fc72-493e-831c-04ea548d32d0", "row_index": 595, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d81c31b6-fc72-493e-831c-04ea548d32d0", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0ffffc1-c521-49bb-91e7-667737e3e28", "record_id": "flaws_cloudtrail:0000596:a0ffffc1-c521-49bb-91e7-667737e3e28", "row_index": 596, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0ffffc1-c521-49bb-91e7-667737e3e28", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62e92c2d-142a-4008-9ffb-b45d95548924", "record_id": "flaws_cloudtrail:0000597:62e92c2d-142a-4008-9ffb-b45d95548924", "row_index": 597, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62e92c2d-142a-4008-9ffb-b45d95548924", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8152a2b-3ca3-486a-bf31-db07e614319d6", "record_id": "flaws_cloudtrail:0000598:d8152a2b-3ca3-486a-bf31-db07e614319d6", "row_index": 598, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8152a2b-3ca3-486a-bf31-db07e614319d6", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83c0f1bc-3a08-49bb-ac6d-4a13f823d21f", "record_id": "flaws_cloudtrail:0000599:83c0f1bc-3a08-49bb-ac6d-4a13f823d21f", "row_index": 599, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83c0f1bc-3a08-49bb-ac6d-4a13f823d21f", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a27289-cde8-407a-99d9-5086f3d8e5be", "record_id": "flaws_cloudtrail:0000600:5a27289-cde8-407a-99d9-5086f3d8e5be", "row_index": 600, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a27289-cde8-407a-99d9-5086f3d8e5be", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a7f6f9a-20da-47f4-809d-23a718af3d10", "record_id": "flaws_cloudtrail:0000601:7a7f6f9a-20da-47f4-809d-23a718af3d10", "row_index": 601, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a7f6f9a-20da-47f4-809d-23a718af3d10", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34a0e11-716b-43bf-b654-a8237a329e36", "record_id": "flaws_cloudtrail:0000602:f34a0e11-716b-43bf-b654-a8237a329e36", "row_index": 602, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34a0e11-716b-43bf-b654-a8237a329e36", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b13dae-59a4-4993-ab4e-2383f0e2ea3a", "record_id": "flaws_cloudtrail:0000603:a4b13dae-59a4-4993-ab4e-2383f0e2ea3a", "row_index": 603, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b13dae-59a4-4993-ab4e-2383f0e2ea3a", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e990143b-9610-4dff-97b7-d8359c1e1bfc", "record_id": "flaws_cloudtrail:0000604:5e990143b-9610-4dff-97b7-d8359c1e1bfc", "row_index": 604, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e990143b-9610-4dff-97b7-d8359c1e1bfc", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbafb060-6614-4870-a120-6f32e2778bb7", "record_id": "flaws_cloudtrail:0000605:cbafb060-6614-4870-a120-6f32e2778bb7", "row_index": 605, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbafb060-6614-4870-a120-6f32e2778bb7", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f6e51a8-bb06-4f7d-a247-55217c3fc", "record_id": "flaws_cloudtrail:0000606:8f6e51a8-bb06-4f7d-a247-55217c3fc", "row_index": 606, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f6e51a8-bb06-4f7d-a247-55217c3fc", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4e3175c-64d2-4c70-9e27-0681fded0102", "record_id": "flaws_cloudtrail:0000607:d4e3175c-64d2-4c70-9e27-0681fded0102", "row_index": 607, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4e3175c-64d2-4c70-9e27-0681fded0102", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee2689f7-0327-42b1-aa43-29a1dde719e7", "record_id": "flaws_cloudtrail:0000608:ee2689f7-0327-42b1-aa43-29a1dde719e7", "row_index": 608, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee2689f7-0327-42b1-aa43-29a1dde719e7", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "record_id": "flaws_cloudtrail:0000609:c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "row_index": 609, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c28d8a47-0c0f-40e0-8f21-1bd65a072056c", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1166b6-bd94-46db-9a9e-3b062c03b71b", "record_id": "flaws_cloudtrail:0000610:da1166b6-bd94-46db-9a9e-3b062c03b71b", "row_index": 610, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1166b6-bd94-46db-9a9e-3b062c03b71b", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d81c31b6-fc72-493e-831c-04ea548d32d0", "record_id": "flaws_cloudtrail:0000611:d81c31b6-fc72-493e-831c-04ea548d32d0", "row_index": 611, "timestamp": "2019-06-28T22:28:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d81c31b6-fc72-493e-831c-04ea548d32d0", "eventTime": "2019-06-28T22:28:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}