Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3d5f75-ca47-44e4-91fb-ea4553c2e5e8", "record_id": "flaws_cloudtrail:0000000:2e3d5f75-ca47-44e4-91fb-ea4553c2e5e8", "row_index": 0, "timestamp": "2019-08-02T17:45:12Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3d5f75-ca47-44e4-91fb-ea4553c2e5e8", "eventTime": "2019-08-02T17:45:12Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a284c6-01b0-4c00-a150-4c6cca879ce2", "record_id": "flaws_cloudtrail:0000001:d6a284c6-01b0-4c00-a150-4c6cca879ce2", "row_index": 1, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a284c6-01b0-4c00-a150-4c6cca879ce2", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db955ef6-03d6-4009-bad5-cc101e104e2b", "record_id": "flaws_cloudtrail:0000002:db955ef6-03d6-4009-bad5-cc101e104e2b", "row_index": 2, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db955ef6-03d6-4009-bad5-cc101e104e2b", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d43f514-9c4e-4a3c-949f-b008a5d240c6", "record_id": "flaws_cloudtrail:0000003:9d43f514-9c4e-4a3c-949f-b008a5d240c6", "row_index": 3, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d43f514-9c4e-4a3c-949f-b008a5d240c6", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56041-e6fc-4e47-a381-d02b3dd0f1bd", "record_id": "flaws_cloudtrail:0000004:56041-e6fc-4e47-a381-d02b3dd0f1bd", "row_index": 4, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56041-e6fc-4e47-a381-d02b3dd0f1bd", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0b1711-a94c-445e-85c6-4c054c117e60", "record_id": "flaws_cloudtrail:0000005:6d0b1711-a94c-445e-85c6-4c054c117e60", "row_index": 5, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0b1711-a94c-445e-85c6-4c054c117e60", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b30c71c-fa94-4d0c-8081-1d67287a9b", "record_id": "flaws_cloudtrail:0000006:1b30c71c-fa94-4d0c-8081-1d67287a9b", "row_index": 6, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b30c71c-fa94-4d0c-8081-1d67287a9b", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "record_id": "flaws_cloudtrail:0000007:c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "row_index": 7, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "record_id": "flaws_cloudtrail:0000008:6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "row_index": 8, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ed36a5-4be8-4184-89ba-662ee48dbcbb", "record_id": "flaws_cloudtrail:0000009:69ed36a5-4be8-4184-89ba-662ee48dbcbb", "row_index": 9, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ed36a5-4be8-4184-89ba-662ee48dbcbb", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c601c233-b87d-454e-9727-02690c1f57", "record_id": "flaws_cloudtrail:0000010:c601c233-b87d-454e-9727-02690c1f57", "row_index": 10, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c601c233-b87d-454e-9727-02690c1f57", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a284c6-01b0-4c00-a150-4c6cca879ce2", "record_id": "flaws_cloudtrail:0000011:d6a284c6-01b0-4c00-a150-4c6cca879ce2", "row_index": 11, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a284c6-01b0-4c00-a150-4c6cca879ce2", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db955ef6-03d6-4009-bad5-cc101e104e2b", "record_id": "flaws_cloudtrail:0000012:db955ef6-03d6-4009-bad5-cc101e104e2b", "row_index": 12, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db955ef6-03d6-4009-bad5-cc101e104e2b", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d43f514-9c4e-4a3c-949f-b008a5d240c6", "record_id": "flaws_cloudtrail:0000013:9d43f514-9c4e-4a3c-949f-b008a5d240c6", "row_index": 13, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d43f514-9c4e-4a3c-949f-b008a5d240c6", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56041-e6fc-4e47-a381-d02b3dd0f1bd", "record_id": "flaws_cloudtrail:0000014:56041-e6fc-4e47-a381-d02b3dd0f1bd", "row_index": 14, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56041-e6fc-4e47-a381-d02b3dd0f1bd", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0b1711-a94c-445e-85c6-4c054c117e60", "record_id": "flaws_cloudtrail:0000015:6d0b1711-a94c-445e-85c6-4c054c117e60", "row_index": 15, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0b1711-a94c-445e-85c6-4c054c117e60", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b30c71c-fa94-4d0c-8081-1d67287a9b", "record_id": "flaws_cloudtrail:0000016:1b30c71c-fa94-4d0c-8081-1d67287a9b", "row_index": 16, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b30c71c-fa94-4d0c-8081-1d67287a9b", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "record_id": "flaws_cloudtrail:0000017:c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "row_index": 17, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c27d9285-0b41-4a18-a2ca-8ed33c0f28f7", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "record_id": "flaws_cloudtrail:0000018:6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "row_index": 18, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d10f928-aa9c-4ac3-9c51-ac72e23ba1ea", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ed36a5-4be8-4184-89ba-662ee48dbcbb", "record_id": "flaws_cloudtrail:0000019:69ed36a5-4be8-4184-89ba-662ee48dbcbb", "row_index": 19, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ed36a5-4be8-4184-89ba-662ee48dbcbb", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c601c233-b87d-454e-9727-02690c1f57", "record_id": "flaws_cloudtrail:0000020:c601c233-b87d-454e-9727-02690c1f57", "row_index": 20, "timestamp": "2019-08-02T17:45:13Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c601c233-b87d-454e-9727-02690c1f57", "eventTime": "2019-08-02T17:45:13Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "record_id": "flaws_cloudtrail:0000021:4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "row_index": 21, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99ddc2d-1f50-4e04-8932-1990d35a880c", "record_id": "flaws_cloudtrail:0000022:c99ddc2d-1f50-4e04-8932-1990d35a880c", "row_index": 22, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99ddc2d-1f50-4e04-8932-1990d35a880c", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95e62de-50d2-4f51-8a9b-22c0b772ba82", "record_id": "flaws_cloudtrail:0000023:d95e62de-50d2-4f51-8a9b-22c0b772ba82", "row_index": 23, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95e62de-50d2-4f51-8a9b-22c0b772ba82", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3375f7-e032-49f1-ac06-eaa489ce97f8", "record_id": "flaws_cloudtrail:0000024:df3375f7-e032-49f1-ac06-eaa489ce97f8", "row_index": 24, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3375f7-e032-49f1-ac06-eaa489ce97f8", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1170d827-68d5-4b19-abf0-e32fc715e78c", "record_id": "flaws_cloudtrail:0000025:1170d827-68d5-4b19-abf0-e32fc715e78c", "row_index": 25, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1170d827-68d5-4b19-abf0-e32fc715e78c", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3302ead0-f160-4302-9d3d-44efa65b63a3", "record_id": "flaws_cloudtrail:0000026:3302ead0-f160-4302-9d3d-44efa65b63a3", "row_index": 26, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3302ead0-f160-4302-9d3d-44efa65b63a3", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "record_id": "flaws_cloudtrail:0000027:4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "row_index": 27, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d610eb6-d7b3-4051-8d1f-ae8914c86ece", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99ddc2d-1f50-4e04-8932-1990d35a880c", "record_id": "flaws_cloudtrail:0000028:c99ddc2d-1f50-4e04-8932-1990d35a880c", "row_index": 28, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99ddc2d-1f50-4e04-8932-1990d35a880c", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95e62de-50d2-4f51-8a9b-22c0b772ba82", "record_id": "flaws_cloudtrail:0000029:d95e62de-50d2-4f51-8a9b-22c0b772ba82", "row_index": 29, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95e62de-50d2-4f51-8a9b-22c0b772ba82", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3375f7-e032-49f1-ac06-eaa489ce97f8", "record_id": "flaws_cloudtrail:0000030:df3375f7-e032-49f1-ac06-eaa489ce97f8", "row_index": 30, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3375f7-e032-49f1-ac06-eaa489ce97f8", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1170d827-68d5-4b19-abf0-e32fc715e78c", "record_id": "flaws_cloudtrail:0000031:1170d827-68d5-4b19-abf0-e32fc715e78c", "row_index": 31, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1170d827-68d5-4b19-abf0-e32fc715e78c", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3302ead0-f160-4302-9d3d-44efa65b63a3", "record_id": "flaws_cloudtrail:0000032:3302ead0-f160-4302-9d3d-44efa65b63a3", "row_index": 32, "timestamp": "2019-08-02T17:45:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3302ead0-f160-4302-9d3d-44efa65b63a3", "eventTime": "2019-08-02T17:45:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "record_id": "flaws_cloudtrail:0000033:bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "row_index": 33, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "776eb88c-5df2-459a-ab98-424aec5c97b7", "record_id": "flaws_cloudtrail:0000034:776eb88c-5df2-459a-ab98-424aec5c97b7", "row_index": 34, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "776eb88c-5df2-459a-ab98-424aec5c97b7", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a65f9fa-1490-49ab-b997-9fd4134becf9", "record_id": "flaws_cloudtrail:0000035:6a65f9fa-1490-49ab-b997-9fd4134becf9", "row_index": 35, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a65f9fa-1490-49ab-b997-9fd4134becf9", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afa54e7-b1fe-42df-982f-887c355461be", "record_id": "flaws_cloudtrail:0000036:8afa54e7-b1fe-42df-982f-887c355461be", "row_index": 36, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afa54e7-b1fe-42df-982f-887c355461be", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f54e8e-f375-43be-9456-2e47795c8d", "record_id": "flaws_cloudtrail:0000037:e5f54e8e-f375-43be-9456-2e47795c8d", "row_index": 37, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f54e8e-f375-43be-9456-2e47795c8d", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "record_id": "flaws_cloudtrail:0000038:a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "row_index": 38, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af7ec54-7a8e-44da-9860-6156a23cefaa", "record_id": "flaws_cloudtrail:0000039:7af7ec54-7a8e-44da-9860-6156a23cefaa", "row_index": 39, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af7ec54-7a8e-44da-9860-6156a23cefaa", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "135833e-2799-4abd-b2ef-a8a7b6b017ea", "record_id": "flaws_cloudtrail:0000040:135833e-2799-4abd-b2ef-a8a7b6b017ea", "row_index": 40, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "135833e-2799-4abd-b2ef-a8a7b6b017ea", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a49c596-335d-448b-9882-cff74b80cdfd", "record_id": "flaws_cloudtrail:0000041:2a49c596-335d-448b-9882-cff74b80cdfd", "row_index": 41, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a49c596-335d-448b-9882-cff74b80cdfd", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33a5765a-2658-4d51-bb66-f52ed6d798ed", "record_id": "flaws_cloudtrail:0000042:33a5765a-2658-4d51-bb66-f52ed6d798ed", "row_index": 42, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33a5765a-2658-4d51-bb66-f52ed6d798ed", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "record_id": "flaws_cloudtrail:0000043:481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "row_index": 43, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dd3a61-6a70-4600-801e-7c46ccee03ec", "record_id": "flaws_cloudtrail:0000044:c7dd3a61-6a70-4600-801e-7c46ccee03ec", "row_index": 44, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dd3a61-6a70-4600-801e-7c46ccee03ec", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "record_id": "flaws_cloudtrail:0000045:c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "row_index": 45, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "record_id": "flaws_cloudtrail:0000046:fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "row_index": 46, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecaeb90-a370-4496-bb26-7bbba605be01", "record_id": "flaws_cloudtrail:0000047:1ecaeb90-a370-4496-bb26-7bbba605be01", "row_index": 47, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecaeb90-a370-4496-bb26-7bbba605be01", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "record_id": "flaws_cloudtrail:0000048:37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "row_index": 48, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "record_id": "flaws_cloudtrail:0000049:bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "row_index": 49, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6e39d6-5083-41d5-8e8b-6bdfe7ced4c1", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "776eb88c-5df2-459a-ab98-424aec5c97b7", "record_id": "flaws_cloudtrail:0000050:776eb88c-5df2-459a-ab98-424aec5c97b7", "row_index": 50, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "776eb88c-5df2-459a-ab98-424aec5c97b7", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a65f9fa-1490-49ab-b997-9fd4134becf9", "record_id": "flaws_cloudtrail:0000051:6a65f9fa-1490-49ab-b997-9fd4134becf9", "row_index": 51, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a65f9fa-1490-49ab-b997-9fd4134becf9", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afa54e7-b1fe-42df-982f-887c355461be", "record_id": "flaws_cloudtrail:0000052:8afa54e7-b1fe-42df-982f-887c355461be", "row_index": 52, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afa54e7-b1fe-42df-982f-887c355461be", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f54e8e-f375-43be-9456-2e47795c8d", "record_id": "flaws_cloudtrail:0000053:e5f54e8e-f375-43be-9456-2e47795c8d", "row_index": 53, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f54e8e-f375-43be-9456-2e47795c8d", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "record_id": "flaws_cloudtrail:0000054:a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "row_index": 54, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e03b77-c1f8-4c64-ae8e-911ed1c3a213", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af7ec54-7a8e-44da-9860-6156a23cefaa", "record_id": "flaws_cloudtrail:0000055:7af7ec54-7a8e-44da-9860-6156a23cefaa", "row_index": 55, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af7ec54-7a8e-44da-9860-6156a23cefaa", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "135833e-2799-4abd-b2ef-a8a7b6b017ea", "record_id": "flaws_cloudtrail:0000056:135833e-2799-4abd-b2ef-a8a7b6b017ea", "row_index": 56, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "135833e-2799-4abd-b2ef-a8a7b6b017ea", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a49c596-335d-448b-9882-cff74b80cdfd", "record_id": "flaws_cloudtrail:0000057:2a49c596-335d-448b-9882-cff74b80cdfd", "row_index": 57, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a49c596-335d-448b-9882-cff74b80cdfd", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33a5765a-2658-4d51-bb66-f52ed6d798ed", "record_id": "flaws_cloudtrail:0000058:33a5765a-2658-4d51-bb66-f52ed6d798ed", "row_index": 58, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33a5765a-2658-4d51-bb66-f52ed6d798ed", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "record_id": "flaws_cloudtrail:0000059:481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "row_index": 59, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481c31ed-7e9e-41a5-8d1a-fc55e3223d56", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dd3a61-6a70-4600-801e-7c46ccee03ec", "record_id": "flaws_cloudtrail:0000060:c7dd3a61-6a70-4600-801e-7c46ccee03ec", "row_index": 60, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dd3a61-6a70-4600-801e-7c46ccee03ec", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "record_id": "flaws_cloudtrail:0000061:c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "row_index": 61, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2cb7a0f-d839-40db-9dae-fc00ba9298b7", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "record_id": "flaws_cloudtrail:0000062:fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "row_index": 62, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaa1ed6-7127-4f00-aaac-d27a860ce9f8", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecaeb90-a370-4496-bb26-7bbba605be01", "record_id": "flaws_cloudtrail:0000063:1ecaeb90-a370-4496-bb26-7bbba605be01", "row_index": 63, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecaeb90-a370-4496-bb26-7bbba605be01", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "record_id": "flaws_cloudtrail:0000064:37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "row_index": 64, "timestamp": "2019-08-02T17:45:17Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b52c12-1c72-49b1-8323-0c7cfaf6b5a9", "eventTime": "2019-08-02T17:45:17Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "record_id": "flaws_cloudtrail:0000065:25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "row_index": 65, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0133f9b-318f-401b-8e33-ad418339e3", "record_id": "flaws_cloudtrail:0000066:c0133f9b-318f-401b-8e33-ad418339e3", "row_index": 66, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0133f9b-318f-401b-8e33-ad418339e3", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "record_id": "flaws_cloudtrail:0000067:4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "row_index": 67, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6125e70d-4b58-4d52-aa2d-8ceff7386cab", "record_id": "flaws_cloudtrail:0000068:6125e70d-4b58-4d52-aa2d-8ceff7386cab", "row_index": 68, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6125e70d-4b58-4d52-aa2d-8ceff7386cab", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078074abf-ec55-4b90-852d-7aea52cb720f", "record_id": "flaws_cloudtrail:0000069:078074abf-ec55-4b90-852d-7aea52cb720f", "row_index": 69, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078074abf-ec55-4b90-852d-7aea52cb720f", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a653491-c566-45db-9481-2c0646f87edb", "record_id": "flaws_cloudtrail:0000070:a8a653491-c566-45db-9481-2c0646f87edb", "row_index": 70, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a653491-c566-45db-9481-2c0646f87edb", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c7f67e-33c1-4026-983a-dfaa21236593", "record_id": "flaws_cloudtrail:0000071:93c7f67e-33c1-4026-983a-dfaa21236593", "row_index": 71, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c7f67e-33c1-4026-983a-dfaa21236593", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80c4da0-eac5-4657-9b1c-abab91532a39", "record_id": "flaws_cloudtrail:0000072:b80c4da0-eac5-4657-9b1c-abab91532a39", "row_index": 72, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80c4da0-eac5-4657-9b1c-abab91532a39", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3f6480-85a5-4307-a44e-387967efe754", "record_id": "flaws_cloudtrail:0000073:ab3f6480-85a5-4307-a44e-387967efe754", "row_index": 73, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3f6480-85a5-4307-a44e-387967efe754", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c15121-0b6c-4990-bed7-c5ad93cef41d", "record_id": "flaws_cloudtrail:0000074:0c15121-0b6c-4990-bed7-c5ad93cef41d", "row_index": 74, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c15121-0b6c-4990-bed7-c5ad93cef41d", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "record_id": "flaws_cloudtrail:0000075:8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "row_index": 75, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc73e13-0b5f-4457-a616-3203a8e58359", "record_id": "flaws_cloudtrail:0000076:4fc73e13-0b5f-4457-a616-3203a8e58359", "row_index": 76, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc73e13-0b5f-4457-a616-3203a8e58359", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e36fa83c-6336-439f-989e-9da8fb100898", "record_id": "flaws_cloudtrail:0000077:e36fa83c-6336-439f-989e-9da8fb100898", "row_index": 77, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e36fa83c-6336-439f-989e-9da8fb100898", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31827dd-1a5f-4e51-995c-67a20e897b0d", "record_id": "flaws_cloudtrail:0000078:31827dd-1a5f-4e51-995c-67a20e897b0d", "row_index": 78, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31827dd-1a5f-4e51-995c-67a20e897b0d", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94a79630-3c21-4bd2-b618-c2d8191e9939", "record_id": "flaws_cloudtrail:0000079:94a79630-3c21-4bd2-b618-c2d8191e9939", "row_index": 79, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94a79630-3c21-4bd2-b618-c2d8191e9939", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032bc97c-11fe-4097-a7b0-2a6e767127b8", "record_id": "flaws_cloudtrail:0000080:032bc97c-11fe-4097-a7b0-2a6e767127b8", "row_index": 80, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032bc97c-11fe-4097-a7b0-2a6e767127b8", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "record_id": "flaws_cloudtrail:0000081:25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "row_index": 81, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25b3ebd0-78ea-4fd2-ad90-511be7cc19a6", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0133f9b-318f-401b-8e33-ad418339e3", "record_id": "flaws_cloudtrail:0000082:c0133f9b-318f-401b-8e33-ad418339e3", "row_index": 82, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0133f9b-318f-401b-8e33-ad418339e3", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "record_id": "flaws_cloudtrail:0000083:4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "row_index": 83, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de29c9b-d909-47d9-a05e-55efe1c8c0a6", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6125e70d-4b58-4d52-aa2d-8ceff7386cab", "record_id": "flaws_cloudtrail:0000084:6125e70d-4b58-4d52-aa2d-8ceff7386cab", "row_index": 84, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6125e70d-4b58-4d52-aa2d-8ceff7386cab", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078074abf-ec55-4b90-852d-7aea52cb720f", "record_id": "flaws_cloudtrail:0000085:078074abf-ec55-4b90-852d-7aea52cb720f", "row_index": 85, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078074abf-ec55-4b90-852d-7aea52cb720f", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a653491-c566-45db-9481-2c0646f87edb", "record_id": "flaws_cloudtrail:0000086:a8a653491-c566-45db-9481-2c0646f87edb", "row_index": 86, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a653491-c566-45db-9481-2c0646f87edb", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c7f67e-33c1-4026-983a-dfaa21236593", "record_id": "flaws_cloudtrail:0000087:93c7f67e-33c1-4026-983a-dfaa21236593", "row_index": 87, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c7f67e-33c1-4026-983a-dfaa21236593", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80c4da0-eac5-4657-9b1c-abab91532a39", "record_id": "flaws_cloudtrail:0000088:b80c4da0-eac5-4657-9b1c-abab91532a39", "row_index": 88, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80c4da0-eac5-4657-9b1c-abab91532a39", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3f6480-85a5-4307-a44e-387967efe754", "record_id": "flaws_cloudtrail:0000089:ab3f6480-85a5-4307-a44e-387967efe754", "row_index": 89, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3f6480-85a5-4307-a44e-387967efe754", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c15121-0b6c-4990-bed7-c5ad93cef41d", "record_id": "flaws_cloudtrail:0000090:0c15121-0b6c-4990-bed7-c5ad93cef41d", "row_index": 90, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c15121-0b6c-4990-bed7-c5ad93cef41d", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "record_id": "flaws_cloudtrail:0000091:8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "row_index": 91, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f0a7c8a-9a06-4f7c-846e-590c500ce33a", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc73e13-0b5f-4457-a616-3203a8e58359", "record_id": "flaws_cloudtrail:0000092:4fc73e13-0b5f-4457-a616-3203a8e58359", "row_index": 92, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc73e13-0b5f-4457-a616-3203a8e58359", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e36fa83c-6336-439f-989e-9da8fb100898", "record_id": "flaws_cloudtrail:0000093:e36fa83c-6336-439f-989e-9da8fb100898", "row_index": 93, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e36fa83c-6336-439f-989e-9da8fb100898", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31827dd-1a5f-4e51-995c-67a20e897b0d", "record_id": "flaws_cloudtrail:0000094:31827dd-1a5f-4e51-995c-67a20e897b0d", "row_index": 94, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31827dd-1a5f-4e51-995c-67a20e897b0d", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94a79630-3c21-4bd2-b618-c2d8191e9939", "record_id": "flaws_cloudtrail:0000095:94a79630-3c21-4bd2-b618-c2d8191e9939", "row_index": 95, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94a79630-3c21-4bd2-b618-c2d8191e9939", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032bc97c-11fe-4097-a7b0-2a6e767127b8", "record_id": "flaws_cloudtrail:0000096:032bc97c-11fe-4097-a7b0-2a6e767127b8", "row_index": 96, "timestamp": "2019-08-02T17:45:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032bc97c-11fe-4097-a7b0-2a6e767127b8", "eventTime": "2019-08-02T17:45:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591ab562-1b58-4c80-b5d4-05c5468f331c", "record_id": "flaws_cloudtrail:0000097:591ab562-1b58-4c80-b5d4-05c5468f331c", "row_index": 97, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591ab562-1b58-4c80-b5d4-05c5468f331c", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "record_id": "flaws_cloudtrail:0000098:2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "row_index": 98, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "record_id": "flaws_cloudtrail:0000099:9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "row_index": 99, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5d1b814-0781-4f80-9b60-99638ffab", "record_id": "flaws_cloudtrail:0000100:b5d1b814-0781-4f80-9b60-99638ffab", "row_index": 100, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5d1b814-0781-4f80-9b60-99638ffab", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be26487b-f647-40be-8452-60ae418b97ca", "record_id": "flaws_cloudtrail:0000101:be26487b-f647-40be-8452-60ae418b97ca", "row_index": 101, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be26487b-f647-40be-8452-60ae418b97ca", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551ff097-5d24-4fef-943f-886755382c00", "record_id": "flaws_cloudtrail:0000102:551ff097-5d24-4fef-943f-886755382c00", "row_index": 102, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551ff097-5d24-4fef-943f-886755382c00", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "record_id": "flaws_cloudtrail:0000103:c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "row_index": 103, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18780d4-fb20-4cad-9eb0-197c4783eeee", "record_id": "flaws_cloudtrail:0000104:18780d4-fb20-4cad-9eb0-197c4783eeee", "row_index": 104, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18780d4-fb20-4cad-9eb0-197c4783eeee", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "record_id": "flaws_cloudtrail:0000105:0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "row_index": 105, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6452dd-22db-4a2e-b59d-f6aaeb754126", "record_id": "flaws_cloudtrail:0000106:0a6452dd-22db-4a2e-b59d-f6aaeb754126", "row_index": 106, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6452dd-22db-4a2e-b59d-f6aaeb754126", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "record_id": "flaws_cloudtrail:0000107:a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "row_index": 107, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de2969db-0557-4005-8a83-ce926d2d67d1", "record_id": "flaws_cloudtrail:0000108:de2969db-0557-4005-8a83-ce926d2d67d1", "row_index": 108, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de2969db-0557-4005-8a83-ce926d2d67d1", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "record_id": "flaws_cloudtrail:0000109:5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "row_index": 109, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f290786e-c809-4e42-b155-9a4a9483f20f", "record_id": "flaws_cloudtrail:0000110:1f290786e-c809-4e42-b155-9a4a9483f20f", "row_index": 110, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f290786e-c809-4e42-b155-9a4a9483f20f", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "record_id": "flaws_cloudtrail:0000111:b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "row_index": 111, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd959ba-9884-41d7-b3e0-35afb41798e", "record_id": "flaws_cloudtrail:0000112:3cd959ba-9884-41d7-b3e0-35afb41798e", "row_index": 112, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd959ba-9884-41d7-b3e0-35afb41798e", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591ab562-1b58-4c80-b5d4-05c5468f331c", "record_id": "flaws_cloudtrail:0000113:591ab562-1b58-4c80-b5d4-05c5468f331c", "row_index": 113, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591ab562-1b58-4c80-b5d4-05c5468f331c", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "record_id": "flaws_cloudtrail:0000114:2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "row_index": 114, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aaa4024-5142-4081-a6e6-66fdbdbf9fda", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "record_id": "flaws_cloudtrail:0000115:9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "row_index": 115, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fdc07bf-3c22-4de1-b58a-41757fcc5cf6", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5d1b814-0781-4f80-9b60-99638ffab", "record_id": "flaws_cloudtrail:0000116:b5d1b814-0781-4f80-9b60-99638ffab", "row_index": 116, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5d1b814-0781-4f80-9b60-99638ffab", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be26487b-f647-40be-8452-60ae418b97ca", "record_id": "flaws_cloudtrail:0000117:be26487b-f647-40be-8452-60ae418b97ca", "row_index": 117, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be26487b-f647-40be-8452-60ae418b97ca", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551ff097-5d24-4fef-943f-886755382c00", "record_id": "flaws_cloudtrail:0000118:551ff097-5d24-4fef-943f-886755382c00", "row_index": 118, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551ff097-5d24-4fef-943f-886755382c00", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "record_id": "flaws_cloudtrail:0000119:c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "row_index": 119, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c828f6c6-53d3-4502-a3d6-2d5e64d133a6", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18780d4-fb20-4cad-9eb0-197c4783eeee", "record_id": "flaws_cloudtrail:0000120:18780d4-fb20-4cad-9eb0-197c4783eeee", "row_index": 120, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18780d4-fb20-4cad-9eb0-197c4783eeee", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "record_id": "flaws_cloudtrail:0000121:0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "row_index": 121, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a218c7d-50d4-4e32-aec7-f07e1f3e8692", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6452dd-22db-4a2e-b59d-f6aaeb754126", "record_id": "flaws_cloudtrail:0000122:0a6452dd-22db-4a2e-b59d-f6aaeb754126", "row_index": 122, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6452dd-22db-4a2e-b59d-f6aaeb754126", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "record_id": "flaws_cloudtrail:0000123:a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "row_index": 123, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4136bae-32aa-4beb-bdd7-11b4aec8ba6f", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de2969db-0557-4005-8a83-ce926d2d67d1", "record_id": "flaws_cloudtrail:0000124:de2969db-0557-4005-8a83-ce926d2d67d1", "row_index": 124, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de2969db-0557-4005-8a83-ce926d2d67d1", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "record_id": "flaws_cloudtrail:0000125:5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "row_index": 125, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc11b8d-1ded-4e55-a4a2-5cf12ab7f051", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f290786e-c809-4e42-b155-9a4a9483f20f", "record_id": "flaws_cloudtrail:0000126:1f290786e-c809-4e42-b155-9a4a9483f20f", "row_index": 126, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f290786e-c809-4e42-b155-9a4a9483f20f", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "record_id": "flaws_cloudtrail:0000127:b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "row_index": 127, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b67fe4cd-8db7-4f0a-8fb8-cf67a4ce98b4", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd959ba-9884-41d7-b3e0-35afb41798e", "record_id": "flaws_cloudtrail:0000128:3cd959ba-9884-41d7-b3e0-35afb41798e", "row_index": 128, "timestamp": "2019-08-02T17:45:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd959ba-9884-41d7-b3e0-35afb41798e", "eventTime": "2019-08-02T17:45:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "record_id": "flaws_cloudtrail:0000129:629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "row_index": 129, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "record_id": "flaws_cloudtrail:0000130:3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "row_index": 130, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebfa65b-354a-4463-b0bf-8a3668d13388", "record_id": "flaws_cloudtrail:0000131:6ebfa65b-354a-4463-b0bf-8a3668d13388", "row_index": 131, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebfa65b-354a-4463-b0bf-8a3668d13388", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59403ea-e5ef-4341-bc5f-9d536d57289b", "record_id": "flaws_cloudtrail:0000132:59403ea-e5ef-4341-bc5f-9d536d57289b", "row_index": 132, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59403ea-e5ef-4341-bc5f-9d536d57289b", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c718368-5f45-4392-bb85-825aca4f3920", "record_id": "flaws_cloudtrail:0000133:c718368-5f45-4392-bb85-825aca4f3920", "row_index": 133, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c718368-5f45-4392-bb85-825aca4f3920", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a0c21e-e8d3-4bda-9146-c998754acf48", "record_id": "flaws_cloudtrail:0000134:85a0c21e-e8d3-4bda-9146-c998754acf48", "row_index": 134, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a0c21e-e8d3-4bda-9146-c998754acf48", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6becda57-a6bc-41bd-9066-267a73cce0ff", "record_id": "flaws_cloudtrail:0000135:6becda57-a6bc-41bd-9066-267a73cce0ff", "row_index": 135, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6becda57-a6bc-41bd-9066-267a73cce0ff", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7009ee6-3d5e-41fe-8200-2155dd3c9302", "record_id": "flaws_cloudtrail:0000136:b7009ee6-3d5e-41fe-8200-2155dd3c9302", "row_index": 136, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7009ee6-3d5e-41fe-8200-2155dd3c9302", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c003696-3841-4e8f-b306-04b5211ab1b9", "record_id": "flaws_cloudtrail:0000137:93c003696-3841-4e8f-b306-04b5211ab1b9", "row_index": 137, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c003696-3841-4e8f-b306-04b5211ab1b9", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d9c83b-ea36-4e5d-9755-d7da5aab4910", "record_id": "flaws_cloudtrail:0000138:51d9c83b-ea36-4e5d-9755-d7da5aab4910", "row_index": 138, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d9c83b-ea36-4e5d-9755-d7da5aab4910", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f503d059-00c5-4003-943d-3a5cdc8772ae", "record_id": "flaws_cloudtrail:0000139:f503d059-00c5-4003-943d-3a5cdc8772ae", "row_index": 139, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f503d059-00c5-4003-943d-3a5cdc8772ae", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "record_id": "flaws_cloudtrail:0000140:e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "row_index": 140, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c04a09f-033e-4db6-9b2b-0187839e3d92", "record_id": "flaws_cloudtrail:0000141:6c04a09f-033e-4db6-9b2b-0187839e3d92", "row_index": 141, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c04a09f-033e-4db6-9b2b-0187839e3d92", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7cdf25f-4601-4c41-9414-f9293dcf3fae", "record_id": "flaws_cloudtrail:0000142:c7cdf25f-4601-4c41-9414-f9293dcf3fae", "row_index": 142, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7cdf25f-4601-4c41-9414-f9293dcf3fae", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f61a6650-371b-43f4-9588-538cbb86b5f1", "record_id": "flaws_cloudtrail:0000143:f61a6650-371b-43f4-9588-538cbb86b5f1", "row_index": 143, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f61a6650-371b-43f4-9588-538cbb86b5f1", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23bc9cff-f492-4463-9c22-da554007e05", "record_id": "flaws_cloudtrail:0000144:23bc9cff-f492-4463-9c22-da554007e05", "row_index": 144, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23bc9cff-f492-4463-9c22-da554007e05", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "record_id": "flaws_cloudtrail:0000145:629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "row_index": 145, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629ae4d4-d8c0-4e2a-8816-eb57b9675ad4", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "record_id": "flaws_cloudtrail:0000146:3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "row_index": 146, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b2f9b74-1c1c-46a0-82bc-3f0ffef265bf", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebfa65b-354a-4463-b0bf-8a3668d13388", "record_id": "flaws_cloudtrail:0000147:6ebfa65b-354a-4463-b0bf-8a3668d13388", "row_index": 147, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebfa65b-354a-4463-b0bf-8a3668d13388", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59403ea-e5ef-4341-bc5f-9d536d57289b", "record_id": "flaws_cloudtrail:0000148:59403ea-e5ef-4341-bc5f-9d536d57289b", "row_index": 148, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59403ea-e5ef-4341-bc5f-9d536d57289b", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c718368-5f45-4392-bb85-825aca4f3920", "record_id": "flaws_cloudtrail:0000149:c718368-5f45-4392-bb85-825aca4f3920", "row_index": 149, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c718368-5f45-4392-bb85-825aca4f3920", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a0c21e-e8d3-4bda-9146-c998754acf48", "record_id": "flaws_cloudtrail:0000150:85a0c21e-e8d3-4bda-9146-c998754acf48", "row_index": 150, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a0c21e-e8d3-4bda-9146-c998754acf48", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6becda57-a6bc-41bd-9066-267a73cce0ff", "record_id": "flaws_cloudtrail:0000151:6becda57-a6bc-41bd-9066-267a73cce0ff", "row_index": 151, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6becda57-a6bc-41bd-9066-267a73cce0ff", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7009ee6-3d5e-41fe-8200-2155dd3c9302", "record_id": "flaws_cloudtrail:0000152:b7009ee6-3d5e-41fe-8200-2155dd3c9302", "row_index": 152, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7009ee6-3d5e-41fe-8200-2155dd3c9302", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c003696-3841-4e8f-b306-04b5211ab1b9", "record_id": "flaws_cloudtrail:0000153:93c003696-3841-4e8f-b306-04b5211ab1b9", "row_index": 153, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c003696-3841-4e8f-b306-04b5211ab1b9", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d9c83b-ea36-4e5d-9755-d7da5aab4910", "record_id": "flaws_cloudtrail:0000154:51d9c83b-ea36-4e5d-9755-d7da5aab4910", "row_index": 154, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d9c83b-ea36-4e5d-9755-d7da5aab4910", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f503d059-00c5-4003-943d-3a5cdc8772ae", "record_id": "flaws_cloudtrail:0000155:f503d059-00c5-4003-943d-3a5cdc8772ae", "row_index": 155, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f503d059-00c5-4003-943d-3a5cdc8772ae", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "record_id": "flaws_cloudtrail:0000156:e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "row_index": 156, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e895cce5-7f00-43e8-aeb6-80a7cfa2e881", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c04a09f-033e-4db6-9b2b-0187839e3d92", "record_id": "flaws_cloudtrail:0000157:6c04a09f-033e-4db6-9b2b-0187839e3d92", "row_index": 157, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c04a09f-033e-4db6-9b2b-0187839e3d92", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7cdf25f-4601-4c41-9414-f9293dcf3fae", "record_id": "flaws_cloudtrail:0000158:c7cdf25f-4601-4c41-9414-f9293dcf3fae", "row_index": 158, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7cdf25f-4601-4c41-9414-f9293dcf3fae", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f61a6650-371b-43f4-9588-538cbb86b5f1", "record_id": "flaws_cloudtrail:0000159:f61a6650-371b-43f4-9588-538cbb86b5f1", "row_index": 159, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f61a6650-371b-43f4-9588-538cbb86b5f1", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23bc9cff-f492-4463-9c22-da554007e05", "record_id": "flaws_cloudtrail:0000160:23bc9cff-f492-4463-9c22-da554007e05", "row_index": 160, "timestamp": "2019-08-02T17:45:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23bc9cff-f492-4463-9c22-da554007e05", "eventTime": "2019-08-02T17:45:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e549313-36b5-4c0c-8a62-fecb139c08bd", "record_id": "flaws_cloudtrail:0000161:8e549313-36b5-4c0c-8a62-fecb139c08bd", "row_index": 161, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e549313-36b5-4c0c-8a62-fecb139c08bd", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334935-9464-4536-947c-be3151fa5097", "record_id": "flaws_cloudtrail:0000162:334935-9464-4536-947c-be3151fa5097", "row_index": 162, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334935-9464-4536-947c-be3151fa5097", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2facd0eb-fcf0-4b39-834e-370fa7d04278", "record_id": "flaws_cloudtrail:0000163:2facd0eb-fcf0-4b39-834e-370fa7d04278", "row_index": 163, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2facd0eb-fcf0-4b39-834e-370fa7d04278", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067ee13c-52a1-4549-93e3-96f7653f1ca5", "record_id": "flaws_cloudtrail:0000164:067ee13c-52a1-4549-93e3-96f7653f1ca5", "row_index": 164, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067ee13c-52a1-4549-93e3-96f7653f1ca5", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "record_id": "flaws_cloudtrail:0000165:1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "row_index": 165, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a7aa130-675e-4794-adea-23078bbb6299", "record_id": "flaws_cloudtrail:0000166:7a7aa130-675e-4794-adea-23078bbb6299", "row_index": 166, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a7aa130-675e-4794-adea-23078bbb6299", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "record_id": "flaws_cloudtrail:0000167:7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "row_index": 167, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "record_id": "flaws_cloudtrail:0000168:dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "row_index": 168, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "517d7fa0-7c3a-4168-95ca-fcffbd0be723", "record_id": "flaws_cloudtrail:0000169:517d7fa0-7c3a-4168-95ca-fcffbd0be723", "row_index": 169, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "517d7fa0-7c3a-4168-95ca-fcffbd0be723", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453c08a6-43dc-4925-a9df-7dbc9320630b", "record_id": "flaws_cloudtrail:0000170:453c08a6-43dc-4925-a9df-7dbc9320630b", "row_index": 170, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453c08a6-43dc-4925-a9df-7dbc9320630b", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05a83b1f-cf56-402b-8033-9f243a4517f9", "record_id": "flaws_cloudtrail:0000171:05a83b1f-cf56-402b-8033-9f243a4517f9", "row_index": 171, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05a83b1f-cf56-402b-8033-9f243a4517f9", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90f58bc-16ec-4efc-b407-4c103ed313b3", "record_id": "flaws_cloudtrail:0000172:b90f58bc-16ec-4efc-b407-4c103ed313b3", "row_index": 172, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90f58bc-16ec-4efc-b407-4c103ed313b3", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "record_id": "flaws_cloudtrail:0000173:8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "row_index": 173, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c8f3e2-b2ff-4196-aa52-299549ae", "record_id": "flaws_cloudtrail:0000174:c1c8f3e2-b2ff-4196-aa52-299549ae", "row_index": 174, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c8f3e2-b2ff-4196-aa52-299549ae", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "record_id": "flaws_cloudtrail:0000175:5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "row_index": 175, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0d7379-ff0d-455a-9f2a-28c13657b6cf", "record_id": "flaws_cloudtrail:0000176:be0d7379-ff0d-455a-9f2a-28c13657b6cf", "row_index": 176, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0d7379-ff0d-455a-9f2a-28c13657b6cf", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e549313-36b5-4c0c-8a62-fecb139c08bd", "record_id": "flaws_cloudtrail:0000177:8e549313-36b5-4c0c-8a62-fecb139c08bd", "row_index": 177, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e549313-36b5-4c0c-8a62-fecb139c08bd", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334935-9464-4536-947c-be3151fa5097", "record_id": "flaws_cloudtrail:0000178:334935-9464-4536-947c-be3151fa5097", "row_index": 178, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334935-9464-4536-947c-be3151fa5097", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2facd0eb-fcf0-4b39-834e-370fa7d04278", "record_id": "flaws_cloudtrail:0000179:2facd0eb-fcf0-4b39-834e-370fa7d04278", "row_index": 179, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2facd0eb-fcf0-4b39-834e-370fa7d04278", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067ee13c-52a1-4549-93e3-96f7653f1ca5", "record_id": "flaws_cloudtrail:0000180:067ee13c-52a1-4549-93e3-96f7653f1ca5", "row_index": 180, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067ee13c-52a1-4549-93e3-96f7653f1ca5", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "record_id": "flaws_cloudtrail:0000181:1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "row_index": 181, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f3c8712-baa0-4aaa-8507-75e78f3ccb16", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a7aa130-675e-4794-adea-23078bbb6299", "record_id": "flaws_cloudtrail:0000182:7a7aa130-675e-4794-adea-23078bbb6299", "row_index": 182, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a7aa130-675e-4794-adea-23078bbb6299", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "record_id": "flaws_cloudtrail:0000183:7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "row_index": 183, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dd3dc2d-e568-4a8c-9b4a-7db87bb5bdbc", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "record_id": "flaws_cloudtrail:0000184:dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "row_index": 184, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc184deb-86b1-4b0d-8c59-e7c444c3feb2", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "517d7fa0-7c3a-4168-95ca-fcffbd0be723", "record_id": "flaws_cloudtrail:0000185:517d7fa0-7c3a-4168-95ca-fcffbd0be723", "row_index": 185, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "517d7fa0-7c3a-4168-95ca-fcffbd0be723", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453c08a6-43dc-4925-a9df-7dbc9320630b", "record_id": "flaws_cloudtrail:0000186:453c08a6-43dc-4925-a9df-7dbc9320630b", "row_index": 186, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453c08a6-43dc-4925-a9df-7dbc9320630b", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05a83b1f-cf56-402b-8033-9f243a4517f9", "record_id": "flaws_cloudtrail:0000187:05a83b1f-cf56-402b-8033-9f243a4517f9", "row_index": 187, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05a83b1f-cf56-402b-8033-9f243a4517f9", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90f58bc-16ec-4efc-b407-4c103ed313b3", "record_id": "flaws_cloudtrail:0000188:b90f58bc-16ec-4efc-b407-4c103ed313b3", "row_index": 188, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90f58bc-16ec-4efc-b407-4c103ed313b3", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "record_id": "flaws_cloudtrail:0000189:8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "row_index": 189, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b31d13a-4ed5-4f39-bb6a-677a2534c9dd", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c8f3e2-b2ff-4196-aa52-299549ae", "record_id": "flaws_cloudtrail:0000190:c1c8f3e2-b2ff-4196-aa52-299549ae", "row_index": 190, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c8f3e2-b2ff-4196-aa52-299549ae", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "record_id": "flaws_cloudtrail:0000191:5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "row_index": 191, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5555fa8e-2c90-4db5-ae77-a36aa9f9134f", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0d7379-ff0d-455a-9f2a-28c13657b6cf", "record_id": "flaws_cloudtrail:0000192:be0d7379-ff0d-455a-9f2a-28c13657b6cf", "row_index": 192, "timestamp": "2019-08-02T17:45:26Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0d7379-ff0d-455a-9f2a-28c13657b6cf", "eventTime": "2019-08-02T17:45:26Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc917ced-7a14-4dc4-90c3-411cd814e251", "record_id": "flaws_cloudtrail:0000193:bc917ced-7a14-4dc4-90c3-411cd814e251", "row_index": 193, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc917ced-7a14-4dc4-90c3-411cd814e251", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80bd74f5-5ad4-492c-a60b-452673217cd4", "record_id": "flaws_cloudtrail:0000194:80bd74f5-5ad4-492c-a60b-452673217cd4", "row_index": 194, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80bd74f5-5ad4-492c-a60b-452673217cd4", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6330e2-b46a-46bd-b05b-5ff084b8001c", "record_id": "flaws_cloudtrail:0000195:de6330e2-b46a-46bd-b05b-5ff084b8001c", "row_index": 195, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6330e2-b46a-46bd-b05b-5ff084b8001c", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a3fd27-2a2a-4292-aa8b-74aefd506d44", "record_id": "flaws_cloudtrail:0000196:41a3fd27-2a2a-4292-aa8b-74aefd506d44", "row_index": 196, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a3fd27-2a2a-4292-aa8b-74aefd506d44", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942bfd1a-ee52-4859-9a68-12c636cd5544", "record_id": "flaws_cloudtrail:0000197:942bfd1a-ee52-4859-9a68-12c636cd5544", "row_index": 197, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942bfd1a-ee52-4859-9a68-12c636cd5544", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a70e99d-c461-42d2-b4b8-f589ea7978f6", "record_id": "flaws_cloudtrail:0000198:5a70e99d-c461-42d2-b4b8-f589ea7978f6", "row_index": 198, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a70e99d-c461-42d2-b4b8-f589ea7978f6", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c37d56ff-6553-48f8-a13e-bee46652bb41", "record_id": "flaws_cloudtrail:0000199:c37d56ff-6553-48f8-a13e-bee46652bb41", "row_index": 199, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c37d56ff-6553-48f8-a13e-bee46652bb41", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d76311-8b55-49c4-bc69-814e6d27d3a9", "record_id": "flaws_cloudtrail:0000200:65d76311-8b55-49c4-bc69-814e6d27d3a9", "row_index": 200, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d76311-8b55-49c4-bc69-814e6d27d3a9", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f10b436a-1a56-43ee-95e5-0c04c8fb358c", "record_id": "flaws_cloudtrail:0000201:f10b436a-1a56-43ee-95e5-0c04c8fb358c", "row_index": 201, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f10b436a-1a56-43ee-95e5-0c04c8fb358c", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d061c55-60cb-4e57-a5e2-50cc985e4490", "record_id": "flaws_cloudtrail:0000202:5d061c55-60cb-4e57-a5e2-50cc985e4490", "row_index": 202, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d061c55-60cb-4e57-a5e2-50cc985e4490", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578477f7-1fa0-4f5f-b11c-c2464627db8a", "record_id": "flaws_cloudtrail:0000203:578477f7-1fa0-4f5f-b11c-c2464627db8a", "row_index": 203, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578477f7-1fa0-4f5f-b11c-c2464627db8a", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea43c2e-acfc-4f0e-a956-457bd214989", "record_id": "flaws_cloudtrail:0000204:6ea43c2e-acfc-4f0e-a956-457bd214989", "row_index": 204, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea43c2e-acfc-4f0e-a956-457bd214989", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8254b04e-7c0a-44f7-873d-7eb554b97a49", "record_id": "flaws_cloudtrail:0000205:8254b04e-7c0a-44f7-873d-7eb554b97a49", "row_index": 205, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8254b04e-7c0a-44f7-873d-7eb554b97a49", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9053e974-75cd-4ed5-bb51-81f776134c95e", "record_id": "flaws_cloudtrail:0000206:9053e974-75cd-4ed5-bb51-81f776134c95e", "row_index": 206, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9053e974-75cd-4ed5-bb51-81f776134c95e", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf514975-c895-4eb9-8d70-1bcb543e4c92", "record_id": "flaws_cloudtrail:0000207:1cf514975-c895-4eb9-8d70-1bcb543e4c92", "row_index": 207, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf514975-c895-4eb9-8d70-1bcb543e4c92", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "record_id": "flaws_cloudtrail:0000208:6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "row_index": 208, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc917ced-7a14-4dc4-90c3-411cd814e251", "record_id": "flaws_cloudtrail:0000209:bc917ced-7a14-4dc4-90c3-411cd814e251", "row_index": 209, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc917ced-7a14-4dc4-90c3-411cd814e251", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80bd74f5-5ad4-492c-a60b-452673217cd4", "record_id": "flaws_cloudtrail:0000210:80bd74f5-5ad4-492c-a60b-452673217cd4", "row_index": 210, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80bd74f5-5ad4-492c-a60b-452673217cd4", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6330e2-b46a-46bd-b05b-5ff084b8001c", "record_id": "flaws_cloudtrail:0000211:de6330e2-b46a-46bd-b05b-5ff084b8001c", "row_index": 211, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6330e2-b46a-46bd-b05b-5ff084b8001c", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a3fd27-2a2a-4292-aa8b-74aefd506d44", "record_id": "flaws_cloudtrail:0000212:41a3fd27-2a2a-4292-aa8b-74aefd506d44", "row_index": 212, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a3fd27-2a2a-4292-aa8b-74aefd506d44", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942bfd1a-ee52-4859-9a68-12c636cd5544", "record_id": "flaws_cloudtrail:0000213:942bfd1a-ee52-4859-9a68-12c636cd5544", "row_index": 213, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942bfd1a-ee52-4859-9a68-12c636cd5544", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a70e99d-c461-42d2-b4b8-f589ea7978f6", "record_id": "flaws_cloudtrail:0000214:5a70e99d-c461-42d2-b4b8-f589ea7978f6", "row_index": 214, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a70e99d-c461-42d2-b4b8-f589ea7978f6", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c37d56ff-6553-48f8-a13e-bee46652bb41", "record_id": "flaws_cloudtrail:0000215:c37d56ff-6553-48f8-a13e-bee46652bb41", "row_index": 215, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c37d56ff-6553-48f8-a13e-bee46652bb41", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d76311-8b55-49c4-bc69-814e6d27d3a9", "record_id": "flaws_cloudtrail:0000216:65d76311-8b55-49c4-bc69-814e6d27d3a9", "row_index": 216, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d76311-8b55-49c4-bc69-814e6d27d3a9", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f10b436a-1a56-43ee-95e5-0c04c8fb358c", "record_id": "flaws_cloudtrail:0000217:f10b436a-1a56-43ee-95e5-0c04c8fb358c", "row_index": 217, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f10b436a-1a56-43ee-95e5-0c04c8fb358c", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d061c55-60cb-4e57-a5e2-50cc985e4490", "record_id": "flaws_cloudtrail:0000218:5d061c55-60cb-4e57-a5e2-50cc985e4490", "row_index": 218, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d061c55-60cb-4e57-a5e2-50cc985e4490", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578477f7-1fa0-4f5f-b11c-c2464627db8a", "record_id": "flaws_cloudtrail:0000219:578477f7-1fa0-4f5f-b11c-c2464627db8a", "row_index": 219, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578477f7-1fa0-4f5f-b11c-c2464627db8a", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea43c2e-acfc-4f0e-a956-457bd214989", "record_id": "flaws_cloudtrail:0000220:6ea43c2e-acfc-4f0e-a956-457bd214989", "row_index": 220, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea43c2e-acfc-4f0e-a956-457bd214989", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8254b04e-7c0a-44f7-873d-7eb554b97a49", "record_id": "flaws_cloudtrail:0000221:8254b04e-7c0a-44f7-873d-7eb554b97a49", "row_index": 221, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8254b04e-7c0a-44f7-873d-7eb554b97a49", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9053e974-75cd-4ed5-bb51-81f776134c95e", "record_id": "flaws_cloudtrail:0000222:9053e974-75cd-4ed5-bb51-81f776134c95e", "row_index": 222, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9053e974-75cd-4ed5-bb51-81f776134c95e", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf514975-c895-4eb9-8d70-1bcb543e4c92", "record_id": "flaws_cloudtrail:0000223:1cf514975-c895-4eb9-8d70-1bcb543e4c92", "row_index": 223, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf514975-c895-4eb9-8d70-1bcb543e4c92", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "record_id": "flaws_cloudtrail:0000224:6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "row_index": 224, "timestamp": "2019-08-02T17:45:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6353a5db-b7c9-4a2c-8c2f-917acb11d1fc", "eventTime": "2019-08-02T17:45:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "record_id": "flaws_cloudtrail:0000225:3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "row_index": 225, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4402f890-e9a3-4b19-8deb-92f54840c136", "record_id": "flaws_cloudtrail:0000226:4402f890-e9a3-4b19-8deb-92f54840c136", "row_index": 226, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4402f890-e9a3-4b19-8deb-92f54840c136", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c419afea-6517-4373-b180-1ae28fc61a9e", "record_id": "flaws_cloudtrail:0000227:c419afea-6517-4373-b180-1ae28fc61a9e", "row_index": 227, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c419afea-6517-4373-b180-1ae28fc61a9e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "record_id": "flaws_cloudtrail:0000228:bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "row_index": 228, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f68d512-f0b6-4878-a802-5b9071c0ae5e", "record_id": "flaws_cloudtrail:0000229:0f68d512-f0b6-4878-a802-5b9071c0ae5e", "row_index": 229, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f68d512-f0b6-4878-a802-5b9071c0ae5e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68323a7-96f5-47ca-a50f-8d2ca2a25262", "record_id": "flaws_cloudtrail:0000230:68323a7-96f5-47ca-a50f-8d2ca2a25262", "row_index": 230, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68323a7-96f5-47ca-a50f-8d2ca2a25262", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ff1021-525e-477d-b898-909cfe07e5e1", "record_id": "flaws_cloudtrail:0000231:c9ff1021-525e-477d-b898-909cfe07e5e1", "row_index": 231, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ff1021-525e-477d-b898-909cfe07e5e1", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ee60a9-125e-4f8b-b302-40177c309", "record_id": "flaws_cloudtrail:0000232:59ee60a9-125e-4f8b-b302-40177c309", "row_index": 232, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ee60a9-125e-4f8b-b302-40177c309", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fab53a6-5063-4cfc-8231-30dc9daa140b", "record_id": "flaws_cloudtrail:0000233:7fab53a6-5063-4cfc-8231-30dc9daa140b", "row_index": 233, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fab53a6-5063-4cfc-8231-30dc9daa140b", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "record_id": "flaws_cloudtrail:0000234:c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "row_index": 234, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665cc564-84d6-4877-9289-1968f59aeaf7", "record_id": "flaws_cloudtrail:0000235:665cc564-84d6-4877-9289-1968f59aeaf7", "row_index": 235, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665cc564-84d6-4877-9289-1968f59aeaf7", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "record_id": "flaws_cloudtrail:0000236:17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "row_index": 236, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca6751a-d760-46f1-aecd-1b9be52b1cd7", "record_id": "flaws_cloudtrail:0000237:bca6751a-d760-46f1-aecd-1b9be52b1cd7", "row_index": 237, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca6751a-d760-46f1-aecd-1b9be52b1cd7", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "record_id": "flaws_cloudtrail:0000238:e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "row_index": 238, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3360c9d-4ddd-4340-afe4-25821ab7397", "record_id": "flaws_cloudtrail:0000239:c3360c9d-4ddd-4340-afe4-25821ab7397", "row_index": 239, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3360c9d-4ddd-4340-afe4-25821ab7397", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30329b5-9891-46ca-b7e1-a5958a1bbb8e", "record_id": "flaws_cloudtrail:0000240:30329b5-9891-46ca-b7e1-a5958a1bbb8e", "row_index": 240, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30329b5-9891-46ca-b7e1-a5958a1bbb8e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "record_id": "flaws_cloudtrail:0000241:3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "row_index": 241, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a01fce7-23ef-4f4d-be8a-bd13e75194d4", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4402f890-e9a3-4b19-8deb-92f54840c136", "record_id": "flaws_cloudtrail:0000242:4402f890-e9a3-4b19-8deb-92f54840c136", "row_index": 242, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4402f890-e9a3-4b19-8deb-92f54840c136", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c419afea-6517-4373-b180-1ae28fc61a9e", "record_id": "flaws_cloudtrail:0000243:c419afea-6517-4373-b180-1ae28fc61a9e", "row_index": 243, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c419afea-6517-4373-b180-1ae28fc61a9e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "record_id": "flaws_cloudtrail:0000244:bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "row_index": 244, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd397e61-f1ec-4518-bdb6-49535ff6b5b0", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f68d512-f0b6-4878-a802-5b9071c0ae5e", "record_id": "flaws_cloudtrail:0000245:0f68d512-f0b6-4878-a802-5b9071c0ae5e", "row_index": 245, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f68d512-f0b6-4878-a802-5b9071c0ae5e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68323a7-96f5-47ca-a50f-8d2ca2a25262", "record_id": "flaws_cloudtrail:0000246:68323a7-96f5-47ca-a50f-8d2ca2a25262", "row_index": 246, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68323a7-96f5-47ca-a50f-8d2ca2a25262", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ff1021-525e-477d-b898-909cfe07e5e1", "record_id": "flaws_cloudtrail:0000247:c9ff1021-525e-477d-b898-909cfe07e5e1", "row_index": 247, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ff1021-525e-477d-b898-909cfe07e5e1", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ee60a9-125e-4f8b-b302-40177c309", "record_id": "flaws_cloudtrail:0000248:59ee60a9-125e-4f8b-b302-40177c309", "row_index": 248, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ee60a9-125e-4f8b-b302-40177c309", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fab53a6-5063-4cfc-8231-30dc9daa140b", "record_id": "flaws_cloudtrail:0000249:7fab53a6-5063-4cfc-8231-30dc9daa140b", "row_index": 249, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fab53a6-5063-4cfc-8231-30dc9daa140b", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "record_id": "flaws_cloudtrail:0000250:c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "row_index": 250, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c62a2b44-3a30-4941-b0d1-78b4d35e9e8f", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665cc564-84d6-4877-9289-1968f59aeaf7", "record_id": "flaws_cloudtrail:0000251:665cc564-84d6-4877-9289-1968f59aeaf7", "row_index": 251, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665cc564-84d6-4877-9289-1968f59aeaf7", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "record_id": "flaws_cloudtrail:0000252:17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "row_index": 252, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17e4d4ae-2fb8-4025-b7ae-47dde8aa6d3c", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca6751a-d760-46f1-aecd-1b9be52b1cd7", "record_id": "flaws_cloudtrail:0000253:bca6751a-d760-46f1-aecd-1b9be52b1cd7", "row_index": 253, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca6751a-d760-46f1-aecd-1b9be52b1cd7", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "record_id": "flaws_cloudtrail:0000254:e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "row_index": 254, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e765fa8a-5100-42e9-b30f-2f8c3ee8a518", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3360c9d-4ddd-4340-afe4-25821ab7397", "record_id": "flaws_cloudtrail:0000255:c3360c9d-4ddd-4340-afe4-25821ab7397", "row_index": 255, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3360c9d-4ddd-4340-afe4-25821ab7397", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30329b5-9891-46ca-b7e1-a5958a1bbb8e", "record_id": "flaws_cloudtrail:0000256:30329b5-9891-46ca-b7e1-a5958a1bbb8e", "row_index": 256, "timestamp": "2019-08-02T17:45:30Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30329b5-9891-46ca-b7e1-a5958a1bbb8e", "eventTime": "2019-08-02T17:45:30Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98e6a489-3c45-4a29-b254-bbd9e648307", "record_id": "flaws_cloudtrail:0000257:98e6a489-3c45-4a29-b254-bbd9e648307", "row_index": 257, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98e6a489-3c45-4a29-b254-bbd9e648307", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eacc0782-27e1-4152-ad44-8bb974e61eec", "record_id": "flaws_cloudtrail:0000258:eacc0782-27e1-4152-ad44-8bb974e61eec", "row_index": 258, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eacc0782-27e1-4152-ad44-8bb974e61eec", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "record_id": "flaws_cloudtrail:0000259:fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "row_index": 259, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "record_id": "flaws_cloudtrail:0000260:0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "row_index": 260, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98e6a489-3c45-4a29-b254-bbd9e648307", "record_id": "flaws_cloudtrail:0000261:98e6a489-3c45-4a29-b254-bbd9e648307", "row_index": 261, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98e6a489-3c45-4a29-b254-bbd9e648307", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eacc0782-27e1-4152-ad44-8bb974e61eec", "record_id": "flaws_cloudtrail:0000262:eacc0782-27e1-4152-ad44-8bb974e61eec", "row_index": 262, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eacc0782-27e1-4152-ad44-8bb974e61eec", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "record_id": "flaws_cloudtrail:0000263:fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "row_index": 263, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbefd259-2f9c-45b0-a082-e5b3f1b6ba0b", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "record_id": "flaws_cloudtrail:0000264:0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "row_index": 264, "timestamp": "2019-08-02T17:45:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b9d07c7-aeda-47ec-89cf-5e363c9e47a1", "eventTime": "2019-08-02T17:45:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "568822-5f2e-4dd1-8ba8-e65bd63f6808", "record_id": "flaws_cloudtrail:0000265:568822-5f2e-4dd1-8ba8-e65bd63f6808", "row_index": 265, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "568822-5f2e-4dd1-8ba8-e65bd63f6808", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12d6726b-9bda-45fb-8874-678be85da9ce", "record_id": "flaws_cloudtrail:0000266:12d6726b-9bda-45fb-8874-678be85da9ce", "row_index": 266, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12d6726b-9bda-45fb-8874-678be85da9ce", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74dd231-a582-48d2-aaf5-75247b12dd3", "record_id": "flaws_cloudtrail:0000267:b74dd231-a582-48d2-aaf5-75247b12dd3", "row_index": 267, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74dd231-a582-48d2-aaf5-75247b12dd3", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5388d4-7bd0-4034-9861-69d3f7f39a34", "record_id": "flaws_cloudtrail:0000268:ac5388d4-7bd0-4034-9861-69d3f7f39a34", "row_index": 268, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5388d4-7bd0-4034-9861-69d3f7f39a34", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce328c31-624a-454e-9e41-718809fb9b303", "record_id": "flaws_cloudtrail:0000269:ce328c31-624a-454e-9e41-718809fb9b303", "row_index": 269, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce328c31-624a-454e-9e41-718809fb9b303", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "record_id": "flaws_cloudtrail:0000270:daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "row_index": 270, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "568822-5f2e-4dd1-8ba8-e65bd63f6808", "record_id": "flaws_cloudtrail:0000271:568822-5f2e-4dd1-8ba8-e65bd63f6808", "row_index": 271, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "568822-5f2e-4dd1-8ba8-e65bd63f6808", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12d6726b-9bda-45fb-8874-678be85da9ce", "record_id": "flaws_cloudtrail:0000272:12d6726b-9bda-45fb-8874-678be85da9ce", "row_index": 272, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12d6726b-9bda-45fb-8874-678be85da9ce", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74dd231-a582-48d2-aaf5-75247b12dd3", "record_id": "flaws_cloudtrail:0000273:b74dd231-a582-48d2-aaf5-75247b12dd3", "row_index": 273, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74dd231-a582-48d2-aaf5-75247b12dd3", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5388d4-7bd0-4034-9861-69d3f7f39a34", "record_id": "flaws_cloudtrail:0000274:ac5388d4-7bd0-4034-9861-69d3f7f39a34", "row_index": 274, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5388d4-7bd0-4034-9861-69d3f7f39a34", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce328c31-624a-454e-9e41-718809fb9b303", "record_id": "flaws_cloudtrail:0000275:ce328c31-624a-454e-9e41-718809fb9b303", "row_index": 275, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce328c31-624a-454e-9e41-718809fb9b303", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "record_id": "flaws_cloudtrail:0000276:daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "row_index": 276, "timestamp": "2019-08-02T17:45:32Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daaf6ae4-1ca7-40c2-be7e-9cd4761ee91c", "eventTime": "2019-08-02T17:45:32Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "record_id": "flaws_cloudtrail:0000277:058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "row_index": 277, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0587f4e8-a2dd-4a3b-91e1-a650ef65879", "record_id": "flaws_cloudtrail:0000278:0587f4e8-a2dd-4a3b-91e1-a650ef65879", "row_index": 278, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0587f4e8-a2dd-4a3b-91e1-a650ef65879", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "record_id": "flaws_cloudtrail:0000279:fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "row_index": 279, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e1859d-4b45-49e5-8e5f-e20525b1f48a", "record_id": "flaws_cloudtrail:0000280:05e1859d-4b45-49e5-8e5f-e20525b1f48a", "row_index": 280, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e1859d-4b45-49e5-8e5f-e20525b1f48a", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405477f54-4701-46ea-9f63-25e6bf0f7098", "record_id": "flaws_cloudtrail:0000281:405477f54-4701-46ea-9f63-25e6bf0f7098", "row_index": 281, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405477f54-4701-46ea-9f63-25e6bf0f7098", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "record_id": "flaws_cloudtrail:0000282:f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "row_index": 282, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "record_id": "flaws_cloudtrail:0000283:058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "row_index": 283, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058289c4e-c5c9-405a-a9f0-c1bd9d534b2e", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0587f4e8-a2dd-4a3b-91e1-a650ef65879", "record_id": "flaws_cloudtrail:0000284:0587f4e8-a2dd-4a3b-91e1-a650ef65879", "row_index": 284, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0587f4e8-a2dd-4a3b-91e1-a650ef65879", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "record_id": "flaws_cloudtrail:0000285:fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "row_index": 285, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcd8fc82-aabf-4af0-8d07-f635f4f4d9e7", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e1859d-4b45-49e5-8e5f-e20525b1f48a", "record_id": "flaws_cloudtrail:0000286:05e1859d-4b45-49e5-8e5f-e20525b1f48a", "row_index": 286, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e1859d-4b45-49e5-8e5f-e20525b1f48a", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405477f54-4701-46ea-9f63-25e6bf0f7098", "record_id": "flaws_cloudtrail:0000287:405477f54-4701-46ea-9f63-25e6bf0f7098", "row_index": 287, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405477f54-4701-46ea-9f63-25e6bf0f7098", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "record_id": "flaws_cloudtrail:0000288:f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "row_index": 288, "timestamp": "2019-08-02T17:45:33Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b92dbf-0610-4225-9ed8-cbea3e54fdcb", "eventTime": "2019-08-02T17:45:33Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b908a9-554b-4984-b702-fec3ef97cbab", "record_id": "flaws_cloudtrail:0000289:92b908a9-554b-4984-b702-fec3ef97cbab", "row_index": 289, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b908a9-554b-4984-b702-fec3ef97cbab", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa06eca9-b31c-4001-abd0-1004ad030d66", "record_id": "flaws_cloudtrail:0000290:fa06eca9-b31c-4001-abd0-1004ad030d66", "row_index": 290, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa06eca9-b31c-4001-abd0-1004ad030d66", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19737b61-5058-4635-91c9-f3ceedef59b1", "record_id": "flaws_cloudtrail:0000291:19737b61-5058-4635-91c9-f3ceedef59b1", "row_index": 291, "timestamp": "2019-08-02T17:45:34Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19737b61-5058-4635-91c9-f3ceedef59b1", "eventTime": "2019-08-02T17:45:34Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ece1540-4d7f-406c-ad58-83ca4351a669", "record_id": "flaws_cloudtrail:0000292:5ece1540-4d7f-406c-ad58-83ca4351a669", "row_index": 292, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ece1540-4d7f-406c-ad58-83ca4351a669", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f437175b7-3b79-49cd-a138-790ef25ccc15", "record_id": "flaws_cloudtrail:0000293:f437175b7-3b79-49cd-a138-790ef25ccc15", "row_index": 293, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f437175b7-3b79-49cd-a138-790ef25ccc15", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b908a9-554b-4984-b702-fec3ef97cbab", "record_id": "flaws_cloudtrail:0000294:92b908a9-554b-4984-b702-fec3ef97cbab", "row_index": 294, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b908a9-554b-4984-b702-fec3ef97cbab", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa06eca9-b31c-4001-abd0-1004ad030d66", "record_id": "flaws_cloudtrail:0000295:fa06eca9-b31c-4001-abd0-1004ad030d66", "row_index": 295, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa06eca9-b31c-4001-abd0-1004ad030d66", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19737b61-5058-4635-91c9-f3ceedef59b1", "record_id": "flaws_cloudtrail:0000296:19737b61-5058-4635-91c9-f3ceedef59b1", "row_index": 296, "timestamp": "2019-08-02T17:45:34Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19737b61-5058-4635-91c9-f3ceedef59b1", "eventTime": "2019-08-02T17:45:34Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ece1540-4d7f-406c-ad58-83ca4351a669", "record_id": "flaws_cloudtrail:0000297:5ece1540-4d7f-406c-ad58-83ca4351a669", "row_index": 297, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ece1540-4d7f-406c-ad58-83ca4351a669", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f437175b7-3b79-49cd-a138-790ef25ccc15", "record_id": "flaws_cloudtrail:0000298:f437175b7-3b79-49cd-a138-790ef25ccc15", "row_index": 298, "timestamp": "2019-08-02T17:45:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f437175b7-3b79-49cd-a138-790ef25ccc15", "eventTime": "2019-08-02T17:45:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72805fd-666f-42bc-82c6-e7d8331ac192", "record_id": "flaws_cloudtrail:0000299:72805fd-666f-42bc-82c6-e7d8331ac192", "row_index": 299, "timestamp": "2019-08-02T18:23:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "[aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72805fd-666f-42bc-82c6-e7d8331ac192", "eventTime": "2019-08-02T18:23:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "[aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72805fd-666f-42bc-82c6-e7d8331ac192", "record_id": "flaws_cloudtrail:0000300:72805fd-666f-42bc-82c6-e7d8331ac192", "row_index": 300, "timestamp": "2019-08-02T18:23:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "[aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72805fd-666f-42bc-82c6-e7d8331ac192", "eventTime": "2019-08-02T18:23:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "[aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "record_id": "flaws_cloudtrail:0000301:a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "row_index": 301, "timestamp": "2019-08-02T18:23:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "eventTime": "2019-08-02T18:23:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "record_id": "flaws_cloudtrail:0000302:a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "row_index": 302, "timestamp": "2019-08-02T18:23:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2cb0d85-d400-4051-8c8f-d502d8b2a6c7", "eventTime": "2019-08-02T18:23:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc9959e-7923-46db-9de3-baf4abcba152", "record_id": "flaws_cloudtrail:0000303:3bc9959e-7923-46db-9de3-baf4abcba152", "row_index": 303, "timestamp": "2019-08-02T18:24:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc9959e-7923-46db-9de3-baf4abcba152", "eventTime": "2019-08-02T18:24:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPLH7M4D5QP6B7B2W", "expiration": "Aug 2, 2019 7:24:00 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc9959e-7923-46db-9de3-baf4abcba152", "record_id": "flaws_cloudtrail:0000304:3bc9959e-7923-46db-9de3-baf4abcba152", "row_index": 304, "timestamp": "2019-08-02T18:24:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc9959e-7923-46db-9de3-baf4abcba152", "eventTime": "2019-08-02T18:24:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPLH7M4D5QP6B7B2W", "expiration": "Aug 2, 2019 7:24:00 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd83532-3ae3-45f0-89ff-9214eefb34ad", "record_id": "flaws_cloudtrail:0000305:8bd83532-3ae3-45f0-89ff-9214eefb34ad", "row_index": 305, "timestamp": "2019-08-02T18:24:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "[aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd83532-3ae3-45f0-89ff-9214eefb34ad", "eventTime": "2019-08-02T18:24:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "[aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd83532-3ae3-45f0-89ff-9214eefb34ad", "record_id": "flaws_cloudtrail:0000306:8bd83532-3ae3-45f0-89ff-9214eefb34ad", "row_index": 306, "timestamp": "2019-08-02T18:24:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "[aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd83532-3ae3-45f0-89ff-9214eefb34ad", "eventTime": "2019-08-02T18:24:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "[aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9c5107-f596-4920-a415-7758cb4b8cc3", "record_id": "flaws_cloudtrail:0000307:0d9c5107-f596-4920-a415-7758cb4b8cc3", "row_index": 307, "timestamp": "2019-08-02T18:26:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9c5107-f596-4920-a415-7758cb4b8cc3", "eventTime": "2019-08-02T18:26:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9c5107-f596-4920-a415-7758cb4b8cc3", "record_id": "flaws_cloudtrail:0000308:0d9c5107-f596-4920-a415-7758cb4b8cc3", "row_index": 308, "timestamp": "2019-08-02T18:26:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9c5107-f596-4920-a415-7758cb4b8cc3", "eventTime": "2019-08-02T18:26:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f40189-ff6f-4e7e-a74d-872e996f769f", "record_id": "flaws_cloudtrail:0000309:c0f40189-ff6f-4e7e-a74d-872e996f769f", "row_index": 309, "timestamp": "2019-08-02T18:27:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f40189-ff6f-4e7e-a74d-872e996f769f", "eventTime": "2019-08-02T18:27:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f40189-ff6f-4e7e-a74d-872e996f769f", "record_id": "flaws_cloudtrail:0000310:c0f40189-ff6f-4e7e-a74d-872e996f769f", "row_index": 310, "timestamp": "2019-08-02T18:27:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f40189-ff6f-4e7e-a74d-872e996f769f", "eventTime": "2019-08-02T18:27:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc957208d-7f50-4ad7-b766-673be3ee6914", "record_id": "flaws_cloudtrail:0000311:cc957208d-7f50-4ad7-b766-673be3ee6914", "row_index": 311, "timestamp": "2019-08-02T18:28:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc957208d-7f50-4ad7-b766-673be3ee6914", "eventTime": "2019-08-02T18:28:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc957208d-7f50-4ad7-b766-673be3ee6914", "record_id": "flaws_cloudtrail:0000312:cc957208d-7f50-4ad7-b766-673be3ee6914", "row_index": 312, "timestamp": "2019-08-02T18:28:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc957208d-7f50-4ad7-b766-673be3ee6914", "eventTime": "2019-08-02T18:28:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb66133f-724a-4961-8d06-8d3d6570dd92", "record_id": "flaws_cloudtrail:0000313:eb66133f-724a-4961-8d06-8d3d6570dd92", "row_index": 313, "timestamp": "2019-08-02T18:28:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb66133f-724a-4961-8d06-8d3d6570dd92", "eventTime": "2019-08-02T18:28:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb66133f-724a-4961-8d06-8d3d6570dd92", "record_id": "flaws_cloudtrail:0000314:eb66133f-724a-4961-8d06-8d3d6570dd92", "row_index": 314, "timestamp": "2019-08-02T18:28:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb66133f-724a-4961-8d06-8d3d6570dd92", "eventTime": "2019-08-02T18:28:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd27b0fc-8297-417c-b500-20ba466041bb", "record_id": "flaws_cloudtrail:0000315:dd27b0fc-8297-417c-b500-20ba466041bb", "row_index": 315, "timestamp": "2019-08-02T18:28:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd27b0fc-8297-417c-b500-20ba466041bb", "eventTime": "2019-08-02T18:28:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3S0c4RkFLckxiS254WFhnam1rSGJtSmFpQkI1S01qS1RkNXpkVXg1Qi9CcXMxcmhaSEd6L1VlMjZvNGc1Sy8wQUZwbEl3OHQrQW55ODRYa0N3MkIxYnArN0lFanI2aFp2Tk84UExaMFcrV3lGV2RTT3RKajltR2I1ekRONVhoeXlLZnA0aS92L1lOaGRpeDhTVFM0L3NiUWhGMEQzT2puZzNwRFY2b0tpTFR5WnpreEpwbHBwNllyNm9ybCtjaTNORWpETzdvVEJCRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd27b0fc-8297-417c-b500-20ba466041bb", "record_id": "flaws_cloudtrail:0000316:dd27b0fc-8297-417c-b500-20ba466041bb", "row_index": 316, "timestamp": "2019-08-02T18:28:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd27b0fc-8297-417c-b500-20ba466041bb", "eventTime": "2019-08-02T18:28:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3S0c4RkFLckxiS254WFhnam1rSGJtSmFpQkI1S01qS1RkNXpkVXg1Qi9CcXMxcmhaSEd6L1VlMjZvNGc1Sy8wQUZwbEl3OHQrQW55ODRYa0N3MkIxYnArN0lFanI2aFp2Tk84UExaMFcrV3lGV2RTT3RKajltR2I1ekRONVhoeXlLZnA0aS92L1lOaGRpeDhTVFM0L3NiUWhGMEQzT2puZzNwRFY2b0tpTFR5WnpreEpwbHBwNllyNm9ybCtjaTNORWpETzdvVEJCRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e1f771-31e4-4e96-84a1-6bf7d91152db", "record_id": "flaws_cloudtrail:0000317:d1e1f771-31e4-4e96-84a1-6bf7d91152db", "row_index": 317, "timestamp": "2019-08-02T18:28:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e1f771-31e4-4e96-84a1-6bf7d91152db", "eventTime": "2019-08-02T18:28:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZnZiY1RHOWQrMzhsUFMyWXh3cXdGbDQvNkF3MTVudXFMZUJxa0lFZVgvTVJMdXk5Yk1Ga09CWThQN0FYQlNsaTBBZW5SOTFzSFpLdWY5ZXR3UlMvbTV6R3BRQzJIbUdHazR3LzFTTklUbk44VmFpdHBKSTlzWGhoRVJ1ejlGWUlCdEJpb1p0d1BITE1POHQ3TnkxWmdFSGM1dkJCclZVb3NNQnhXTEt0Y0w1Q1o4TVR0Qmw5N0c3UHhFSFpkUC84Wk1FVzA0UGxFK3BHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e1f771-31e4-4e96-84a1-6bf7d91152db", "record_id": "flaws_cloudtrail:0000318:d1e1f771-31e4-4e96-84a1-6bf7d91152db", "row_index": 318, "timestamp": "2019-08-02T18:28:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e1f771-31e4-4e96-84a1-6bf7d91152db", "eventTime": "2019-08-02T18:28:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZnZiY1RHOWQrMzhsUFMyWXh3cXdGbDQvNkF3MTVudXFMZUJxa0lFZVgvTVJMdXk5Yk1Ga09CWThQN0FYQlNsaTBBZW5SOTFzSFpLdWY5ZXR3UlMvbTV6R3BRQzJIbUdHazR3LzFTTklUbk44VmFpdHBKSTlzWGhoRVJ1ejlGWUlCdEJpb1p0d1BITE1POHQ3TnkxWmdFSGM1dkJCclZVb3NNQnhXTEt0Y0w1Q1o4TVR0Qmw5N0c3UHhFSFpkUC84Wk1FVzA0UGxFK3BHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7172ff02-de5b-44d3-8e25-3df7c6505c13", "record_id": "flaws_cloudtrail:0000319:7172ff02-de5b-44d3-8e25-3df7c6505c13", "row_index": 319, "timestamp": "2019-08-02T18:28:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7172ff02-de5b-44d3-8e25-3df7c6505c13", "eventTime": "2019-08-02T18:28:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7172ff02-de5b-44d3-8e25-3df7c6505c13", "record_id": "flaws_cloudtrail:0000320:7172ff02-de5b-44d3-8e25-3df7c6505c13", "row_index": 320, "timestamp": "2019-08-02T18:28:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7172ff02-de5b-44d3-8e25-3df7c6505c13", "eventTime": "2019-08-02T18:28:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "record_id": "flaws_cloudtrail:0000321:1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "row_index": 321, "timestamp": "2019-08-02T18:28:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "eventTime": "2019-08-02T18:28:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmeGRJR2tMbDlFcU55T3BxRkVsdHp1QS94M1U5NWxlcHRzMWcrNjJrcXlJc3ZkNUpVK25vQWIxNWE0SHp0SVNTQ0RqN3duNVBkNTBwb2JVSEVWdVlLbWl1UTYxVVlrK0xFaXdTVlhsRDV4UVkrWXZKTFA1N2l6L2ExM0Focmo1N0lDaTVnRU5ndkgrQW5xYlRhRXZ1ZHFCd2V2d2JiS0RuTlo3Zlh3aEwxeGFubFh6MmdxOFpsMEE2dzhScnN2QUV5NkR1YUxLL2J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "record_id": "flaws_cloudtrail:0000322:1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "row_index": 322, "timestamp": "2019-08-02T18:28:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ce7f4f9-9f73-4186-93bc-99a04ce1737d", "eventTime": "2019-08-02T18:28:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmeGRJR2tMbDlFcU55T3BxRkVsdHp1QS94M1U5NWxlcHRzMWcrNjJrcXlJc3ZkNUpVK25vQWIxNWE0SHp0SVNTQ0RqN3duNVBkNTBwb2JVSEVWdVlLbWl1UTYxVVlrK0xFaXdTVlhsRDV4UVkrWXZKTFA1N2l6L2ExM0Focmo1N0lDaTVnRU5ndkgrQW5xYlRhRXZ1ZHFCd2V2d2JiS0RuTlo3Zlh3aEwxeGFubFh6MmdxOFpsMEE2dzhScnN2QUV5NkR1YUxLL2J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c0adcc-5f0a-4060-b9c3-a37729ace8", "record_id": "flaws_cloudtrail:0000323:a9c0adcc-5f0a-4060-b9c3-a37729ace8", "row_index": 323, "timestamp": "2019-08-02T18:28:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c0adcc-5f0a-4060-b9c3-a37729ace8", "eventTime": "2019-08-02T18:28:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIycVZ2VXlSVHlJblM0QVFDWVplRk1RQlVjbU1KNUtIRW9iejJBWmp0czN0MjdpWjdqMEFjdGlvSW5BUjRhekJZdnF0Tk5SRlMyYnFYSW1takFmMVBiQ3BGM3dBbFY5Wi92eU9yZFVMdTVscWdkM2dlZ3ZtMTRIOXpPcUtuMHY0NXlJT1ZpRE50TjRSb2RYRlg5Z0ozbWdyVmRmSGtTU2UvOFArSEp6M1dZZHB5czJHbVFxT1VYeUNqeHRuczY5NHpxcGExMGFMSm9JLzIwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c0adcc-5f0a-4060-b9c3-a37729ace8", "record_id": "flaws_cloudtrail:0000324:a9c0adcc-5f0a-4060-b9c3-a37729ace8", "row_index": 324, "timestamp": "2019-08-02T18:28:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c0adcc-5f0a-4060-b9c3-a37729ace8", "eventTime": "2019-08-02T18:28:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIycVZ2VXlSVHlJblM0QVFDWVplRk1RQlVjbU1KNUtIRW9iejJBWmp0czN0MjdpWjdqMEFjdGlvSW5BUjRhekJZdnF0Tk5SRlMyYnFYSW1takFmMVBiQ3BGM3dBbFY5Wi92eU9yZFVMdTVscWdkM2dlZ3ZtMTRIOXpPcUtuMHY0NXlJT1ZpRE50TjRSb2RYRlg5Z0ozbWdyVmRmSGtTU2UvOFArSEp6M1dZZHB5czJHbVFxT1VYeUNqeHRuczY5NHpxcGExMGFMSm9JLzIwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbb0ee12-3741-4e79-952a-17acff9e5aac", "record_id": "flaws_cloudtrail:0000325:cbb0ee12-3741-4e79-952a-17acff9e5aac", "row_index": 325, "timestamp": "2019-08-02T18:28:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbb0ee12-3741-4e79-952a-17acff9e5aac", "eventTime": "2019-08-02T18:28:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bXh0UGhKSklWaEdpOWpBclNCM2d6aVRSczY4QlZLRDJhbE9vN2VPZ3lkcGJHZE54RW4xR2lXOVVqd0hLYWxrcVptM24yUkhIR2sxaHVNN0NZNHR5VWtFM0hGQy9rUVA0b2tKMCt2RXdQb1ZGRlVKa0pzZ2F4Y3I2SmEyWjBEaVcxWDl6My8vWCszZkgrMmc1WFdWd3QxVG1CSVRMd2J5Z3NlVzltYlc4U0ZpWnNDTVQrRzl0c2FOSU81blFYMThhaWkwK2NNMXlFND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbb0ee12-3741-4e79-952a-17acff9e5aac", "record_id": "flaws_cloudtrail:0000326:cbb0ee12-3741-4e79-952a-17acff9e5aac", "row_index": 326, "timestamp": "2019-08-02T18:28:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbb0ee12-3741-4e79-952a-17acff9e5aac", "eventTime": "2019-08-02T18:28:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bXh0UGhKSklWaEdpOWpBclNCM2d6aVRSczY4QlZLRDJhbE9vN2VPZ3lkcGJHZE54RW4xR2lXOVVqd0hLYWxrcVptM24yUkhIR2sxaHVNN0NZNHR5VWtFM0hGQy9rUVA0b2tKMCt2RXdQb1ZGRlVKa0pzZ2F4Y3I2SmEyWjBEaVcxWDl6My8vWCszZkgrMmc1WFdWd3QxVG1CSVRMd2J5Z3NlVzltYlc4U0ZpWnNDTVQrRzl0c2FOSU81blFYMThhaWkwK2NNMXlFND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cee684f-dda4-414f-8427-0f4f07e9ef54", "record_id": "flaws_cloudtrail:0000327:6cee684f-dda4-414f-8427-0f4f07e9ef54", "row_index": 327, "timestamp": "2019-08-02T18:28:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cee684f-dda4-414f-8427-0f4f07e9ef54", "eventTime": "2019-08-02T18:28:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvcE1YdUMvdmdpYkhiM2wvRlpLbkE0djJzRjl1bTJjNWNCQzRGSE5HZk5xajNqV0F2ZU43RkJKMDErdzNvVEpnV0tONUFzL2l1b1BHQUhFemJ3ajRKTVJCWXpyalUzTlFnMmptNGV0NVhnOFV1Y2JvaHZZcmsvd3FhK3RhQmRSZUZCMmRpZEM5ZXJkSXhmZnJNaEhlNWRHTjBCcE1BRkppcG9WRFZIRXpTdWNrN1lXZ092VVFuNE8xZHFwamptenVhMHNndXFIdlAxWFFTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cee684f-dda4-414f-8427-0f4f07e9ef54", "record_id": "flaws_cloudtrail:0000328:6cee684f-dda4-414f-8427-0f4f07e9ef54", "row_index": 328, "timestamp": "2019-08-02T18:28:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cee684f-dda4-414f-8427-0f4f07e9ef54", "eventTime": "2019-08-02T18:28:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvcE1YdUMvdmdpYkhiM2wvRlpLbkE0djJzRjl1bTJjNWNCQzRGSE5HZk5xajNqV0F2ZU43RkJKMDErdzNvVEpnV0tONUFzL2l1b1BHQUhFemJ3ajRKTVJCWXpyalUzTlFnMmptNGV0NVhnOFV1Y2JvaHZZcmsvd3FhK3RhQmRSZUZCMmRpZEM5ZXJkSXhmZnJNaEhlNWRHTjBCcE1BRkppcG9WRFZIRXpTdWNrN1lXZ092VVFuNE8xZHFwamptenVhMHNndXFIdlAxWFFTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e65860-e253-4005-ad6a-a9d7ebed8199", "record_id": "flaws_cloudtrail:0000329:e65860-e253-4005-ad6a-a9d7ebed8199", "row_index": 329, "timestamp": "2019-08-02T18:28:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e65860-e253-4005-ad6a-a9d7ebed8199", "eventTime": "2019-08-02T18:28:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFM3NWQ2xXRnh6NXA4bm4xMGhvb2Zlc3dBZU0yK1NqRlJtUDA2KzZBbE1uRU9YMzczYW5OTWxYaFMwRnIya2NpMUN3STdrTEd1UzN0KzlJa2N6R0JWUlBsY01nRHlPc0N1QTJJc095R1NXK2VWclpCYlNKclNIbE4xMHdVNitsTGhnUHAyTUpxeEhCN2IyL2ZxUFVacXZCYUJvNG43WGZYQ0psQ092a1pYTzRTbmZQVVNpdDNvMjFwdUhIQ3cxZlpqUy9Ed0JLVCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e65860-e253-4005-ad6a-a9d7ebed8199", "record_id": "flaws_cloudtrail:0000330:e65860-e253-4005-ad6a-a9d7ebed8199", "row_index": 330, "timestamp": "2019-08-02T18:28:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e65860-e253-4005-ad6a-a9d7ebed8199", "eventTime": "2019-08-02T18:28:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFM3NWQ2xXRnh6NXA4bm4xMGhvb2Zlc3dBZU0yK1NqRlJtUDA2KzZBbE1uRU9YMzczYW5OTWxYaFMwRnIya2NpMUN3STdrTEd1UzN0KzlJa2N6R0JWUlBsY01nRHlPc0N1QTJJc095R1NXK2VWclpCYlNKclNIbE4xMHdVNitsTGhnUHAyTUpxeEhCN2IyL2ZxUFVacXZCYUJvNG43WGZYQ0psQ092a1pYTzRTbmZQVVNpdDNvMjFwdUhIQ3cxZlpqUy9Ed0JLVCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7fb135-f357-40ba-ac4b-84108489e01e", "record_id": "flaws_cloudtrail:0000331:3c7fb135-f357-40ba-ac4b-84108489e01e", "row_index": 331, "timestamp": "2019-08-02T18:28:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7fb135-f357-40ba-ac4b-84108489e01e", "eventTime": "2019-08-02T18:28:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SUNJUERvbWxkVVhzeUJCa1hBOElDamF1T3NmTzQ0YmNVQUpYWllLd3Z6UndSMXlEU1p1N20yQTY2QURCazU3dHFqSEpHN1ZkUmlNR2FhbGpQdW1RWkFwVllRS3VmQi9DSzNlSDdrSmJzd3pGUldhRXZiTnRqZ1lXb25qTlcxSlFuTkh5TGsxSUdOT21GckYxOUE2TTdib0xDTnVYazF3SG5RRXRJYmRsVVpwdG0wRkdlQUN3VEt1WVJHT0dJMXNNakVGTnpMc2oyMGZOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7fb135-f357-40ba-ac4b-84108489e01e", "record_id": "flaws_cloudtrail:0000332:3c7fb135-f357-40ba-ac4b-84108489e01e", "row_index": 332, "timestamp": "2019-08-02T18:28:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7fb135-f357-40ba-ac4b-84108489e01e", "eventTime": "2019-08-02T18:28:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SUNJUERvbWxkVVhzeUJCa1hBOElDamF1T3NmTzQ0YmNVQUpYWllLd3Z6UndSMXlEU1p1N20yQTY2QURCazU3dHFqSEpHN1ZkUmlNR2FhbGpQdW1RWkFwVllRS3VmQi9DSzNlSDdrSmJzd3pGUldhRXZiTnRqZ1lXb25qTlcxSlFuTkh5TGsxSUdOT21GckYxOUE2TTdib0xDTnVYazF3SG5RRXRJYmRsVVpwdG0wRkdlQUN3VEt1WVJHT0dJMXNNakVGTnpMc2oyMGZOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddfc9122-965b-4d96-8b19-9f11ac147f16", "record_id": "flaws_cloudtrail:0000333:ddfc9122-965b-4d96-8b19-9f11ac147f16", "row_index": 333, "timestamp": "2019-08-02T18:28:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddfc9122-965b-4d96-8b19-9f11ac147f16", "eventTime": "2019-08-02T18:28:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqVHU0VDE4MHdTaDNDTnpNdUxTN0RJUm9namFaZlBpUXBWRmJwa0VWelkzLytreGlydVhwSitZbjJzZUYvMkMyZEtlUEovVklZS1VYNFJSNm54WEFoME1iMFRIN2hUZE80TXBPaTFCWmZwSnV0MXNYRGNTcW93VE90d1E1dUYvUTJ0VEdPcUtSS251b09acU5aK1FJTGpzd0JTS1VXSFNndnFuQUd5UXFleG45MmVRNFU0eGQyaFJZNVdNZG9lcktDTlFqT2VHSmhqRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddfc9122-965b-4d96-8b19-9f11ac147f16", "record_id": "flaws_cloudtrail:0000334:ddfc9122-965b-4d96-8b19-9f11ac147f16", "row_index": 334, "timestamp": "2019-08-02T18:28:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddfc9122-965b-4d96-8b19-9f11ac147f16", "eventTime": "2019-08-02T18:28:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqVHU0VDE4MHdTaDNDTnpNdUxTN0RJUm9namFaZlBpUXBWRmJwa0VWelkzLytreGlydVhwSitZbjJzZUYvMkMyZEtlUEovVklZS1VYNFJSNm54WEFoME1iMFRIN2hUZE80TXBPaTFCWmZwSnV0MXNYRGNTcW93VE90d1E1dUYvUTJ0VEdPcUtSS251b09acU5aK1FJTGpzd0JTS1VXSFNndnFuQUd5UXFleG45MmVRNFU0eGQyaFJZNVdNZG9lcktDTlFqT2VHSmhqRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cb7f8ec-b044-41df-9f34-8713c97d234c", "record_id": "flaws_cloudtrail:0000335:3cb7f8ec-b044-41df-9f34-8713c97d234c", "row_index": 335, "timestamp": "2019-08-02T18:28:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cb7f8ec-b044-41df-9f34-8713c97d234c", "eventTime": "2019-08-02T18:28:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK0RWZy96aExnV0syek9HbXI0R2xBZEREY21JRlRtaDJiZFU0NkhUUmt6TEZqUHlpQ1U3c05XOGczNlQ1KzFwVlFnTjlPTmFhSDBzbDVIUTc3Y1h5dk5jK3pxZTdPUzhKeVVZaUg5TW5pVGdjaUNVVzNpZStMN0VYc01uaU1YYXFhbmNsYjZBUk5MaXE0K2JJQ0hIQ3hNQStFQndPMXVsQ2tvRndRSlVZUHZxc0I4eDlNZlVHTEdFVGt3Q1JWeVFLWTEwbDZUWUhUOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cb7f8ec-b044-41df-9f34-8713c97d234c", "record_id": "flaws_cloudtrail:0000336:3cb7f8ec-b044-41df-9f34-8713c97d234c", "row_index": 336, "timestamp": "2019-08-02T18:28:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cb7f8ec-b044-41df-9f34-8713c97d234c", "eventTime": "2019-08-02T18:28:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK0RWZy96aExnV0syek9HbXI0R2xBZEREY21JRlRtaDJiZFU0NkhUUmt6TEZqUHlpQ1U3c05XOGczNlQ1KzFwVlFnTjlPTmFhSDBzbDVIUTc3Y1h5dk5jK3pxZTdPUzhKeVVZaUg5TW5pVGdjaUNVVzNpZStMN0VYc01uaU1YYXFhbmNsYjZBUk5MaXE0K2JJQ0hIQ3hNQStFQndPMXVsQ2tvRndRSlVZUHZxc0I4eDlNZlVHTEdFVGt3Q1JWeVFLWTEwbDZUWUhUOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75aa381a-5faa-40d5-bb72-646b7287a338", "record_id": "flaws_cloudtrail:0000337:75aa381a-5faa-40d5-bb72-646b7287a338", "row_index": 337, "timestamp": "2019-08-02T18:28:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75aa381a-5faa-40d5-bb72-646b7287a338", "eventTime": "2019-08-02T18:28:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxL2NUR0F1ZVVwZGNSbzRQamhXNkRIdDZVaGVaaEV1am9kQ0g3bzV3YW5QeDhmMkJIS2FrdFl0c2dCUmYrLzRXTmdzSzh3TEZFUkJWQ3lHbS84VnNCQzA5ZW44Y1V2V2JGemxLdEFwT25OMGpwSS8vTlRsN1lnQ1JQc294dDBCMWdpZjVFZExsMDZ3OHpZMXc2WFVSbUFacUYzMUhFTmlRZFNESXFyZTRWOEEybXphRjhhU0hDY01XQ1FYbDFIbEdSS2FXYmZtdGVEZW1yQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75aa381a-5faa-40d5-bb72-646b7287a338", "record_id": "flaws_cloudtrail:0000338:75aa381a-5faa-40d5-bb72-646b7287a338", "row_index": 338, "timestamp": "2019-08-02T18:28:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75aa381a-5faa-40d5-bb72-646b7287a338", "eventTime": "2019-08-02T18:28:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxL2NUR0F1ZVVwZGNSbzRQamhXNkRIdDZVaGVaaEV1am9kQ0g3bzV3YW5QeDhmMkJIS2FrdFl0c2dCUmYrLzRXTmdzSzh3TEZFUkJWQ3lHbS84VnNCQzA5ZW44Y1V2V2JGemxLdEFwT25OMGpwSS8vTlRsN1lnQ1JQc294dDBCMWdpZjVFZExsMDZ3OHpZMXc2WFVSbUFacUYzMUhFTmlRZFNESXFyZTRWOEEybXphRjhhU0hDY01XQ1FYbDFIbEdSS2FXYmZtdGVEZW1yQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "record_id": "flaws_cloudtrail:0000339:77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "row_index": 339, "timestamp": "2019-08-02T18:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "eventTime": "2019-08-02T18:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVU0pCazIzVzBJT3oxMnlYRVAxMzU4WVpqVWNoMFc2QmFnUmd0Y0lhUUh3bm1HTnFaNTVqWDE0QWZ3KzlqZmxST2U4cUI3N0FqVzFFanhGZEtXQ2grbHNmOFUxRFlrRjkyU285dzZ6K3lKUDJ4cWdXdFkzcEZ4TGxqNENWVmhINXY1Y04wbkNqZ3Z1dkN2K3VZSGV3NThaQjl5cm1qZDExZXMxcEZxOWpDS1ZIcmxSWERqN1g1RXdVQUNwSUUyQzMwTnN6M0NBU25BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "record_id": "flaws_cloudtrail:0000340:c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "row_index": 340, "timestamp": "2019-08-02T18:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "eventTime": "2019-08-02T18:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmczg1SitKeDNIZWFnYkVBcS9ITVNZQzl1Z1JKWC9lRUplNE02R05tVC9oOE9oT1NEcWdiL2YzM3NwT1dKLzBJL2IxQllEYk95M2I2SFVwY3liNHNHY0tpRGFHZml5RkkzZWg5cWJ3K3BqVWNHSWpFNG8yNTMzeWc2ZjNrNTdHdTM4L1FLOU42MUdXd1ZNSFJNdkpTUWlyOSt3SGI2YjRhWFlMdUJIdjVnOFF1SEs2a21sZGVwQURqYitmWXBmT0FnZDhTL2xiNjIzKytpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "record_id": "flaws_cloudtrail:0000341:77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "row_index": 341, "timestamp": "2019-08-02T18:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c6e9e2-b6db-4c0e-ad28-fcdd620e261f", "eventTime": "2019-08-02T18:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVU0pCazIzVzBJT3oxMnlYRVAxMzU4WVpqVWNoMFc2QmFnUmd0Y0lhUUh3bm1HTnFaNTVqWDE0QWZ3KzlqZmxST2U4cUI3N0FqVzFFanhGZEtXQ2grbHNmOFUxRFlrRjkyU285dzZ6K3lKUDJ4cWdXdFkzcEZ4TGxqNENWVmhINXY1Y04wbkNqZ3Z1dkN2K3VZSGV3NThaQjl5cm1qZDExZXMxcEZxOWpDS1ZIcmxSWERqN1g1RXdVQUNwSUUyQzMwTnN6M0NBU25BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "record_id": "flaws_cloudtrail:0000342:c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "row_index": 342, "timestamp": "2019-08-02T18:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e5a678-d6ce-44a6-9c35-a1424f96a3ca", "eventTime": "2019-08-02T18:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmczg1SitKeDNIZWFnYkVBcS9ITVNZQzl1Z1JKWC9lRUplNE02R05tVC9oOE9oT1NEcWdiL2YzM3NwT1dKLzBJL2IxQllEYk95M2I2SFVwY3liNHNHY0tpRGFHZml5RkkzZWg5cWJ3K3BqVWNHSWpFNG8yNTMzeWc2ZjNrNTdHdTM4L1FLOU42MUdXd1ZNSFJNdkpTUWlyOSt3SGI2YjRhWFlMdUJIdjVnOFF1SEs2a21sZGVwQURqYitmWXBmT0FnZDhTL2xiNjIzKytpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "record_id": "flaws_cloudtrail:0000343:1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "row_index": 343, "timestamp": "2019-08-02T18:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "eventTime": "2019-08-02T18:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTVEzLys3T3Zid1BvYWpTUThVSnpxeDJlK0d5YnYxcjZ0NHNDMlFDd05MTmpMK3owdEQrVFNTS0xub1ZmcjRTTTVpazNJZ3NTMDJST0NUMk40VDlheTFzUE8vMGxPY0s3Q24vZTk0bUNZWlBkQVJCS0FwMFErcFdTYVVzanY5Unc2b1V2M0l5cnhmbStMZHFaOHk3ejJYdjkyWk5KUzNTSkZZNDZnNWdNYzV2SHY5aWk5QTJVcXVjU3BtcEZvcEJmSlh1N1gwVWJnNVlxaUM3ZldyWHR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "record_id": "flaws_cloudtrail:0000344:f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "row_index": 344, "timestamp": "2019-08-02T18:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "eventTime": "2019-08-02T18:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrY2lwYVFFckFXdXVlZFUrNm1NTmM1bWdDTzh0UUNqTTVLdUM1SnhOYlA4YTVIMkVaQ3JvclBvMEFTQjdDREx6RVd2TG5pRXQxU2EyRi9QdFNFUkh5R3NrTDZYY1UwMjlVRjBRc1NxRks1dUpZYXN4SExRNlNlcEY1emxHKzZORWh0d2tSRVhxT1I3bHVhTVk2RzhWbHZWUW9Sb013cnpMMEFDWjJobnYwN3RvQkt1dFNSaTI5bU81b1N6eHNVM1ExMnNKamZrc05KQnAzbWp1NFlSc3RrbkNTeHNFQ0JNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "record_id": "flaws_cloudtrail:0000345:1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "row_index": 345, "timestamp": "2019-08-02T18:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecc6de5-0ecd-4554-ae5c-eb58d9149606", "eventTime": "2019-08-02T18:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTVEzLys3T3Zid1BvYWpTUThVSnpxeDJlK0d5YnYxcjZ0NHNDMlFDd05MTmpMK3owdEQrVFNTS0xub1ZmcjRTTTVpazNJZ3NTMDJST0NUMk40VDlheTFzUE8vMGxPY0s3Q24vZTk0bUNZWlBkQVJCS0FwMFErcFdTYVVzanY5Unc2b1V2M0l5cnhmbStMZHFaOHk3ejJYdjkyWk5KUzNTSkZZNDZnNWdNYzV2SHY5aWk5QTJVcXVjU3BtcEZvcEJmSlh1N1gwVWJnNVlxaUM3ZldyWHR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "record_id": "flaws_cloudtrail:0000346:f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "row_index": 346, "timestamp": "2019-08-02T18:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5f51d1f-ea22-4e16-bb76-9f5e76c38492", "eventTime": "2019-08-02T18:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrY2lwYVFFckFXdXVlZFUrNm1NTmM1bWdDTzh0UUNqTTVLdUM1SnhOYlA4YTVIMkVaQ3JvclBvMEFTQjdDREx6RVd2TG5pRXQxU2EyRi9QdFNFUkh5R3NrTDZYY1UwMjlVRjBRc1NxRks1dUpZYXN4SExRNlNlcEY1emxHKzZORWh0d2tSRVhxT1I3bHVhTVk2RzhWbHZWUW9Sb013cnpMMEFDWjJobnYwN3RvQkt1dFNSaTI5bU81b1N6eHNVM1ExMnNKamZrc05KQnAzbWp1NFlSc3RrbkNTeHNFQ0JNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c10a7fe-ead9-4742-818b-dded17bef9bb", "record_id": "flaws_cloudtrail:0000347:7c10a7fe-ead9-4742-818b-dded17bef9bb", "row_index": 347, "timestamp": "2019-08-02T18:28:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c10a7fe-ead9-4742-818b-dded17bef9bb", "eventTime": "2019-08-02T18:28:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSVJ3M0YzNUlSMGY1MGtPY2REbWczbFo1TFlSOFlaWUZJWXJKSVFWZUUvVk1wKy83RmZtUGJvMDZ5NThEMnFHYWswRUJOMC9GVEk0cmlnMStseUJSMWU4bTFWSU9JQ0F2b1VEQ29pNmpDeHlJbk9naDA0Y0VyZWp0c1E2dGFFTSt2a25VaWxkMXJYUWxqdCtndUoxaGRqSTNrcVRSeks2VHM5TXdXM2JzbkZsUXp2bUgrMzkyYjFDRHN2KzQzMDV6eUt6RHk0dElqY3FxM1MrWHBYSEFobk1NcytVUGZBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c10a7fe-ead9-4742-818b-dded17bef9bb", "record_id": "flaws_cloudtrail:0000348:7c10a7fe-ead9-4742-818b-dded17bef9bb", "row_index": 348, "timestamp": "2019-08-02T18:28:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c10a7fe-ead9-4742-818b-dded17bef9bb", "eventTime": "2019-08-02T18:28:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSVJ3M0YzNUlSMGY1MGtPY2REbWczbFo1TFlSOFlaWUZJWXJKSVFWZUUvVk1wKy83RmZtUGJvMDZ5NThEMnFHYWswRUJOMC9GVEk0cmlnMStseUJSMWU4bTFWSU9JQ0F2b1VEQ29pNmpDeHlJbk9naDA0Y0VyZWp0c1E2dGFFTSt2a25VaWxkMXJYUWxqdCtndUoxaGRqSTNrcVRSeks2VHM5TXdXM2JzbkZsUXp2bUgrMzkyYjFDRHN2KzQzMDV6eUt6RHk0dElqY3FxM1MrWHBYSEFobk1NcytVUGZBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "record_id": "flaws_cloudtrail:0000349:11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "row_index": 349, "timestamp": "2019-08-02T18:28:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "eventTime": "2019-08-02T18:28:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQSWo4aEF3NGc3S0twMHdJbjVCUklwR1ExU05TbkdOQjJDUUhlcTFmR0NmYXB0RER1NFlqQm0zRE5nZlpOOHl3QkxOL2NzUnJSRGsrMlZiaTZVUzVyZFpuMGZ0YnNYUTkrNTRXNUpES3FKZWFVTFh6OFAwK0ZKaU1LaFdXOS80TTVvckxuc0VaaTZPMDRQRGlFRGpUREdsOHpRRHorUC9QYUE1bHpNZUpYSmRzZ005L1UrQ0NONnpSMUVaMlNDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "record_id": "flaws_cloudtrail:0000350:11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "row_index": 350, "timestamp": "2019-08-02T18:28:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d5fdbf-0cd6-4de7-9936-4de64ee126f3", "eventTime": "2019-08-02T18:28:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQSWo4aEF3NGc3S0twMHdJbjVCUklwR1ExU05TbkdOQjJDUUhlcTFmR0NmYXB0RER1NFlqQm0zRE5nZlpOOHl3QkxOL2NzUnJSRGsrMlZiaTZVUzVyZFpuMGZ0YnNYUTkrNTRXNUpES3FKZWFVTFh6OFAwK0ZKaU1LaFdXOS80TTVvckxuc0VaaTZPMDRQRGlFRGpUREdsOHpRRHorUC9QYUE1bHpNZUpYSmRzZ005L1UrQ0NONnpSMUVaMlNDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72293c6e-2b5d-4203-b40d-29079af5bf75", "record_id": "flaws_cloudtrail:0000351:72293c6e-2b5d-4203-b40d-29079af5bf75", "row_index": 351, "timestamp": "2019-08-02T18:28:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72293c6e-2b5d-4203-b40d-29079af5bf75", "eventTime": "2019-08-02T18:28:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUGNwVURhUHpBd0J0RlVoMmtEUDlIRXBtb2I4VFJ0cEdHa1FRRThad0JTMkszeHUraGUvblVuNkdSVjlQb1JQODhVakNaM1R0ME9FcHhaUFFBN0RWSEUzdzgyUUtKbzVKSUcya3ZiRi9TenBiVFg2MnJtbGVmdGZDS2JVQ0V1RzdYMzNramk2MGhmSVhtZmVMbDA3Sy9OV2ZqcHJEVXhRWkFGMUdqNmJaMEVlMnJwblFhUGZpRTV0OHpTbS9EOU5OQ1JzN2EvamVlYURxZ3hwd0RpNFNSU283ZHJsREpzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72293c6e-2b5d-4203-b40d-29079af5bf75", "record_id": "flaws_cloudtrail:0000352:72293c6e-2b5d-4203-b40d-29079af5bf75", "row_index": 352, "timestamp": "2019-08-02T18:28:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72293c6e-2b5d-4203-b40d-29079af5bf75", "eventTime": "2019-08-02T18:28:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUGNwVURhUHpBd0J0RlVoMmtEUDlIRXBtb2I4VFJ0cEdHa1FRRThad0JTMkszeHUraGUvblVuNkdSVjlQb1JQODhVakNaM1R0ME9FcHhaUFFBN0RWSEUzdzgyUUtKbzVKSUcya3ZiRi9TenBiVFg2MnJtbGVmdGZDS2JVQ0V1RzdYMzNramk2MGhmSVhtZmVMbDA3Sy9OV2ZqcHJEVXhRWkFGMUdqNmJaMEVlMnJwblFhUGZpRTV0OHpTbS9EOU5OQ1JzN2EvamVlYURxZ3hwd0RpNFNSU283ZHJsREpzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a907a7d7-56ba-4f12-b950-863812df933", "record_id": "flaws_cloudtrail:0000353:a907a7d7-56ba-4f12-b950-863812df933", "row_index": 353, "timestamp": "2019-08-02T18:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a907a7d7-56ba-4f12-b950-863812df933", "eventTime": "2019-08-02T18:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwV3VEaVkyWVgxTTg3MnpDTE14MTBUc3JLZStQTmdERGpIbXBlOVg0YkpPTytLdCtlNGpZL2FkMm9vSzBKYjNSYmNaRml0anphZzRKcHlzNEtiT1d5ZFVsT0wyNXhnK3dYK0poNFdjeFNrdk05N3R5WHhLMFMvc3dFa0lSZlJERmwwK0NqYnlJeFhhQ0xvaFI3VWo0aHVCMGFQK0E3dTUvNENyT0xjYTVSWU55RkZhbUJDMnU0VndSNFZLTjVJSE1qYTcreVU3VmViRm1yT0tQWTJwQmdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a907a7d7-56ba-4f12-b950-863812df933", "record_id": "flaws_cloudtrail:0000354:a907a7d7-56ba-4f12-b950-863812df933", "row_index": 354, "timestamp": "2019-08-02T18:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a907a7d7-56ba-4f12-b950-863812df933", "eventTime": "2019-08-02T18:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwV3VEaVkyWVgxTTg3MnpDTE14MTBUc3JLZStQTmdERGpIbXBlOVg0YkpPTytLdCtlNGpZL2FkMm9vSzBKYjNSYmNaRml0anphZzRKcHlzNEtiT1d5ZFVsT0wyNXhnK3dYK0poNFdjeFNrdk05N3R5WHhLMFMvc3dFa0lSZlJERmwwK0NqYnlJeFhhQ0xvaFI3VWo0aHVCMGFQK0E3dTUvNENyT0xjYTVSWU55RkZhbUJDMnU0VndSNFZLTjVJSE1qYTcreVU3VmViRm1yT0tQWTJwQmdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "record_id": "flaws_cloudtrail:0000355:4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "row_index": 355, "timestamp": "2019-08-02T18:28:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "eventTime": "2019-08-02T18:28:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0MlByN0psL0dxS0xTZGlocFdDOU1jK2RYV092dkdBMzZDYW5EL1dNVWQvaW5MTmtuR0NnY1gyYkFBc0RveU5OSWVSa29kaHlGN1FITzNUOU80dGNmNDZyNkRhTlNKT281WmVRSHhkQ1dDU3Mwb2owSUEyV3hKaHE1OTN2VHg4bklUcytxUDBDTzJHQ3hQb3lwODhyUFBXVjlZQjM2MmVJZ0hYcW9zVDRqVGlTdHNVaG5HZmFadVF4SVFGREd4ZGFiMzVNa0dPY01JRnJjYmhQWFNodEJpMWFZQmlMVzBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "record_id": "flaws_cloudtrail:0000356:4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "row_index": 356, "timestamp": "2019-08-02T18:28:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac4a48a-f02c-4c64-a9ae-ba0073d225ad", "eventTime": "2019-08-02T18:28:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0MlByN0psL0dxS0xTZGlocFdDOU1jK2RYV092dkdBMzZDYW5EL1dNVWQvaW5MTmtuR0NnY1gyYkFBc0RveU5OSWVSa29kaHlGN1FITzNUOU80dGNmNDZyNkRhTlNKT281WmVRSHhkQ1dDU3Mwb2owSUEyV3hKaHE1OTN2VHg4bklUcytxUDBDTzJHQ3hQb3lwODhyUFBXVjlZQjM2MmVJZ0hYcW9zVDRqVGlTdHNVaG5HZmFadVF4SVFGREd4ZGFiMzVNa0dPY01JRnJjYmhQWFNodEJpMWFZQmlMVzBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1308de0-eb6d-4ddf-b96e-3104de56a709", "record_id": "flaws_cloudtrail:0000357:c1308de0-eb6d-4ddf-b96e-3104de56a709", "row_index": 357, "timestamp": "2019-08-02T18:28:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1308de0-eb6d-4ddf-b96e-3104de56a709", "eventTime": "2019-08-02T18:28:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjd3lIN3VVY1hkVyt3WnFoMG9zb2pCcHBaeFBVanZDcHkycHZxVGpoNUt0UkpvUXRxbEdWRTVpRkdWNEdjYVVrRFJIRG5GNEJ1ZThOUjdHYy9pVVlIM0p2V2RJQ0h4NlZaSUN6SFJjZmhlQmZUaHRYdDEyZFQ3TzBwTU1CWUgzSHFUOFQ1QzV5SDFjTXFCb1dRRU1Hb2lES2ZzellpaWFRbmZvRXJBckdjZkhnYkJmZ1U0Q0dzaHkvTlR3aldodlhnQXZ5Y3pocml0MXNlQ0luL1hOS1JnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1308de0-eb6d-4ddf-b96e-3104de56a709", "record_id": "flaws_cloudtrail:0000358:c1308de0-eb6d-4ddf-b96e-3104de56a709", "row_index": 358, "timestamp": "2019-08-02T18:28:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1308de0-eb6d-4ddf-b96e-3104de56a709", "eventTime": "2019-08-02T18:28:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjd3lIN3VVY1hkVyt3WnFoMG9zb2pCcHBaeFBVanZDcHkycHZxVGpoNUt0UkpvUXRxbEdWRTVpRkdWNEdjYVVrRFJIRG5GNEJ1ZThOUjdHYy9pVVlIM0p2V2RJQ0h4NlZaSUN6SFJjZmhlQmZUaHRYdDEyZFQ3TzBwTU1CWUgzSHFUOFQ1QzV5SDFjTXFCb1dRRU1Hb2lES2ZzellpaWFRbmZvRXJBckdjZkhnYkJmZ1U0Q0dzaHkvTlR3aldodlhnQXZ5Y3pocml0MXNlQ0luL1hOS1JnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe7f3007-b3af-4d55-86c7-7d98514edbd", "record_id": "flaws_cloudtrail:0000359:fe7f3007-b3af-4d55-86c7-7d98514edbd", "row_index": 359, "timestamp": "2019-08-02T18:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe7f3007-b3af-4d55-86c7-7d98514edbd", "eventTime": "2019-08-02T18:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWnp0VGc5TU9EV1hrNEpGSFZiSDVham5sK3JveFlUOGg5Q09JVUM1THlPV0Vkei8ycHhuaVdHazJpYy8zS1RBaVpmcTBOWG1VV3ZGbHJjRXQvSkRCTWJhSlVFVjhzY3R6QTZtbHQ1M1RXMy9sRWl4YXdhYTBmSzQrNWJ2UUJBNG9sWElmcFVRaFR6U0JRVzVwUEQ2b3o1VnYzeS9DbHF5WUpPVjRLZk95ckdtVlVhYkMyOFNQV21hOG55TUdtbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47a4ebf-e73e-49f6-803d-960204d3f70c", "record_id": "flaws_cloudtrail:0000360:a47a4ebf-e73e-49f6-803d-960204d3f70c", "row_index": 360, "timestamp": "2019-08-02T18:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47a4ebf-e73e-49f6-803d-960204d3f70c", "eventTime": "2019-08-02T18:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGQVBxb2Z6UWx1OWZuUkJqMTVBQlB5eElCcFJDVE4xdGwzM0V1NnN1cnFpdkluVldjeGlJMTBqczNlQk1NREduVUpFcHdGdTc0dTBXTFdFZmdyanJXQmtpczFNTjZIV29Db1lnVEdwZnBhVXNtUmduRkkrUnUwR2k4N2JGUUFRL2ZkOGRRV2lTVWdlODZWd2lQTmEzK1A0Nitnb3pkK1I3c3dQMXN2NWhYb2NuYUdwVEVRdi9KMCtXWjFhVXNJOVZWakttL2tkOU5rVXFMT3NlRU9lbGQ2ZEVNTytaaEQ4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe7f3007-b3af-4d55-86c7-7d98514edbd", "record_id": "flaws_cloudtrail:0000361:fe7f3007-b3af-4d55-86c7-7d98514edbd", "row_index": 361, "timestamp": "2019-08-02T18:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe7f3007-b3af-4d55-86c7-7d98514edbd", "eventTime": "2019-08-02T18:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWnp0VGc5TU9EV1hrNEpGSFZiSDVham5sK3JveFlUOGg5Q09JVUM1THlPV0Vkei8ycHhuaVdHazJpYy8zS1RBaVpmcTBOWG1VV3ZGbHJjRXQvSkRCTWJhSlVFVjhzY3R6QTZtbHQ1M1RXMy9sRWl4YXdhYTBmSzQrNWJ2UUJBNG9sWElmcFVRaFR6U0JRVzVwUEQ2b3o1VnYzeS9DbHF5WUpPVjRLZk95ckdtVlVhYkMyOFNQV21hOG55TUdtbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47a4ebf-e73e-49f6-803d-960204d3f70c", "record_id": "flaws_cloudtrail:0000362:a47a4ebf-e73e-49f6-803d-960204d3f70c", "row_index": 362, "timestamp": "2019-08-02T18:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47a4ebf-e73e-49f6-803d-960204d3f70c", "eventTime": "2019-08-02T18:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGQVBxb2Z6UWx1OWZuUkJqMTVBQlB5eElCcFJDVE4xdGwzM0V1NnN1cnFpdkluVldjeGlJMTBqczNlQk1NREduVUpFcHdGdTc0dTBXTFdFZmdyanJXQmtpczFNTjZIV29Db1lnVEdwZnBhVXNtUmduRkkrUnUwR2k4N2JGUUFRL2ZkOGRRV2lTVWdlODZWd2lQTmEzK1A0Nitnb3pkK1I3c3dQMXN2NWhYb2NuYUdwVEVRdi9KMCtXWjFhVXNJOVZWakttL2tkOU5rVXFMT3NlRU9lbGQ2ZEVNTytaaEQ4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0310c85-120e-49a1-b2d5-08c76180a9d", "record_id": "flaws_cloudtrail:0000363:b0310c85-120e-49a1-b2d5-08c76180a9d", "row_index": 363, "timestamp": "2019-08-02T18:28:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0310c85-120e-49a1-b2d5-08c76180a9d", "eventTime": "2019-08-02T18:28:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0310c85-120e-49a1-b2d5-08c76180a9d", "record_id": "flaws_cloudtrail:0000364:b0310c85-120e-49a1-b2d5-08c76180a9d", "row_index": 364, "timestamp": "2019-08-02T18:28:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0310c85-120e-49a1-b2d5-08c76180a9d", "eventTime": "2019-08-02T18:28:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8dead2-2756-4e02-945b-e6ad53650050", "record_id": "flaws_cloudtrail:0000365:2d8dead2-2756-4e02-945b-e6ad53650050", "row_index": 365, "timestamp": "2019-08-02T18:29:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8dead2-2756-4e02-945b-e6ad53650050", "eventTime": "2019-08-02T18:29:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8dead2-2756-4e02-945b-e6ad53650050", "record_id": "flaws_cloudtrail:0000366:2d8dead2-2756-4e02-945b-e6ad53650050", "row_index": 366, "timestamp": "2019-08-02T18:29:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8dead2-2756-4e02-945b-e6ad53650050", "eventTime": "2019-08-02T18:29:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e96e86-03a6-4b92-8338-87006b576", "record_id": "flaws_cloudtrail:0000367:89e96e86-03a6-4b92-8338-87006b576", "row_index": 367, "timestamp": "2019-08-02T18:29:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e96e86-03a6-4b92-8338-87006b576", "eventTime": "2019-08-02T18:29:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e96e86-03a6-4b92-8338-87006b576", "record_id": "flaws_cloudtrail:0000368:89e96e86-03a6-4b92-8338-87006b576", "row_index": 368, "timestamp": "2019-08-02T18:29:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e96e86-03a6-4b92-8338-87006b576", "eventTime": "2019-08-02T18:29:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378c23fa-10bf-42c6-b891-d194abe2a5ee", "record_id": "flaws_cloudtrail:0000369:378c23fa-10bf-42c6-b891-d194abe2a5ee", "row_index": 369, "timestamp": "2019-08-02T18:29:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378c23fa-10bf-42c6-b891-d194abe2a5ee", "eventTime": "2019-08-02T18:29:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378c23fa-10bf-42c6-b891-d194abe2a5ee", "record_id": "flaws_cloudtrail:0000370:378c23fa-10bf-42c6-b891-d194abe2a5ee", "row_index": 370, "timestamp": "2019-08-02T18:29:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378c23fa-10bf-42c6-b891-d194abe2a5ee", "eventTime": "2019-08-02T18:29:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c8e2ec7-ec64-457f-8212-94bb438246acb", "record_id": "flaws_cloudtrail:0000371:2c8e2ec7-ec64-457f-8212-94bb438246acb", "row_index": 371, "timestamp": "2019-08-02T18:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c8e2ec7-ec64-457f-8212-94bb438246acb", "eventTime": "2019-08-02T18:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c8e2ec7-ec64-457f-8212-94bb438246acb", "record_id": "flaws_cloudtrail:0000372:2c8e2ec7-ec64-457f-8212-94bb438246acb", "row_index": 372, "timestamp": "2019-08-02T18:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c8e2ec7-ec64-457f-8212-94bb438246acb", "eventTime": "2019-08-02T18:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "record_id": "flaws_cloudtrail:0000373:a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "row_index": 373, "timestamp": "2019-08-02T18:29:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "eventTime": "2019-08-02T18:29:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwaStYZlp4NlNNc0NkSHEzeWRUZGk5ZDdlV1ZualNpY1Vld1kzbklVakFQZ1FuVHhaMGJUb0U5UHlkQ3VXOEpRZTZxbEZRMEpDWjJsU3BhaXVPQk9YbXNqeWE3WW1TUGZYSXVqRDJVckZCb2RHRmIvdyszVlRxck5nYVYraVYvZ0pMNXJ4UG40aHVBSXZRc2Y5cFVyclpXUjV5STFTNHlSY1ZkVFJORUpPWnFCMGlCdEo3R2hZQ1VpWXU2WlM2NXk4MVhsd3lxL2Jjbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "record_id": "flaws_cloudtrail:0000374:a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "row_index": 374, "timestamp": "2019-08-02T18:29:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a644cf5b-3bcb-40ca-b8a6-eb75860ba4", "eventTime": "2019-08-02T18:29:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwaStYZlp4NlNNc0NkSHEzeWRUZGk5ZDdlV1ZualNpY1Vld1kzbklVakFQZ1FuVHhaMGJUb0U5UHlkQ3VXOEpRZTZxbEZRMEpDWjJsU3BhaXVPQk9YbXNqeWE3WW1TUGZYSXVqRDJVckZCb2RHRmIvdyszVlRxck5nYVYraVYvZ0pMNXJ4UG40aHVBSXZRc2Y5cFVyclpXUjV5STFTNHlSY1ZkVFJORUpPWnFCMGlCdEo3R2hZQ1VpWXU2WlM2NXk4MVhsd3lxL2Jjbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5edfab9c-26df-455c-ba64-1c859868f56c9", "record_id": "flaws_cloudtrail:0000375:5edfab9c-26df-455c-ba64-1c859868f56c9", "row_index": 375, "timestamp": "2019-08-02T18:29:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5edfab9c-26df-455c-ba64-1c859868f56c9", "eventTime": "2019-08-02T18:29:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWem0rNFRvSnFiZDc3Vjd0Yk84eFlxbW9PYmNEVWtWT2VkbnB1REhUTkJxa3RBLzNpWlRRd2dXY0dpYmxxYXdBZjRaK3hmTnN6dXFFaFRlazdrRkp2bU54QUhzY0p5c2pDUFFwd0FxemFvV2ZTN3p3dnFCZHVPcHBicDQ4TjdWa3k2U1AxZVFOSENWcC91YXdmK3JMNVBjL1h5SGhMT1Nvb0U4aWZkQ0RSaGttUThnK2lWUmdoTWIvZTAvL2U2eFRCRHZ3b1pJUTMwcFR0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5edfab9c-26df-455c-ba64-1c859868f56c9", "record_id": "flaws_cloudtrail:0000376:5edfab9c-26df-455c-ba64-1c859868f56c9", "row_index": 376, "timestamp": "2019-08-02T18:29:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5edfab9c-26df-455c-ba64-1c859868f56c9", "eventTime": "2019-08-02T18:29:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWem0rNFRvSnFiZDc3Vjd0Yk84eFlxbW9PYmNEVWtWT2VkbnB1REhUTkJxa3RBLzNpWlRRd2dXY0dpYmxxYXdBZjRaK3hmTnN6dXFFaFRlazdrRkp2bU54QUhzY0p5c2pDUFFwd0FxemFvV2ZTN3p3dnFCZHVPcHBicDQ4TjdWa3k2U1AxZVFOSENWcC91YXdmK3JMNVBjL1h5SGhMT1Nvb0U4aWZkQ0RSaGttUThnK2lWUmdoTWIvZTAvL2U2eFRCRHZ3b1pJUTMwcFR0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea864ff3-7819-4f32-a1d6-be845afc170b", "record_id": "flaws_cloudtrail:0000377:ea864ff3-7819-4f32-a1d6-be845afc170b", "row_index": 377, "timestamp": "2019-08-02T18:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea864ff3-7819-4f32-a1d6-be845afc170b", "eventTime": "2019-08-02T18:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTUVBQjYvWUFRenoydTNZWUZMYnorQ2dzc2VQOUlDNTZPdk03L3drc21mZElaZXNMSU5ETDlML1FSVWVBSXZxZ0lXdmVEM0VLdytRdXVhUXh5K09wakpySEhTOFJQdFJvMUZ5Mi90ZHI1ZktpMkVVVmJOUDBXZ1I4cDJzc1pwRTlxSzhwQ0ZmYUtRekdLY3Qza0MzTVVjQ3ZMNVlOcngvVkw0cXY0SUN3QjZOZmg1Y2tLRVUxSWJuazRjRjRydzJnTnNGU3J1SnlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea864ff3-7819-4f32-a1d6-be845afc170b", "record_id": "flaws_cloudtrail:0000378:ea864ff3-7819-4f32-a1d6-be845afc170b", "row_index": 378, "timestamp": "2019-08-02T18:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea864ff3-7819-4f32-a1d6-be845afc170b", "eventTime": "2019-08-02T18:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTUVBQjYvWUFRenoydTNZWUZMYnorQ2dzc2VQOUlDNTZPdk03L3drc21mZElaZXNMSU5ETDlML1FSVWVBSXZxZ0lXdmVEM0VLdytRdXVhUXh5K09wakpySEhTOFJQdFJvMUZ5Mi90ZHI1ZktpMkVVVmJOUDBXZ1I4cDJzc1pwRTlxSzhwQ0ZmYUtRekdLY3Qza0MzTVVjQ3ZMNVlOcngvVkw0cXY0SUN3QjZOZmg1Y2tLRVUxSWJuazRjRjRydzJnTnNGU3J1SnlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a4278c-11ab-4f02-b71a-d0c9487e125c", "record_id": "flaws_cloudtrail:0000379:a3a4278c-11ab-4f02-b71a-d0c9487e125c", "row_index": 379, "timestamp": "2019-08-02T18:29:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a4278c-11ab-4f02-b71a-d0c9487e125c", "eventTime": "2019-08-02T18:29:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3MmZ3Zng4dXNESnhjcnRNWGM4U2NZRjNHNFNYdS95bVBIL0JhL2d4RGxWVGZyUkxWLzRaRkkwRFhSUm13TytndmRJRGRQOEFPbXlZQmI3dFgzTzdJNEJqSy9ORHNsa0F6VXBwaHU5S29GRUZjd3N0NjQ5TDlsSUxxT1RzS0RMcG11S0p4OFFuZFJnTzQ0MUNaaGZOWStHeHdCRFFZVlhuN3l1WHVueE8vMEJpMWorc2k5bHZWNkQwL3ZEUjNKOUtHdEhmdnhZRVg0ZEprQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a4278c-11ab-4f02-b71a-d0c9487e125c", "record_id": "flaws_cloudtrail:0000380:a3a4278c-11ab-4f02-b71a-d0c9487e125c", "row_index": 380, "timestamp": "2019-08-02T18:29:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a4278c-11ab-4f02-b71a-d0c9487e125c", "eventTime": "2019-08-02T18:29:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3MmZ3Zng4dXNESnhjcnRNWGM4U2NZRjNHNFNYdS95bVBIL0JhL2d4RGxWVGZyUkxWLzRaRkkwRFhSUm13TytndmRJRGRQOEFPbXlZQmI3dFgzTzdJNEJqSy9ORHNsa0F6VXBwaHU5S29GRUZjd3N0NjQ5TDlsSUxxT1RzS0RMcG11S0p4OFFuZFJnTzQ0MUNaaGZOWStHeHdCRFFZVlhuN3l1WHVueE8vMEJpMWorc2k5bHZWNkQwL3ZEUjNKOUtHdEhmdnhZRVg0ZEprQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d88b14-dbae-49dc-ad75-25c0889a5d49", "record_id": "flaws_cloudtrail:0000381:11d88b14-dbae-49dc-ad75-25c0889a5d49", "row_index": 381, "timestamp": "2019-08-02T18:29:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d88b14-dbae-49dc-ad75-25c0889a5d49", "eventTime": "2019-08-02T18:29:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSU4xZlovbVBJU1RJbzFaeG5Rb0RLN254Rzk3RWpuVEhPMy9UMGQ3OEdFZ1o2VE5oREU3azJkMXByaEVVS2kyWjZTSjdlYUFaaFlYT3FWZ1ljR1ROOUhVUGtrak96dVVnNDRiRk5SWDVKb3p2YzdRTkRxQ2hObnRRekJGdklVZkJQb28rTjQrQ014c0JsVnBLcnlXNkRlbVR4cTkvRnRmTGI3YkY4Y25xUHhtZkgybU44REFVbVlNMzN5aUpCdWlDbGNscHc5eWdjTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d88b14-dbae-49dc-ad75-25c0889a5d49", "record_id": "flaws_cloudtrail:0000382:11d88b14-dbae-49dc-ad75-25c0889a5d49", "row_index": 382, "timestamp": "2019-08-02T18:29:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d88b14-dbae-49dc-ad75-25c0889a5d49", "eventTime": "2019-08-02T18:29:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSU4xZlovbVBJU1RJbzFaeG5Rb0RLN254Rzk3RWpuVEhPMy9UMGQ3OEdFZ1o2VE5oREU3azJkMXByaEVVS2kyWjZTSjdlYUFaaFlYT3FWZ1ljR1ROOUhVUGtrak96dVVnNDRiRk5SWDVKb3p2YzdRTkRxQ2hObnRRekJGdklVZkJQb28rTjQrQ014c0JsVnBLcnlXNkRlbVR4cTkvRnRmTGI3YkY4Y25xUHhtZkgybU44REFVbVlNMzN5aUpCdWlDbGNscHc5eWdjTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864e6c2a-96f9-4d8b-864d-699a2c1afa05", "record_id": "flaws_cloudtrail:0000383:864e6c2a-96f9-4d8b-864d-699a2c1afa05", "row_index": 383, "timestamp": "2019-08-02T18:29:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864e6c2a-96f9-4d8b-864d-699a2c1afa05", "eventTime": "2019-08-02T18:29:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWWpGQ3ZGckpadUwrMlJhd2FMRnliMVo5NGRva0NqeU4vN2UvOUI0UU5zM3l2R1RyMUNYM0treVpIOGdWTjlXZHFVdXUwWHpmQm5UTEJCTm9mYlMramhHRmppU3V5TGtaTzhPaWpSNE84TG9zNnEyMkV5b1FCYjhXeDNjR29hTlJTYWFnYjE4Qk1QMHNDWVBkc0ZqOE1jNEl3U3prNVdUY1dmbFc3YzNPUzVuMk5vRjlDZjM4TEpaOXVKR1lQOWozT2ZVdzdBWldJQkhsZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864e6c2a-96f9-4d8b-864d-699a2c1afa05", "record_id": "flaws_cloudtrail:0000384:864e6c2a-96f9-4d8b-864d-699a2c1afa05", "row_index": 384, "timestamp": "2019-08-02T18:29:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864e6c2a-96f9-4d8b-864d-699a2c1afa05", "eventTime": "2019-08-02T18:29:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWWpGQ3ZGckpadUwrMlJhd2FMRnliMVo5NGRva0NqeU4vN2UvOUI0UU5zM3l2R1RyMUNYM0treVpIOGdWTjlXZHFVdXUwWHpmQm5UTEJCTm9mYlMramhHRmppU3V5TGtaTzhPaWpSNE84TG9zNnEyMkV5b1FCYjhXeDNjR29hTlJTYWFnYjE4Qk1QMHNDWVBkc0ZqOE1jNEl3U3prNVdUY1dmbFc3YzNPUzVuMk5vRjlDZjM4TEpaOXVKR1lQOWozT2ZVdzdBWldJQkhsZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b66220-811e-43e4-b29a-ffcd5bcc69f4", "record_id": "flaws_cloudtrail:0000385:b66220-811e-43e4-b29a-ffcd5bcc69f4", "row_index": 385, "timestamp": "2019-08-02T18:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b66220-811e-43e4-b29a-ffcd5bcc69f4", "eventTime": "2019-08-02T18:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTGxtSzcxQ2dOY1RIQXJTenlISFU3bllWZ0hOWFhSNkNOUkUvRUI3SEZsTDZ1eVQ5M3phN2pyZzArdHhteGl4U2hXY2taajBodjdKS1premZhUExlYTVaYUFGOElZL3FHWFpSTzBVZkZiOXRWV3FYNk1BVTNxRXN6R3VQZTd1UW9WRy9kVkJra3M3YVBxM2NPNVVNcVpPNFZ5SzRsU2pGejZvSlY0d0ozU0lMRDN0MFRsMmpIUlJMSVMyc0FyTnZJMU1HMnVndTJxN2pRQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf24f1a-c62f-4de5-b196-d90060ab63bc", "record_id": "flaws_cloudtrail:0000386:fbf24f1a-c62f-4de5-b196-d90060ab63bc", "row_index": 386, "timestamp": "2019-08-02T18:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf24f1a-c62f-4de5-b196-d90060ab63bc", "eventTime": "2019-08-02T18:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbFZvTGZoME9EazRxNkxJTmQzbG0ySVRManNmbnZlT281d21FelJOdS9jTW82M09jNWU1K052VllIY1NNZXJjTzZLNm5rRmJ1Y2lnWElPcFB5dG1FSWJSblVScXJKbDBqS3hjWTJJMEI4Zk1wTU1nK0V0TkFHam9IaFEvMkdHcU5XaUFwckFqU2VtUXl1MGx1S0N2YzZEZ3Y3N2VFN2hKRDc0akp3b2RyTHhsVzV5a01NSUttdGd5QjF1cGFNamk0T25Kd3NiRSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b66220-811e-43e4-b29a-ffcd5bcc69f4", "record_id": "flaws_cloudtrail:0000387:b66220-811e-43e4-b29a-ffcd5bcc69f4", "row_index": 387, "timestamp": "2019-08-02T18:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b66220-811e-43e4-b29a-ffcd5bcc69f4", "eventTime": "2019-08-02T18:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTGxtSzcxQ2dOY1RIQXJTenlISFU3bllWZ0hOWFhSNkNOUkUvRUI3SEZsTDZ1eVQ5M3phN2pyZzArdHhteGl4U2hXY2taajBodjdKS1premZhUExlYTVaYUFGOElZL3FHWFpSTzBVZkZiOXRWV3FYNk1BVTNxRXN6R3VQZTd1UW9WRy9kVkJra3M3YVBxM2NPNVVNcVpPNFZ5SzRsU2pGejZvSlY0d0ozU0lMRDN0MFRsMmpIUlJMSVMyc0FyTnZJMU1HMnVndTJxN2pRQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf24f1a-c62f-4de5-b196-d90060ab63bc", "record_id": "flaws_cloudtrail:0000388:fbf24f1a-c62f-4de5-b196-d90060ab63bc", "row_index": 388, "timestamp": "2019-08-02T18:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf24f1a-c62f-4de5-b196-d90060ab63bc", "eventTime": "2019-08-02T18:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbFZvTGZoME9EazRxNkxJTmQzbG0ySVRManNmbnZlT281d21FelJOdS9jTW82M09jNWU1K052VllIY1NNZXJjTzZLNm5rRmJ1Y2lnWElPcFB5dG1FSWJSblVScXJKbDBqS3hjWTJJMEI4Zk1wTU1nK0V0TkFHam9IaFEvMkdHcU5XaUFwckFqU2VtUXl1MGx1S0N2YzZEZ3Y3N2VFN2hKRDc0akp3b2RyTHhsVzV5a01NSUttdGd5QjF1cGFNamk0T25Kd3NiRSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add97bd8-984d-4373-9869-49314f40", "record_id": "flaws_cloudtrail:0000389:add97bd8-984d-4373-9869-49314f40", "row_index": 389, "timestamp": "2019-08-02T18:29:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add97bd8-984d-4373-9869-49314f40", "eventTime": "2019-08-02T18:29:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVmVtQklVaFJpT2xxSWY4UEFEWkppU2hhcTU2RjBONnpETW02enR0My82dXlXQjQ4OWFZZC9KOWgxV2d4bzlaYUdzdi9iSGQzVWpHRmhpbllrWDM4ZjkxK0twZ1htU0dJbmZRZzF3T2MzajRUTGNSKzlMeCszZFB0UWtlMTg0Y1dwT0d6T01GbGlwMzAwNzZPMkVBVldJbTk1bzRkKzdWcFpvR1F6ZGlreHkxNkZpanA0cXNQVXdQRzg0ZjZqdEJOUEVFNk5nWUU5OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add97bd8-984d-4373-9869-49314f40", "record_id": "flaws_cloudtrail:0000390:add97bd8-984d-4373-9869-49314f40", "row_index": 390, "timestamp": "2019-08-02T18:29:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add97bd8-984d-4373-9869-49314f40", "eventTime": "2019-08-02T18:29:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVmVtQklVaFJpT2xxSWY4UEFEWkppU2hhcTU2RjBONnpETW02enR0My82dXlXQjQ4OWFZZC9KOWgxV2d4bzlaYUdzdi9iSGQzVWpHRmhpbllrWDM4ZjkxK0twZ1htU0dJbmZRZzF3T2MzajRUTGNSKzlMeCszZFB0UWtlMTg0Y1dwT0d6T01GbGlwMzAwNzZPMkVBVldJbTk1bzRkKzdWcFpvR1F6ZGlreHkxNkZpanA0cXNQVXdQRzg0ZjZqdEJOUEVFNk5nWUU5OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "record_id": "flaws_cloudtrail:0000391:a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "row_index": 391, "timestamp": "2019-08-02T18:29:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "eventTime": "2019-08-02T18:29:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V2w1SUFIOEF0SlBwRExvVlJRalQ4RHNNZWI0Zmw4NWpTY2dyMUNjd0NBZWRFWkNCd1FUUHNzT2dER0tkMy9xbUhWQ080cmZ2dVp1R29KN3RDYWhUWWJ5enlnbXpkWGtMM0MzVFdId1llWkRTS002NndCOG1rOUFtWU95YVppMURaeUdESkdFalA4YXJhZUNMcDlIOFh3WG9GbTdpOXZIbGtLUGFjZmxJRmRSeDMvUVI4K0pIbVlvS2Y0SDRKTDU1dGgvYnc2VDg1VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "record_id": "flaws_cloudtrail:0000392:a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "row_index": 392, "timestamp": "2019-08-02T18:29:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61f3508-2df3-4d66-8cf8-cb2ea9b17d1a", "eventTime": "2019-08-02T18:29:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V2w1SUFIOEF0SlBwRExvVlJRalQ4RHNNZWI0Zmw4NWpTY2dyMUNjd0NBZWRFWkNCd1FUUHNzT2dER0tkMy9xbUhWQ080cmZ2dVp1R29KN3RDYWhUWWJ5enlnbXpkWGtMM0MzVFdId1llWkRTS002NndCOG1rOUFtWU95YVppMURaeUdESkdFalA4YXJhZUNMcDlIOFh3WG9GbTdpOXZIbGtLUGFjZmxJRmRSeDMvUVI4K0pIbVlvS2Y0SDRKTDU1dGgvYnc2VDg1VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2803f64-96aa-4770-a189-d9f5e51e7df7", "record_id": "flaws_cloudtrail:0000393:b2803f64-96aa-4770-a189-d9f5e51e7df7", "row_index": 393, "timestamp": "2019-08-02T18:29:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2803f64-96aa-4770-a189-d9f5e51e7df7", "eventTime": "2019-08-02T18:29:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTQW90c1RMZmxZU2hOWitTcHE5Y1h4UUxTdVlONmJaYk1pR1lLRkwxSHYxMDFFWkoyNERwREFmczU2RXZXNmZ4eEZrVkRmdnVuRTRmdUVRNjBPVmJIaVNRTTZUbUpxU2Erb2xKNjBDeXdoSkpUSk5JUHJTTlBja0QxdEE3RDNJVmR2VEtEaldnUmhEZ0YyeWVuVi9kbGxLdXJKSUZzd21OeTVwUkxRODRPSkVieE4rVjV3OE4zcEhnclVWTmdkakdFNTJGVTVaMFdma3hXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2803f64-96aa-4770-a189-d9f5e51e7df7", "record_id": "flaws_cloudtrail:0000394:b2803f64-96aa-4770-a189-d9f5e51e7df7", "row_index": 394, "timestamp": "2019-08-02T18:29:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2803f64-96aa-4770-a189-d9f5e51e7df7", "eventTime": "2019-08-02T18:29:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTQW90c1RMZmxZU2hOWitTcHE5Y1h4UUxTdVlONmJaYk1pR1lLRkwxSHYxMDFFWkoyNERwREFmczU2RXZXNmZ4eEZrVkRmdnVuRTRmdUVRNjBPVmJIaVNRTTZUbUpxU2Erb2xKNjBDeXdoSkpUSk5JUHJTTlBja0QxdEE3RDNJVmR2VEtEaldnUmhEZ0YyeWVuVi9kbGxLdXJKSUZzd21OeTVwUkxRODRPSkVieE4rVjV3OE4zcEhnclVWTmdkakdFNTJGVTVaMFdma3hXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bba72f6-4114-4630-99fd-9a600af5ff48", "record_id": "flaws_cloudtrail:0000395:5bba72f6-4114-4630-99fd-9a600af5ff48", "row_index": 395, "timestamp": "2019-08-02T18:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bba72f6-4114-4630-99fd-9a600af5ff48", "eventTime": "2019-08-02T18:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlY3B4RnZNZEtQS3dTbHViRE5VZUZCeWFtNnRFTnFCL2xvRi94WVhZYzI5M29pZTF1eDlnSXNiRlZ3MkIrZVVjeWcrUnRsRlRQd3Vnek16L3lwQ09NTXhOL3BLK2dxdDZXM3lRaDBLN2FCRFFGaDdlMHhZa2xTU2JWdDFvdjM4b1ZDVVlLNlcvSkpuMVptSzBVdGlwNnRpSG11UVVSMHJLTGpHRlZkWDM5L2FRL0ZBSktzallSYWhKaVdCS0FHN0hvbVN1amJIZTlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad607401d-3f47-418f-87f5-a098df1d8e32", "record_id": "flaws_cloudtrail:0000396:ad607401d-3f47-418f-87f5-a098df1d8e32", "row_index": 396, "timestamp": "2019-08-02T18:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad607401d-3f47-418f-87f5-a098df1d8e32", "eventTime": "2019-08-02T18:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpRnBFdUFXNmd1QVdialdwcGgvVUJHbXR2a0l2TThsNU1RS2Myc0pKbmpZdFUyWjFBbmNzZEFvRU1jcHFveVl3QkdiSFNhZjlCbjhnU3dhbzRlWnVvdHEvVHc1djlhcUw5ektsQVB1cmxWT0JJV1A4M2VsdkpVdWswaGFRSWJiTSs0OEljcEk3NVpPMWgrRTN3SERUcFZZaHd1elk3amdocGM3NGpubHoxUkZFSlhBcFZ0Z2xlVjZqUUowVlljOEtOQlEzTUpwOEd4ZVo2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bba72f6-4114-4630-99fd-9a600af5ff48", "record_id": "flaws_cloudtrail:0000397:5bba72f6-4114-4630-99fd-9a600af5ff48", "row_index": 397, "timestamp": "2019-08-02T18:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bba72f6-4114-4630-99fd-9a600af5ff48", "eventTime": "2019-08-02T18:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlY3B4RnZNZEtQS3dTbHViRE5VZUZCeWFtNnRFTnFCL2xvRi94WVhZYzI5M29pZTF1eDlnSXNiRlZ3MkIrZVVjeWcrUnRsRlRQd3Vnek16L3lwQ09NTXhOL3BLK2dxdDZXM3lRaDBLN2FCRFFGaDdlMHhZa2xTU2JWdDFvdjM4b1ZDVVlLNlcvSkpuMVptSzBVdGlwNnRpSG11UVVSMHJLTGpHRlZkWDM5L2FRL0ZBSktzallSYWhKaVdCS0FHN0hvbVN1amJIZTlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad607401d-3f47-418f-87f5-a098df1d8e32", "record_id": "flaws_cloudtrail:0000398:ad607401d-3f47-418f-87f5-a098df1d8e32", "row_index": 398, "timestamp": "2019-08-02T18:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad607401d-3f47-418f-87f5-a098df1d8e32", "eventTime": "2019-08-02T18:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpRnBFdUFXNmd1QVdialdwcGgvVUJHbXR2a0l2TThsNU1RS2Myc0pKbmpZdFUyWjFBbmNzZEFvRU1jcHFveVl3QkdiSFNhZjlCbjhnU3dhbzRlWnVvdHEvVHc1djlhcUw5ektsQVB1cmxWT0JJV1A4M2VsdkpVdWswaGFRSWJiTSs0OEljcEk3NVpPMWgrRTN3SERUcFZZaHd1elk3amdocGM3NGpubHoxUkZFSlhBcFZ0Z2xlVjZqUUowVlljOEtOQlEzTUpwOEd4ZVo2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a61487-e592-478b-ae5e-12914d586275", "record_id": "flaws_cloudtrail:0000399:1a61487-e592-478b-ae5e-12914d586275", "row_index": 399, "timestamp": "2019-08-02T18:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a61487-e592-478b-ae5e-12914d586275", "eventTime": "2019-08-02T18:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuYkRsZU5kM3VUaDZGT2FURUFwNWNMTzMwV3VNd0pHU0NPTWd2VkNSR0VOdUE2V0ZxN1k4U2g0NUYzZU1GQlBWUEs3U2RYK25XM1RJQ3R3dzlyZ0F1RUtBMk43SEw5c05jTTFHZHB0Ny9FalBoU0FiSDl4SVlIVkVWUXpGYkhUNTVpdjhUYVBKZlM4U3pUelZrTHJ0Z2piQVZxQ2NCNjU2bVVSZkZTZkVaU3RoMWVkZVJaYmVMMWVQNnVKUVU1WTFyUDdQMUNUR3YwbmdvRXNpYlpXcGhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "record_id": "flaws_cloudtrail:0000400:043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "row_index": 400, "timestamp": "2019-08-02T18:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "eventTime": "2019-08-02T18:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRdU52alpKUjh3Q25uaVg5TWtrVXdMZSs1cVl2QVBwQmpNWDhGaG41QnhEM05wdnA0RGNqajk2eDBvY2c4SVFWSUI3d1RkZk1xUGlEK2Z6ckVkY0swMUNjaVhoS3lCNGMyZFdtVUQ4c012T082UTFndUQ2SDUweCtRY1ZXcHR6a0w3ekV3YTBhajQxaks5aEZyM1dTeUI5MVNUNjlFV2Y1ZzB0d2JpNHZVeWZZbXF0a1Z5VUo0ZitBbCtEcDZML041Z2x0ZjhDRFJrd1dRWTV6aXZJeXFxa0d2SWpYb0JFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a61487-e592-478b-ae5e-12914d586275", "record_id": "flaws_cloudtrail:0000401:1a61487-e592-478b-ae5e-12914d586275", "row_index": 401, "timestamp": "2019-08-02T18:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a61487-e592-478b-ae5e-12914d586275", "eventTime": "2019-08-02T18:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuYkRsZU5kM3VUaDZGT2FURUFwNWNMTzMwV3VNd0pHU0NPTWd2VkNSR0VOdUE2V0ZxN1k4U2g0NUYzZU1GQlBWUEs3U2RYK25XM1RJQ3R3dzlyZ0F1RUtBMk43SEw5c05jTTFHZHB0Ny9FalBoU0FiSDl4SVlIVkVWUXpGYkhUNTVpdjhUYVBKZlM4U3pUelZrTHJ0Z2piQVZxQ2NCNjU2bVVSZkZTZkVaU3RoMWVkZVJaYmVMMWVQNnVKUVU1WTFyUDdQMUNUR3YwbmdvRXNpYlpXcGhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "record_id": "flaws_cloudtrail:0000402:043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "row_index": 402, "timestamp": "2019-08-02T18:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "043f75aa-93e5-4bc5-9078-fc0d3f9cb410", "eventTime": "2019-08-02T18:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRdU52alpKUjh3Q25uaVg5TWtrVXdMZSs1cVl2QVBwQmpNWDhGaG41QnhEM05wdnA0RGNqajk2eDBvY2c4SVFWSUI3d1RkZk1xUGlEK2Z6ckVkY0swMUNjaVhoS3lCNGMyZFdtVUQ4c012T082UTFndUQ2SDUweCtRY1ZXcHR6a0w3ekV3YTBhajQxaks5aEZyM1dTeUI5MVNUNjlFV2Y1ZzB0d2JpNHZVeWZZbXF0a1Z5VUo0ZitBbCtEcDZML041Z2x0ZjhDRFJrd1dRWTV6aXZJeXFxa0d2SWpYb0JFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d44d8e9e-fb2a-472f-be38-e317c2c1556d", "record_id": "flaws_cloudtrail:0000403:d44d8e9e-fb2a-472f-be38-e317c2c1556d", "row_index": 403, "timestamp": "2019-08-02T18:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d44d8e9e-fb2a-472f-be38-e317c2c1556d", "eventTime": "2019-08-02T18:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwYVN2SHJscVZNVlNBNkF1K0dJbU5FOEN4TG0xcXB6RkpyUkVJVEFRa1V3SDdNK2ZuOC9YWXcvb0pPN3cyeFhlTDJLbHhST1ozNkxMQy9pOUlhcHlNN25zeUZybHBJeElSSG1mYlpBVVJ0RVZKL3dwcldXVDdCcUFFS2t6QTBvUDU1ZzhyOUFxVVFmRiszTHFQdEs4Y1JGWFVBemNTcFE3Q2R0SnVpdDlhYWdEa2c0WkgvaGZFeXFsQ3Y3TzBuY3hmZ3ZxVE5sb3F4WEVsVFVTUDB4cHJib3ZvamZVR3JRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d44d8e9e-fb2a-472f-be38-e317c2c1556d", "record_id": "flaws_cloudtrail:0000404:d44d8e9e-fb2a-472f-be38-e317c2c1556d", "row_index": 404, "timestamp": "2019-08-02T18:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d44d8e9e-fb2a-472f-be38-e317c2c1556d", "eventTime": "2019-08-02T18:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwYVN2SHJscVZNVlNBNkF1K0dJbU5FOEN4TG0xcXB6RkpyUkVJVEFRa1V3SDdNK2ZuOC9YWXcvb0pPN3cyeFhlTDJLbHhST1ozNkxMQy9pOUlhcHlNN25zeUZybHBJeElSSG1mYlpBVVJ0RVZKL3dwcldXVDdCcUFFS2t6QTBvUDU1ZzhyOUFxVVFmRiszTHFQdEs4Y1JGWFVBemNTcFE3Q2R0SnVpdDlhYWdEa2c0WkgvaGZFeXFsQ3Y3TzBuY3hmZ3ZxVE5sb3F4WEVsVFVTUDB4cHJib3ZvamZVR3JRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "338035-56f0-4f6e-826d-23e4c84d3cc8", "record_id": "flaws_cloudtrail:0000405:338035-56f0-4f6e-826d-23e4c84d3cc8", "row_index": 405, "timestamp": "2019-08-02T18:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "338035-56f0-4f6e-826d-23e4c84d3cc8", "eventTime": "2019-08-02T18:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5dkZQRDlBZnhxUlBYcUsvTGFxRkFnOE5adFdCOVpocFg2TUZRUWY5RlJ4NWNqQ0tGOC95NGIvS2FCdWpmRHlxTXMvUHF3TDBMSTl0MHY5VzcrVHZQYU43Ukt6RjByZk83dCsyY3YwSHNFYkp1djFJTVk3ZjFPcDBHZnpYU0NRSXBIY0ljS1Y5Q3czNmI0NWMzbkJQQXc2TmVadUpCVVJ6THN0eTJlTys4MnRXZjdIYnFQL091ZSszVGpFM0FQZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67ed1250-0f79-4982-a0ae-a92ec6f64b51", "record_id": "flaws_cloudtrail:0000406:67ed1250-0f79-4982-a0ae-a92ec6f64b51", "row_index": 406, "timestamp": "2019-08-02T18:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67ed1250-0f79-4982-a0ae-a92ec6f64b51", "eventTime": "2019-08-02T18:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVFNWc0ZRVHRHTmovY01LZXZqbDBRbExtM0dkWTZ0b3dzb2VLeW9KV2N3SHBXZ2NEdEFIbVJ0U2dhQVlvd0N2cXQwdUNsMzZnbSs5MkhSajV0YlZKWWQ5UUJhcmE3RWg4UFNmMWYwbkJyQjlKam5HUCtkQ2V3SDdIY0EzM1dORmdKRHV2eEttRnpZL1lBTU43OTdxZjFGMTZ0dzRWc2NvK0laQ1E2RjZWUzhDY2FrS0RhdWh3clI3T3RjNFcrQ3VrdGJINzAvT202YmVsNXozN3dkK3NGUk8vL3M1NStFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "338035-56f0-4f6e-826d-23e4c84d3cc8", "record_id": "flaws_cloudtrail:0000407:338035-56f0-4f6e-826d-23e4c84d3cc8", "row_index": 407, "timestamp": "2019-08-02T18:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "338035-56f0-4f6e-826d-23e4c84d3cc8", "eventTime": "2019-08-02T18:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5dkZQRDlBZnhxUlBYcUsvTGFxRkFnOE5adFdCOVpocFg2TUZRUWY5RlJ4NWNqQ0tGOC95NGIvS2FCdWpmRHlxTXMvUHF3TDBMSTl0MHY5VzcrVHZQYU43Ukt6RjByZk83dCsyY3YwSHNFYkp1djFJTVk3ZjFPcDBHZnpYU0NRSXBIY0ljS1Y5Q3czNmI0NWMzbkJQQXc2TmVadUpCVVJ6THN0eTJlTys4MnRXZjdIYnFQL091ZSszVGpFM0FQZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67ed1250-0f79-4982-a0ae-a92ec6f64b51", "record_id": "flaws_cloudtrail:0000408:67ed1250-0f79-4982-a0ae-a92ec6f64b51", "row_index": 408, "timestamp": "2019-08-02T18:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67ed1250-0f79-4982-a0ae-a92ec6f64b51", "eventTime": "2019-08-02T18:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVFNWc0ZRVHRHTmovY01LZXZqbDBRbExtM0dkWTZ0b3dzb2VLeW9KV2N3SHBXZ2NEdEFIbVJ0U2dhQVlvd0N2cXQwdUNsMzZnbSs5MkhSajV0YlZKWWQ5UUJhcmE3RWg4UFNmMWYwbkJyQjlKam5HUCtkQ2V3SDdIY0EzM1dORmdKRHV2eEttRnpZL1lBTU43OTdxZjFGMTZ0dzRWc2NvK0laQ1E2RjZWUzhDY2FrS0RhdWh3clI3T3RjNFcrQ3VrdGJINzAvT202YmVsNXozN3dkK3NGUk8vL3M1NStFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "record_id": "flaws_cloudtrail:0000409:5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "row_index": 409, "timestamp": "2019-08-02T18:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "eventTime": "2019-08-02T18:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0dndJc3lwL2YrNzZwZWJ6SjJBRFpXTWFpeDFHVnJjcEJ0bFZaSzdPc1FmcUNhU0E3QUJvNUJWaEcvZ2kvM3VjUnRDKzJWL1F2MTlXWmZ6V3FTQVBkSkkyR0ZRMmZZLytDMTBybnc5K0dUNGZNNUIrN3h4b2NiOVM4cUtXZ1MxM0FmT0Y4QVV4ZDg0QWovazY1ZFZsazhLZEp4QWtzbS9MbS8zZ2F6TTZWSWRscUEzWWlRVnZlSXBaOWdRWnZzdVNNQjV3Yjkrd2l3RkE1TU9veWJsaENnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "record_id": "flaws_cloudtrail:0000410:5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "row_index": 410, "timestamp": "2019-08-02T18:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fdbc4bf-7ca0-4490-955d-ae6db57a291e", "eventTime": "2019-08-02T18:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0dndJc3lwL2YrNzZwZWJ6SjJBRFpXTWFpeDFHVnJjcEJ0bFZaSzdPc1FmcUNhU0E3QUJvNUJWaEcvZ2kvM3VjUnRDKzJWL1F2MTlXWmZ6V3FTQVBkSkkyR0ZRMmZZLytDMTBybnc5K0dUNGZNNUIrN3h4b2NiOVM4cUtXZ1MxM0FmT0Y4QVV4ZDg0QWovazY1ZFZsazhLZEp4QWtzbS9MbS8zZ2F6TTZWSWRscUEzWWlRVnZlSXBaOWdRWnZzdVNNQjV3Yjkrd2l3RkE1TU9veWJsaENnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b1bdeb-5239-442f-97b2-cae2c100d768", "record_id": "flaws_cloudtrail:0000411:a4b1bdeb-5239-442f-97b2-cae2c100d768", "row_index": 411, "timestamp": "2019-08-02T18:30:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b1bdeb-5239-442f-97b2-cae2c100d768", "eventTime": "2019-08-02T18:30:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d14f27-559d-449d-9304-bbc483c9fbb9", "record_id": "flaws_cloudtrail:0000412:f8d14f27-559d-449d-9304-bbc483c9fbb9", "row_index": 412, "timestamp": "2019-08-02T18:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d14f27-559d-449d-9304-bbc483c9fbb9", "eventTime": "2019-08-02T18:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQMnVXWi9YZXpnK0JIZm1Rc2xtMklTUG5aemRMRkYya3FVdnVSRFpZS1ZqSzRyR2JOcERLRXhOZ1dpYnZFQkxieFVzRE5uUG1qdE5hWm8zUm5iL3p0WVYyZE96V05Jd0VuU2htMjZFWVg0anJNYnlZTVZqVFhlcmxLRnFoVWlNM1VkNWxUUUF0WmJ2Qms2T3hsdEZoQlB4WGd6YkVFOUEybyt2SGxwVXNwVk1UR3hBU1YvcEdmazBjKzVlZWlobzZpR01Fc0pWd09SVEVYdk5OYkhKOUZLaUtCQ3l6dVVBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d14f27-559d-449d-9304-bbc483c9fbb9", "record_id": "flaws_cloudtrail:0000413:f8d14f27-559d-449d-9304-bbc483c9fbb9", "row_index": 413, "timestamp": "2019-08-02T18:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d14f27-559d-449d-9304-bbc483c9fbb9", "eventTime": "2019-08-02T18:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQMnVXWi9YZXpnK0JIZm1Rc2xtMklTUG5aemRMRkYya3FVdnVSRFpZS1ZqSzRyR2JOcERLRXhOZ1dpYnZFQkxieFVzRE5uUG1qdE5hWm8zUm5iL3p0WVYyZE96V05Jd0VuU2htMjZFWVg0anJNYnlZTVZqVFhlcmxLRnFoVWlNM1VkNWxUUUF0WmJ2Qms2T3hsdEZoQlB4WGd6YkVFOUEybyt2SGxwVXNwVk1UR3hBU1YvcEdmazBjKzVlZWlobzZpR01Fc0pWd09SVEVYdk5OYkhKOUZLaUtCQ3l6dVVBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "record_id": "flaws_cloudtrail:0000414:cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "row_index": 414, "timestamp": "2019-08-02T18:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "eventTime": "2019-08-02T18:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQR0ROU3A2dmU5S0pCWlFyamNpSXluUmorb2IyVGJFS2RNUlUwNFRSTVpBNUN5cUlvbmFPVXlkbzAvdy9BZEhGWnZMd2FLazZtWVMvZ0t5Rm5Ncm9CblA5VkdtK0tQamFjRlBZSEVYM3I1cnlaZTlQNDVyVzB0ekZzcC9yR2VacTFYN1VCTEVFNjkyTkpkdWlRaldmV1RraDJYbDMxWW96UHlZc25KRkNJak0xRnd3eE9QRWtGa2MrM1U0Nll3OVZ6N1haU202OXh1Y0d3dEp1eExEZzd3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "record_id": "flaws_cloudtrail:0000415:cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "row_index": 415, "timestamp": "2019-08-02T18:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc6d72fb-84e7-4756-9a69-0a3e8e2c119b", "eventTime": "2019-08-02T18:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQR0ROU3A2dmU5S0pCWlFyamNpSXluUmorb2IyVGJFS2RNUlUwNFRSTVpBNUN5cUlvbmFPVXlkbzAvdy9BZEhGWnZMd2FLazZtWVMvZ0t5Rm5Ncm9CblA5VkdtK0tQamFjRlBZSEVYM3I1cnlaZTlQNDVyVzB0ekZzcC9yR2VacTFYN1VCTEVFNjkyTkpkdWlRaldmV1RraDJYbDMxWW96UHlZc25KRkNJak0xRnd3eE9QRWtGa2MrM1U0Nll3OVZ6N1haU202OXh1Y0d3dEp1eExEZzd3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b471f42a-8f93-423e-90cc-5442db5bfa40", "record_id": "flaws_cloudtrail:0000416:b471f42a-8f93-423e-90cc-5442db5bfa40", "row_index": 416, "timestamp": "2019-08-02T18:30:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b471f42a-8f93-423e-90cc-5442db5bfa40", "eventTime": "2019-08-02T18:30:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFNW9WNTZ6R2d2dDJrLy9saStQa1ZYNUs3Y0dOZUpUYUEzQjkyVXdTbUc3RzQyZEY5aW04R2tWd0x3S3pSdkgxZS95dDc3TnlIL2M5MnROV1pxV1liTVZvN2wrMzl0NVB5L2JWeUlkYzFJRTVsMG5OYzB4dWZzMHNjT2IzQ2E4bG5yQzNWZFBHN0NFWThqWFY4dWU5a29PVmpGVGJzZkRBdlZpTVFNR1JHaVlyMGMxY3crNFZTUm43d0xJR1cyQ1FmeVFHSUhPUXBYNis4M0FqWEdicHd1VnUzQWZCUHVZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b471f42a-8f93-423e-90cc-5442db5bfa40", "record_id": "flaws_cloudtrail:0000417:b471f42a-8f93-423e-90cc-5442db5bfa40", "row_index": 417, "timestamp": "2019-08-02T18:30:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b471f42a-8f93-423e-90cc-5442db5bfa40", "eventTime": "2019-08-02T18:30:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFNW9WNTZ6R2d2dDJrLy9saStQa1ZYNUs3Y0dOZUpUYUEzQjkyVXdTbUc3RzQyZEY5aW04R2tWd0x3S3pSdkgxZS95dDc3TnlIL2M5MnROV1pxV1liTVZvN2wrMzl0NVB5L2JWeUlkYzFJRTVsMG5OYzB4dWZzMHNjT2IzQ2E4bG5yQzNWZFBHN0NFWThqWFY4dWU5a29PVmpGVGJzZkRBdlZpTVFNR1JHaVlyMGMxY3crNFZTUm43d0xJR1cyQ1FmeVFHSUhPUXBYNis4M0FqWEdicHd1VnUzQWZCUHVZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c9f602-9d6a-401a-9112-b8f60395b28e", "record_id": "flaws_cloudtrail:0000418:67c9f602-9d6a-401a-9112-b8f60395b28e", "row_index": 418, "timestamp": "2019-08-02T18:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c9f602-9d6a-401a-9112-b8f60395b28e", "eventTime": "2019-08-02T18:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3L2NFVFNIQ29nSXdibFYvc1p5cmp4L3JyYU54T2xPbjcwcTk2Rld0Rmw0THp3RmdEYnJqdEtGcFR6V2JTa29mTU9pNnpsanFxTW5vQVI3TWZxbVMvaUpGQnhXWEZZdi9DSEl6VEdpYW51UGxPdzIxcVYwMjRXOEptRWJNbDNBMG5lWGgzZXcrMnZQSHpDL0lmaWp0VmxDOW50dXg1dSs1OWZFOUM1TWNJSjVTbmFTaVNzNGZyYThxSDEyUHhUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a627022-9390-4670-820b-ee896b44be4a", "record_id": "flaws_cloudtrail:0000419:99a627022-9390-4670-820b-ee896b44be4a", "row_index": 419, "timestamp": "2019-08-02T18:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a627022-9390-4670-820b-ee896b44be4a", "eventTime": "2019-08-02T18:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c9f602-9d6a-401a-9112-b8f60395b28e", "record_id": "flaws_cloudtrail:0000420:67c9f602-9d6a-401a-9112-b8f60395b28e", "row_index": 420, "timestamp": "2019-08-02T18:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c9f602-9d6a-401a-9112-b8f60395b28e", "eventTime": "2019-08-02T18:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3L2NFVFNIQ29nSXdibFYvc1p5cmp4L3JyYU54T2xPbjcwcTk2Rld0Rmw0THp3RmdEYnJqdEtGcFR6V2JTa29mTU9pNnpsanFxTW5vQVI3TWZxbVMvaUpGQnhXWEZZdi9DSEl6VEdpYW51UGxPdzIxcVYwMjRXOEptRWJNbDNBMG5lWGgzZXcrMnZQSHpDL0lmaWp0VmxDOW50dXg1dSs1OWZFOUM1TWNJSjVTbmFTaVNzNGZyYThxSDEyUHhUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a627022-9390-4670-820b-ee896b44be4a", "record_id": "flaws_cloudtrail:0000421:99a627022-9390-4670-820b-ee896b44be4a", "row_index": 421, "timestamp": "2019-08-02T18:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a627022-9390-4670-820b-ee896b44be4a", "eventTime": "2019-08-02T18:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "record_id": "flaws_cloudtrail:0000422:d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "row_index": 422, "timestamp": "2019-08-02T18:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "eventTime": "2019-08-02T18:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuRjNkV3FCc1NXWEVjNkZGYU1mclpPb0JTR3BZV25FR1BCQkxnTU9oZ3VMaEs3UW5xd0wvWDBVTG9qNGYwTmFNSUVLamlvUGt6L1RZcE1jTkRMelBRRjFMc2w1KzRkMXkwVzFWQW11VU04N3JOMWZ0amFYZ1NVaFVIYUdKNWN6U3pQT0RoTWhTRk5KeXNDTUhhQUlzQU5xQ1QvOTdqREVwVXJ5a0V0TWo0S1RPTGV6c096RU1GbWtJUmtXdTNTT04xcHZLSUJLNE8rZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "record_id": "flaws_cloudtrail:0000423:d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "row_index": 423, "timestamp": "2019-08-02T18:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ce1487-8f0e-4f44-86ca-2c8660dfaccf", "eventTime": "2019-08-02T18:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuRjNkV3FCc1NXWEVjNkZGYU1mclpPb0JTR3BZV25FR1BCQkxnTU9oZ3VMaEs3UW5xd0wvWDBVTG9qNGYwTmFNSUVLamlvUGt6L1RZcE1jTkRMelBRRjFMc2w1KzRkMXkwVzFWQW11VU04N3JOMWZ0amFYZ1NVaFVIYUdKNWN6U3pQT0RoTWhTRk5KeXNDTUhhQUlzQU5xQ1QvOTdqREVwVXJ5a0V0TWo0S1RPTGV6c096RU1GbWtJUmtXdTNTT04xcHZLSUJLNE8rZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3c0598-c841-4487-96eb-1b098b8ffc16", "record_id": "flaws_cloudtrail:0000424:9c3c0598-c841-4487-96eb-1b098b8ffc16", "row_index": 424, "timestamp": "2019-08-02T18:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3c0598-c841-4487-96eb-1b098b8ffc16", "eventTime": "2019-08-02T18:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXWTQrTWF0aHZmczV4WURLd2owY3ZMM2pPTlNPRUJTU1V2MlZTZy93RnRlczRLcjV2SGowZmpCdHFjYzJaWG5IVVdIN2IzV1VPUjdCcWQrbWFtckJ3UzJyK1p4a2c4Wjl4VStIRk14TW5NNlZ2UWthM0xWSStBL1dldlhkOFc5R05PVWNTTTNTUGU1ekt1SGpXcFo0T2hqWU5jblVIb0dOclBpcHF3N1M4T0FQclZmSTF1Rkx0QVVla3pHVzNDYmtqQitHKzBXaUVzU1hSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3c0598-c841-4487-96eb-1b098b8ffc16", "record_id": "flaws_cloudtrail:0000425:9c3c0598-c841-4487-96eb-1b098b8ffc16", "row_index": 425, "timestamp": "2019-08-02T18:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3c0598-c841-4487-96eb-1b098b8ffc16", "eventTime": "2019-08-02T18:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXWTQrTWF0aHZmczV4WURLd2owY3ZMM2pPTlNPRUJTU1V2MlZTZy93RnRlczRLcjV2SGowZmpCdHFjYzJaWG5IVVdIN2IzV1VPUjdCcWQrbWFtckJ3UzJyK1p4a2c4Wjl4VStIRk14TW5NNlZ2UWthM0xWSStBL1dldlhkOFc5R05PVWNTTTNTUGU1ekt1SGpXcFo0T2hqWU5jblVIb0dOclBpcHF3N1M4T0FQclZmSTF1Rkx0QVVla3pHVzNDYmtqQitHKzBXaUVzU1hSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "record_id": "flaws_cloudtrail:0000426:9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "row_index": 426, "timestamp": "2019-08-02T18:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "eventTime": "2019-08-02T18:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcUNLQmZ4R0V6QkxaWktiNkwxOW5zb0hWZ2RzMnFxNGV1ZDI2cXF0eVFWMUdTaHFiWVFqZCtBbW9RWWc4a2U5T2tScnR6TmpkOW9VdDJhcXl4cTZQcXQ2b3ZFQ3F1SWFwRll4QzU5VlMwdGozeDFwU2F3NERqTjhONm1DMjdOYWpwNDN1UTZvZ3ZFT1c5ZVNkdzJqL0VXb3hDdkJIcmVZcVRwZEZKT2l6c2pwdjRnODZycjVoRk44UXY1b0hZR0tsTzVSRkQzZzhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "record_id": "flaws_cloudtrail:0000427:9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "row_index": 427, "timestamp": "2019-08-02T18:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa7f173-7b5d-4b1b-be7e-4d2b54d1b5e5", "eventTime": "2019-08-02T18:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcUNLQmZ4R0V6QkxaWktiNkwxOW5zb0hWZ2RzMnFxNGV1ZDI2cXF0eVFWMUdTaHFiWVFqZCtBbW9RWWc4a2U5T2tScnR6TmpkOW9VdDJhcXl4cTZQcXQ2b3ZFQ3F1SWFwRll4QzU5VlMwdGozeDFwU2F3NERqTjhONm1DMjdOYWpwNDN1UTZvZ3ZFT1c5ZVNkdzJqL0VXb3hDdkJIcmVZcVRwZEZKT2l6c2pwdjRnODZycjVoRk44UXY1b0hZR0tsTzVSRkQzZzhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "record_id": "flaws_cloudtrail:0000428:e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "row_index": 428, "timestamp": "2019-08-02T18:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "eventTime": "2019-08-02T18:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwa0svLzNQc3lyWDRjMTRtcWgwa3duL3Qrb0RWNEptd3lKNTdiMFUxa3prY0d4bkJSbEVvWTdZOVJic2M0dW5OMDEzOWNHQURxa2Y1d09sWUVEMVJ1dHNsaTBZZ1BUeHp6eUFVTysxQXhDUzlhbFVYL2ZRSW5TdnZxRFZhWHRRYU1ENDFad2tSVFBPaEpwTzhxK2JVZkwvZ1RMTWZyQkU0MTZzQndUa1c0SldCRVpJQ3dGOEdoVGFpdFhJcjVwZi9zYm13QUU4SWFYZHdRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33662-8af6-4cd2-b6d6-f74297aedbe7", "record_id": "flaws_cloudtrail:0000429:a33662-8af6-4cd2-b6d6-f74297aedbe7", "row_index": 429, "timestamp": "2019-08-02T18:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33662-8af6-4cd2-b6d6-f74297aedbe7", "eventTime": "2019-08-02T18:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJOEZvVTEwdS9tc3lqcGVYblVmUTF6Sml2eVM0OUxJdGhER1MyUVhCZkI0U2RkT2ovd0pYdzRPa0hhODgxdEI5Ly9kZ0dnVXVrNHdMTU5xd25hb1RmN2NjT3htTStKVkU1d21LaXVxVUNlNC9ybm50UzJNUnVRNWpmR1NaM3U0VHMybmk0L2N4UjhxcXgrU0dIQ3RuaU1ranBtcHM4MjVmVEpqb04zQ0xxbkhLNmY0S1ZOZHZmZ0o2cHc2V0lZZU0wcWFJb2FxRUpTYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "record_id": "flaws_cloudtrail:0000430:e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "row_index": 430, "timestamp": "2019-08-02T18:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c5e206-4e4f-4354-bd0e-d9ec99b88e3b", "eventTime": "2019-08-02T18:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwa0svLzNQc3lyWDRjMTRtcWgwa3duL3Qrb0RWNEptd3lKNTdiMFUxa3prY0d4bkJSbEVvWTdZOVJic2M0dW5OMDEzOWNHQURxa2Y1d09sWUVEMVJ1dHNsaTBZZ1BUeHp6eUFVTysxQXhDUzlhbFVYL2ZRSW5TdnZxRFZhWHRRYU1ENDFad2tSVFBPaEpwTzhxK2JVZkwvZ1RMTWZyQkU0MTZzQndUa1c0SldCRVpJQ3dGOEdoVGFpdFhJcjVwZi9zYm13QUU4SWFYZHdRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33662-8af6-4cd2-b6d6-f74297aedbe7", "record_id": "flaws_cloudtrail:0000431:a33662-8af6-4cd2-b6d6-f74297aedbe7", "row_index": 431, "timestamp": "2019-08-02T18:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33662-8af6-4cd2-b6d6-f74297aedbe7", "eventTime": "2019-08-02T18:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJOEZvVTEwdS9tc3lqcGVYblVmUTF6Sml2eVM0OUxJdGhER1MyUVhCZkI0U2RkT2ovd0pYdzRPa0hhODgxdEI5Ly9kZ0dnVXVrNHdMTU5xd25hb1RmN2NjT3htTStKVkU1d21LaXVxVUNlNC9ybm50UzJNUnVRNWpmR1NaM3U0VHMybmk0L2N4UjhxcXgrU0dIQ3RuaU1ranBtcHM4MjVmVEpqb04zQ0xxbkhLNmY0S1ZOZHZmZ0o2cHc2V0lZZU0wcWFJb2FxRUpTYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571f1e93-5122-47a8-9e89-460671ab40a3", "record_id": "flaws_cloudtrail:0000432:571f1e93-5122-47a8-9e89-460671ab40a3", "row_index": 432, "timestamp": "2019-08-02T18:30:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571f1e93-5122-47a8-9e89-460671ab40a3", "eventTime": "2019-08-02T18:30:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHV1VreTJoWkc3ajVMVVp6Umtaa3NyUm5LU3FoSjhRd2ZaakpoWmxMZGJ6T0R6ZW5yZjBHTVc0VHMrSnBraGlvRndybFpHNVZXSXd1UjlnalVZZlFXSklJeGJxTnQ4aitmdEFpRDVrWCthZXVtYjYvSmo4ZkZPOVJYUVBva3Roc1VJRUNTTG5GSCt0TWRkMkpqSGZiNU9saFF6WXdGc1YyWVYzeXNzTlF3ZjZhU2JtVjI4Ylg0Y2JKaytPekpDKzZISkkrcDcyZWZFSUlSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571f1e93-5122-47a8-9e89-460671ab40a3", "record_id": "flaws_cloudtrail:0000433:571f1e93-5122-47a8-9e89-460671ab40a3", "row_index": 433, "timestamp": "2019-08-02T18:30:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571f1e93-5122-47a8-9e89-460671ab40a3", "eventTime": "2019-08-02T18:30:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHV1VreTJoWkc3ajVMVVp6Umtaa3NyUm5LU3FoSjhRd2ZaakpoWmxMZGJ6T0R6ZW5yZjBHTVc0VHMrSnBraGlvRndybFpHNVZXSXd1UjlnalVZZlFXSklJeGJxTnQ4aitmdEFpRDVrWCthZXVtYjYvSmo4ZkZPOVJYUVBva3Roc1VJRUNTTG5GSCt0TWRkMkpqSGZiNU9saFF6WXdGc1YyWVYzeXNzTlF3ZjZhU2JtVjI4Ylg0Y2JKaytPekpDKzZISkkrcDcyZWZFSUlSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "record_id": "flaws_cloudtrail:0000434:48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "row_index": 434, "timestamp": "2019-08-02T18:30:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "eventTime": "2019-08-02T18:30:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5STVnOWNjTTdvZWFpNXZZcGpQaWNiWEtsQkYrNDFKa3NWdWEyZTM1ZjVyNEtCMjAySzB6YzIyNlM2RmZBVGR5RmM2WE9Rc05vNEVpd1E2ZlRqTm01N2ltNXNvbys4MU1FcHV3L1orbkk3L0ZSVG1hOEZUcEQ4eWprNGR3L3dERHo1YjlUaGZoVW1NMlB0OHdXaWxDWVdURngyK2pLWmdMN0VNUjUyZnpqcWVHaWNGaDZUemUyRWpkaTg0cFkxYnAweCtOSndXciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "record_id": "flaws_cloudtrail:0000435:48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "row_index": 435, "timestamp": "2019-08-02T18:30:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c04775-a1e7-4497-b8fe-e6a6c0cea4f5", "eventTime": "2019-08-02T18:30:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5STVnOWNjTTdvZWFpNXZZcGpQaWNiWEtsQkYrNDFKa3NWdWEyZTM1ZjVyNEtCMjAySzB6YzIyNlM2RmZBVGR5RmM2WE9Rc05vNEVpd1E2ZlRqTm01N2ltNXNvbys4MU1FcHV3L1orbkk3L0ZSVG1hOEZUcEQ4eWprNGR3L3dERHo1YjlUaGZoVW1NMlB0OHdXaWxDWVdURngyK2pLWmdMN0VNUjUyZnpqcWVHaWNGaDZUemUyRWpkaTg0cFkxYnAweCtOSndXciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80ce2076-62fa-4728-9b6e-fca961226d7e", "record_id": "flaws_cloudtrail:0000436:80ce2076-62fa-4728-9b6e-fca961226d7e", "row_index": 436, "timestamp": "2019-08-02T18:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80ce2076-62fa-4728-9b6e-fca961226d7e", "eventTime": "2019-08-02T18:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTnJMT25BRlh3NDNNOVJKS0hvTXUvaEkvdG5TY3l3V2JWa2hzTng5R1FMVW9zMzlHclhsNlYrWGVvVnVrRGFIK1F3ekVyWTByNzNYNnArOGZHSHV6dFlGZCtvSFVrcVh0d1hWSVpuYUVSK1BuSDJySVZGcjFyOGMwUzNjNTlzSERpWDdmVWw0elpDcDN3aFJLaFhjVU5ZL0E1d3JJUlNtSkN1RzBocHdHWmc5RXpJWnAxeEF2SHN1TGJYNzFIandFV3M4VzVPcm91MUdhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80ce2076-62fa-4728-9b6e-fca961226d7e", "record_id": "flaws_cloudtrail:0000437:80ce2076-62fa-4728-9b6e-fca961226d7e", "row_index": 437, "timestamp": "2019-08-02T18:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80ce2076-62fa-4728-9b6e-fca961226d7e", "eventTime": "2019-08-02T18:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTnJMT25BRlh3NDNNOVJKS0hvTXUvaEkvdG5TY3l3V2JWa2hzTng5R1FMVW9zMzlHclhsNlYrWGVvVnVrRGFIK1F3ekVyWTByNzNYNnArOGZHSHV6dFlGZCtvSFVrcVh0d1hWSVpuYUVSK1BuSDJySVZGcjFyOGMwUzNjNTlzSERpWDdmVWw0elpDcDN3aFJLaFhjVU5ZL0E1d3JJUlNtSkN1RzBocHdHWmc5RXpJWnAxeEF2SHN1TGJYNzFIandFV3M4VzVPcm91MUdhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "record_id": "flaws_cloudtrail:0000438:e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "row_index": 438, "timestamp": "2019-08-02T18:30:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "eventTime": "2019-08-02T18:30:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUGNkYTI3YTRRSFFlQ1NFM2FleVdaTGNBNlkwRmRTaVRteFBPT3RHS0xLRUFqa0dvQ3k3VE1idmRJN1VJZ1A5UXNiME01MDhZeHdZZnp4SjBmOEJKQi9CZjkwVzNEblJFUVFSMDdTQzJIV1ZKUEI5UHU3N3ZoWFBQVFJqV2hxSGhtVWxVdkpnTGUrL0p4VWNvOVExYWZ0RDZROXdpRnF4UnllcmVSVzhIY1RFeXpuQUJtZGZWOXFJb0RDZkNyZXpMTzFyaU44RWdFZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "record_id": "flaws_cloudtrail:0000439:0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "row_index": 439, "timestamp": "2019-08-02T18:30:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "eventTime": "2019-08-02T18:30:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0ODN2cDhobVhSQW9oU3gzUlA1SUxINTByM3gwenpXYlhuRE4yWWR0L3lWOVoxNERxZVBScm0rd1lZdmtCS0xzRGpuWEg4TUQ2Y05xSlZncFpLb2tid1oxd21xclRHQVp2SUUwNXRZWGZQMGExdVBDcVJGVHB1bGZ3TTdEWGgra0dvZ2lCM09xOGJCM0daMXg5dnJYWldzWHBQYkRnYndGZXIyQmdqT1htNTVVYWViMlJIU1N6KytITlR6OWhFems4M2xadGVEZVhROD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "record_id": "flaws_cloudtrail:0000440:e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "row_index": 440, "timestamp": "2019-08-02T18:30:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31ab4ed-94ad-4fcd-a0e5-fbe5129b812c", "eventTime": "2019-08-02T18:30:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUGNkYTI3YTRRSFFlQ1NFM2FleVdaTGNBNlkwRmRTaVRteFBPT3RHS0xLRUFqa0dvQ3k3VE1idmRJN1VJZ1A5UXNiME01MDhZeHdZZnp4SjBmOEJKQi9CZjkwVzNEblJFUVFSMDdTQzJIV1ZKUEI5UHU3N3ZoWFBQVFJqV2hxSGhtVWxVdkpnTGUrL0p4VWNvOVExYWZ0RDZROXdpRnF4UnllcmVSVzhIY1RFeXpuQUJtZGZWOXFJb0RDZkNyZXpMTzFyaU44RWdFZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "record_id": "flaws_cloudtrail:0000441:0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "row_index": 441, "timestamp": "2019-08-02T18:30:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa6fa2c-265c-418b-8ebc-5a2ffe533b42", "eventTime": "2019-08-02T18:30:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0ODN2cDhobVhSQW9oU3gzUlA1SUxINTByM3gwenpXYlhuRE4yWWR0L3lWOVoxNERxZVBScm0rd1lZdmtCS0xzRGpuWEg4TUQ2Y05xSlZncFpLb2tid1oxd21xclRHQVp2SUUwNXRZWGZQMGExdVBDcVJGVHB1bGZ3TTdEWGgra0dvZ2lCM09xOGJCM0daMXg5dnJYWldzWHBQYkRnYndGZXIyQmdqT1htNTVVYWViMlJIU1N6KytITlR6OWhFems4M2xadGVEZVhROD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1940c087-6890-4459-9a3d-d57212500d81", "record_id": "flaws_cloudtrail:0000442:1940c087-6890-4459-9a3d-d57212500d81", "row_index": 442, "timestamp": "2019-08-02T18:30:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1940c087-6890-4459-9a3d-d57212500d81", "eventTime": "2019-08-02T18:30:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRdnB5MHd2V3hHbE95SEpvNjF2WVdmblJwUmM5Umh0ZkpmaW1ROW03Q1dFYUJhWDA3MnZ5dVJZVU1HWGoxQ1VQRDBXNHJLMmhQQVNvUGxsOXhLdlVZRmpheWpjMjdyV3lhazNBWHhJYXh4WU14NE83ZTRRVHhma3JwenRBdkdYd05mOGljVjNjN3MvVjJtZFo0by9WclNyWWJlS3NlVnpETnRWNDN6L3l0L2V2RUtDUm8yL0x3c1RoNWs2Z3dOWmRweEFOY3hhNFZ3ZXVOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1940c087-6890-4459-9a3d-d57212500d81", "record_id": "flaws_cloudtrail:0000443:1940c087-6890-4459-9a3d-d57212500d81", "row_index": 443, "timestamp": "2019-08-02T18:30:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1940c087-6890-4459-9a3d-d57212500d81", "eventTime": "2019-08-02T18:30:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRdnB5MHd2V3hHbE95SEpvNjF2WVdmblJwUmM5Umh0ZkpmaW1ROW03Q1dFYUJhWDA3MnZ5dVJZVU1HWGoxQ1VQRDBXNHJLMmhQQVNvUGxsOXhLdlVZRmpheWpjMjdyV3lhazNBWHhJYXh4WU14NE83ZTRRVHhma3JwenRBdkdYd05mOGljVjNjN3MvVjJtZFo0by9WclNyWWJlS3NlVnpETnRWNDN6L3l0L2V2RUtDUm8yL0x3c1RoNWs2Z3dOWmRweEFOY3hhNFZ3ZXVOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb519132-2df3-447a-baaa-a38b0799bba5", "record_id": "flaws_cloudtrail:0000444:2cb519132-2df3-447a-baaa-a38b0799bba5", "row_index": 444, "timestamp": "2019-08-02T18:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb519132-2df3-447a-baaa-a38b0799bba5", "eventTime": "2019-08-02T18:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJud3FXcDdTTTdWeWh0cXpLOUprRytNc05mWWNmOUZPTmJyem5pbW1SbE1hRXpiajh0eE83S1FlUDFVTDEyMUNZTXExVnVXTlVZdFRnT0FnQ3lINE9hTHpsazdNNnNpMVVNKzhYc1piSVZPcmQzUW5yU29wSXJ0Y1ExbExISEVKWFk2emhSbkpEcGg3d1h5VkhVUE56S3BRVzBqc0s2dUlsMEJjSkFnK01ha1RYVEU5eUFsQzdYVS8rRm1pVWw5MTVxZTYrcURwa3pHTE5lZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "169166-b329-4863-8f94-658526e8dbc52", "record_id": "flaws_cloudtrail:0000445:169166-b329-4863-8f94-658526e8dbc52", "row_index": 445, "timestamp": "2019-08-02T18:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "169166-b329-4863-8f94-658526e8dbc52", "eventTime": "2019-08-02T18:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VDNST0R1SzNPckRHR2JQc0t1Z1RYc0pMa0VTa1E4VkMxUnk0WjBFakhDQW5QTnFPMmRFUVpQZDFPSHR2MTQrdzVyMkhzV21DckxxOHBSUGlGd0ZrYTB1b3BTUnFyNXdPNTY4T1VETEdIaGRDeXdleXUzK0lkQkY0NWp2cmV1RkQwbXFXcU1GRi9TOG9pTzNXUkF4VU85S0NMMnd0L09DZ3lJRHNLTzYwQlYxaW1aVlc2NVd3bmh4ZUpMOG0vYUJOT2hRcmdlZlFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb519132-2df3-447a-baaa-a38b0799bba5", "record_id": "flaws_cloudtrail:0000446:2cb519132-2df3-447a-baaa-a38b0799bba5", "row_index": 446, "timestamp": "2019-08-02T18:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb519132-2df3-447a-baaa-a38b0799bba5", "eventTime": "2019-08-02T18:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJud3FXcDdTTTdWeWh0cXpLOUprRytNc05mWWNmOUZPTmJyem5pbW1SbE1hRXpiajh0eE83S1FlUDFVTDEyMUNZTXExVnVXTlVZdFRnT0FnQ3lINE9hTHpsazdNNnNpMVVNKzhYc1piSVZPcmQzUW5yU29wSXJ0Y1ExbExISEVKWFk2emhSbkpEcGg3d1h5VkhVUE56S3BRVzBqc0s2dUlsMEJjSkFnK01ha1RYVEU5eUFsQzdYVS8rRm1pVWw5MTVxZTYrcURwa3pHTE5lZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "169166-b329-4863-8f94-658526e8dbc52", "record_id": "flaws_cloudtrail:0000447:169166-b329-4863-8f94-658526e8dbc52", "row_index": 447, "timestamp": "2019-08-02T18:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "169166-b329-4863-8f94-658526e8dbc52", "eventTime": "2019-08-02T18:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VDNST0R1SzNPckRHR2JQc0t1Z1RYc0pMa0VTa1E4VkMxUnk0WjBFakhDQW5QTnFPMmRFUVpQZDFPSHR2MTQrdzVyMkhzV21DckxxOHBSUGlGd0ZrYTB1b3BTUnFyNXdPNTY4T1VETEdIaGRDeXdleXUzK0lkQkY0NWp2cmV1RkQwbXFXcU1GRi9TOG9pTzNXUkF4VU85S0NMMnd0L09DZ3lJRHNLTzYwQlYxaW1aVlc2NVd3bmh4ZUpMOG0vYUJOT2hRcmdlZlFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "record_id": "flaws_cloudtrail:0000448:ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "row_index": 448, "timestamp": "2019-08-02T18:30:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "eventTime": "2019-08-02T18:30:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQmxWekNMMlgyQzJWRGh3amt4Zk12UGFoVGJmQXI2VFJwaEdxY25Id2djQy92OWFOQ1BqRW15WExsTXJNaFpBeUNPbTRTd0Y4NzlmeFZzOWpaUklXbFJNbVJhVmd3WitFeVBDQlJNSStZSW9DdWlGdTVxMmVzR2FHeGdLTThybGpPSmNHbWZaM2N5YVhqYzNIT3QwWng4RWY4dkkvWlMzZHZOTUNkVFA3Mm9yL1V1Z0RLbWRYRkRzS0JVQ0t0QU5tQmJLV0FtVlBXOVRaa3BwMkxtc1NqQVk3RFRXV3JjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "record_id": "flaws_cloudtrail:0000449:ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "row_index": 449, "timestamp": "2019-08-02T18:30:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca3a79af-81e0-4c6c-9ea1-ff3103a297de", "eventTime": "2019-08-02T18:30:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQmxWekNMMlgyQzJWRGh3amt4Zk12UGFoVGJmQXI2VFJwaEdxY25Id2djQy92OWFOQ1BqRW15WExsTXJNaFpBeUNPbTRTd0Y4NzlmeFZzOWpaUklXbFJNbVJhVmd3WitFeVBDQlJNSStZSW9DdWlGdTVxMmVzR2FHeGdLTThybGpPSmNHbWZaM2N5YVhqYzNIT3QwWng4RWY4dkkvWlMzZHZOTUNkVFA3Mm9yL1V1Z0RLbWRYRkRzS0JVQ0t0QU5tQmJLV0FtVlBXOVRaa3BwMkxtc1NqQVk3RFRXV3JjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274cd5ce-0339-484e-a0fc-e512cf88e5e2", "record_id": "flaws_cloudtrail:0000450:274cd5ce-0339-484e-a0fc-e512cf88e5e2", "row_index": 450, "timestamp": "2019-08-02T18:30:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274cd5ce-0339-484e-a0fc-e512cf88e5e2", "eventTime": "2019-08-02T18:30:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmMTJuOW5nRk9CeVNXS2lid2h6TGo3Z3A2N2JIdDNWTk42RGF1dk03cW9ScFdFZGRDQWFqWmdSeTdvblV0ZEEwSFhXVU1XdzNSNFUxKzdVbHlHem9vYi9tb3h3NUF4eUtHVUxQVE1oQTRtS0lpdnBzcFNDY3F5Z2Q4ZloybXlVcGZDOWVYVG44SzBEVVNoa0xGM3JJd21UcWZIYi9iaGw5Q2QxQ3ZmdG1uOFlQOTlpRFFiRVRqMXhnUFlWZnh2OURSOWtxSnVHVmNPdUttNkxrSTBqVHN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274cd5ce-0339-484e-a0fc-e512cf88e5e2", "record_id": "flaws_cloudtrail:0000451:274cd5ce-0339-484e-a0fc-e512cf88e5e2", "row_index": 451, "timestamp": "2019-08-02T18:30:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274cd5ce-0339-484e-a0fc-e512cf88e5e2", "eventTime": "2019-08-02T18:30:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmMTJuOW5nRk9CeVNXS2lid2h6TGo3Z3A2N2JIdDNWTk42RGF1dk03cW9ScFdFZGRDQWFqWmdSeTdvblV0ZEEwSFhXVU1XdzNSNFUxKzdVbHlHem9vYi9tb3h3NUF4eUtHVUxQVE1oQTRtS0lpdnBzcFNDY3F5Z2Q4ZloybXlVcGZDOWVYVG44SzBEVVNoa0xGM3JJd21UcWZIYi9iaGw5Q2QxQ3ZmdG1uOFlQOTlpRFFiRVRqMXhnUFlWZnh2OURSOWtxSnVHVmNPdUttNkxrSTBqVHN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de5d020-67f3-4c04-b758-1b62038a6", "record_id": "flaws_cloudtrail:0000452:2de5d020-67f3-4c04-b758-1b62038a6", "row_index": 452, "timestamp": "2019-08-02T18:30:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de5d020-67f3-4c04-b758-1b62038a6", "eventTime": "2019-08-02T18:30:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzOCtMZTJUaVBScVRyV0RCZ2J0T3RzMVI2TmNaSHBHQnFOaS93VlllSGt0QjAwYlhrZ1BISzJCanB2d2xLeXlkaWJFdEpnWEhmRmowanFtMzk5SWlpRXJKMUtqUER5b3lVaTl0Nmt6VXB4cWN4Y0s3dkN0aHFRUTBUemd3MGZuZ3JSUGphMXNsT01XaW5sS1NFTEtTUndMem9ETGljR3puaWpLbFNyOUNKbFQ0a0NpcmZYNG9pVTlnY1UyeFJKcnN1MGZudTlwbnlrclU3dTVVSGdjV3Y4aGFkNVk3bWtFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de5d020-67f3-4c04-b758-1b62038a6", "record_id": "flaws_cloudtrail:0000453:2de5d020-67f3-4c04-b758-1b62038a6", "row_index": 453, "timestamp": "2019-08-02T18:30:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de5d020-67f3-4c04-b758-1b62038a6", "eventTime": "2019-08-02T18:30:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzOCtMZTJUaVBScVRyV0RCZ2J0T3RzMVI2TmNaSHBHQnFOaS93VlllSGt0QjAwYlhrZ1BISzJCanB2d2xLeXlkaWJFdEpnWEhmRmowanFtMzk5SWlpRXJKMUtqUER5b3lVaTl0Nmt6VXB4cWN4Y0s3dkN0aHFRUTBUemd3MGZuZ3JSUGphMXNsT01XaW5sS1NFTEtTUndMem9ETGljR3puaWpLbFNyOUNKbFQ0a0NpcmZYNG9pVTlnY1UyeFJKcnN1MGZudTlwbnlrclU3dTVVSGdjV3Y4aGFkNVk3bWtFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371a7e91-f979-4b96-852e-573135376ee8", "record_id": "flaws_cloudtrail:0000454:371a7e91-f979-4b96-852e-573135376ee8", "row_index": 454, "timestamp": "2019-08-02T18:30:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371a7e91-f979-4b96-852e-573135376ee8", "eventTime": "2019-08-02T18:30:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtMDVGQ2t0aFBUdjNqOHJNRnVIaE5tV3pzckxvVklVQUJBOVFIUUhXQXV1Q1hQaDRoY0x5ME1UYmpnWHBDeUQ5empsMVpxQXdqcnU4NHVrRWYrcU5FVGV4VVFESmJMMDNYdzcxR3JTNTd0RkNzUXNMV01zRWx1aVpGODhhYnBXYVp3RkhOSVliVjZGY1dRNU5wWjk3UkUrTWMzTGRXMVlJdlI1ZDREL2VRSlEvUXR6S0dkUGU3eFZCcXFWL2JaND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371a7e91-f979-4b96-852e-573135376ee8", "record_id": "flaws_cloudtrail:0000455:371a7e91-f979-4b96-852e-573135376ee8", "row_index": 455, "timestamp": "2019-08-02T18:30:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371a7e91-f979-4b96-852e-573135376ee8", "eventTime": "2019-08-02T18:30:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtMDVGQ2t0aFBUdjNqOHJNRnVIaE5tV3pzckxvVklVQUJBOVFIUUhXQXV1Q1hQaDRoY0x5ME1UYmpnWHBDeUQ5empsMVpxQXdqcnU4NHVrRWYrcU5FVGV4VVFESmJMMDNYdzcxR3JTNTd0RkNzUXNMV01zRWx1aVpGODhhYnBXYVp3RkhOSVliVjZGY1dRNU5wWjk3UkUrTWMzTGRXMVlJdlI1ZDREL2VRSlEvUXR6S0dkUGU3eFZCcXFWL2JaND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bbcf058-a0e7-448c-81c1-1fc33d209548b", "record_id": "flaws_cloudtrail:0000456:6bbcf058-a0e7-448c-81c1-1fc33d209548b", "row_index": 456, "timestamp": "2019-08-02T18:30:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bbcf058-a0e7-448c-81c1-1fc33d209548b", "eventTime": "2019-08-02T18:30:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyTS9NandlcVQ0Q040dFlYVzVRSGE4S3EwdFEwMjVUR3RnUlJWVTZhUmI4eGtzT2Y2UFkxUXVNOS80R2lQcWtsTzdTSDk3b3JBZUpoOUFGYlFIZmZ2YVBzR3I3UXdORkh4RXRMaVhJK2Q4eCtjSnNWZElFREt4cEt6TTVKYnRzNGVsTEpDYW16a0hoTU95bzUzcHpPeWcwREovdkdmMTk5THordFB1UEpyMnY4MmFTZzdTVXhaejF0MHZyS3E4aFZOZ3Z5RWxPRnlqcElLVnlsRENUdkwrSzhIenROQzg0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bbcf058-a0e7-448c-81c1-1fc33d209548b", "record_id": "flaws_cloudtrail:0000457:6bbcf058-a0e7-448c-81c1-1fc33d209548b", "row_index": 457, "timestamp": "2019-08-02T18:30:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bbcf058-a0e7-448c-81c1-1fc33d209548b", "eventTime": "2019-08-02T18:30:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyTS9NandlcVQ0Q040dFlYVzVRSGE4S3EwdFEwMjVUR3RnUlJWVTZhUmI4eGtzT2Y2UFkxUXVNOS80R2lQcWtsTzdTSDk3b3JBZUpoOUFGYlFIZmZ2YVBzR3I3UXdORkh4RXRMaVhJK2Q4eCtjSnNWZElFREt4cEt6TTVKYnRzNGVsTEpDYW16a0hoTU95bzUzcHpPeWcwREovdkdmMTk5THordFB1UEpyMnY4MmFTZzdTVXhaejF0MHZyS3E4aFZOZ3Z5RWxPRnlqcElLVnlsRENUdkwrSzhIenROQzg0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "record_id": "flaws_cloudtrail:0000458:f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "row_index": 458, "timestamp": "2019-08-02T18:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "eventTime": "2019-08-02T18:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZ0NyYk9wcGoybEc1R25hdTkyTUpIOHQyTThJT21SRVZEeWdpbllXSWREcXBNRkpVTjFtajFtS1V0d3FRUjZqelUzeWMyK1N6cXVBTXVZdy9OOTFVRHpkTG40SUZIRjQ2aGNPS0o4OWlSaE9GSnNoQXdXZnN3Yzc4OHIxeEdTV3NoaTdzdWdSRS9ETEJmMWlXYTErUjYwSDZ6NjRXZ2duNjUxbDFZSXo5LzJLRjZ3aDlXZm5TZ2RPNzBXL2dqa1Z5UlBpQVEvQTlXTVd6TE0zdW11a2FHazRNM1JmczhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5289d4b8-1b45-4c75-924c-6917105042d1", "record_id": "flaws_cloudtrail:0000459:5289d4b8-1b45-4c75-924c-6917105042d1", "row_index": 459, "timestamp": "2019-08-02T18:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5289d4b8-1b45-4c75-924c-6917105042d1", "eventTime": "2019-08-02T18:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdTlvMmMxMVoycXo1TXZYVnlOZTE2R3NqUGFlK0hCYVl3Zk1OaWJqakVDTWhUaEtWdVd5QWJ2MXdOdzVVUnVNZ05VVzNDOUExOVcvN1huaUkwZ2dYQk12VzcwSXlUZUZFbm9HMW82MWJGc0VBQWpwWDVmOWl0cGVyejZ4SUdZQ2RUN0ZCVFRCSDgzMEZJaU93VlZjdUFjMXdCZ0pON0NpaDF1eWptWi9oQ3NiMFdTV2h2UzRtS0MrTzY0aGc5NUYyWHIwTDlwOTlZaDlEZmtRdFlLcDF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "record_id": "flaws_cloudtrail:0000460:f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "row_index": 460, "timestamp": "2019-08-02T18:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b415629-4eed-4b6d-8f92-3afea7af9a2d", "eventTime": "2019-08-02T18:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZ0NyYk9wcGoybEc1R25hdTkyTUpIOHQyTThJT21SRVZEeWdpbllXSWREcXBNRkpVTjFtajFtS1V0d3FRUjZqelUzeWMyK1N6cXVBTXVZdy9OOTFVRHpkTG40SUZIRjQ2aGNPS0o4OWlSaE9GSnNoQXdXZnN3Yzc4OHIxeEdTV3NoaTdzdWdSRS9ETEJmMWlXYTErUjYwSDZ6NjRXZ2duNjUxbDFZSXo5LzJLRjZ3aDlXZm5TZ2RPNzBXL2dqa1Z5UlBpQVEvQTlXTVd6TE0zdW11a2FHazRNM1JmczhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5289d4b8-1b45-4c75-924c-6917105042d1", "record_id": "flaws_cloudtrail:0000461:5289d4b8-1b45-4c75-924c-6917105042d1", "row_index": 461, "timestamp": "2019-08-02T18:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5289d4b8-1b45-4c75-924c-6917105042d1", "eventTime": "2019-08-02T18:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdTlvMmMxMVoycXo1TXZYVnlOZTE2R3NqUGFlK0hCYVl3Zk1OaWJqakVDTWhUaEtWdVd5QWJ2MXdOdzVVUnVNZ05VVzNDOUExOVcvN1huaUkwZ2dYQk12VzcwSXlUZUZFbm9HMW82MWJGc0VBQWpwWDVmOWl0cGVyejZ4SUdZQ2RUN0ZCVFRCSDgzMEZJaU93VlZjdUFjMXdCZ0pON0NpaDF1eWptWi9oQ3NiMFdTV2h2UzRtS0MrTzY0aGc5NUYyWHIwTDlwOTlZaDlEZmtRdFlLcDF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d625cf-4833-41fe-a52c-8a7c5ab56907", "record_id": "flaws_cloudtrail:0000462:65d625cf-4833-41fe-a52c-8a7c5ab56907", "row_index": 462, "timestamp": "2019-08-02T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d625cf-4833-41fe-a52c-8a7c5ab56907", "eventTime": "2019-08-02T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjZ3c1k2dUlSbUhMcUlDVUNRYnJLdzhVK2ZIUEx0d3VQZEh1UWVaN3JjYjJtSWlnd1dMQmZlUmhWM0tYaEhLTjdHdFNQSnFjTzNzcks3RTdiaWllNS9HZnZFZWdOOHhJaHBSeDBkaUJ3WVRRZ1lTMjZuSnpSb2IrWUpMdnJUTjJ0cUY4SW5DLzlpSlRBNmExU2hwalhJVWUybzJoWmE2SEhOK0tENk5vZVM1MzVXbE9kRXk3N05wd1k5Vm1RN1U1RVR3cFZCV3MrZWtFakpJSWVJK3d3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7647c3e-ef3a-4ff9-8373-252367e86bf8", "record_id": "flaws_cloudtrail:0000463:a7647c3e-ef3a-4ff9-8373-252367e86bf8", "row_index": 463, "timestamp": "2019-08-02T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7647c3e-ef3a-4ff9-8373-252367e86bf8", "eventTime": "2019-08-02T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMZVhHTi9xYjNXR0xmQVQ4TUhEdGhHUVVNaTZNL0NmV3l3RkVSRHZSc1RlV3M4ZlQ5blMvOElLUkxCd3doQ2o2YzFoa08xeURjSVZGZDRlNUNqR3NnYTZrWC9ObjJmTzZDUVllWTVud3FOQWY3c1FyeGRSM3puMEpPdEx6ejJJejgvSEx3aW5HTkFCMUdlZWQ4ME5ydnlkcTk4ZGJwS2RkR2R1VFE3Y3B1RTc0cnBUcDloVlpPZ2piVVR5VGRLVGQvNW1rRHhSdzRwUTc5YkhtakJvdUxqTFZ5c2dBR0FRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d625cf-4833-41fe-a52c-8a7c5ab56907", "record_id": "flaws_cloudtrail:0000464:65d625cf-4833-41fe-a52c-8a7c5ab56907", "row_index": 464, "timestamp": "2019-08-02T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d625cf-4833-41fe-a52c-8a7c5ab56907", "eventTime": "2019-08-02T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjZ3c1k2dUlSbUhMcUlDVUNRYnJLdzhVK2ZIUEx0d3VQZEh1UWVaN3JjYjJtSWlnd1dMQmZlUmhWM0tYaEhLTjdHdFNQSnFjTzNzcks3RTdiaWllNS9HZnZFZWdOOHhJaHBSeDBkaUJ3WVRRZ1lTMjZuSnpSb2IrWUpMdnJUTjJ0cUY4SW5DLzlpSlRBNmExU2hwalhJVWUybzJoWmE2SEhOK0tENk5vZVM1MzVXbE9kRXk3N05wd1k5Vm1RN1U1RVR3cFZCV3MrZWtFakpJSWVJK3d3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7647c3e-ef3a-4ff9-8373-252367e86bf8", "record_id": "flaws_cloudtrail:0000465:a7647c3e-ef3a-4ff9-8373-252367e86bf8", "row_index": 465, "timestamp": "2019-08-02T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7647c3e-ef3a-4ff9-8373-252367e86bf8", "eventTime": "2019-08-02T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMZVhHTi9xYjNXR0xmQVQ4TUhEdGhHUVVNaTZNL0NmV3l3RkVSRHZSc1RlV3M4ZlQ5blMvOElLUkxCd3doQ2o2YzFoa08xeURjSVZGZDRlNUNqR3NnYTZrWC9ObjJmTzZDUVllWTVud3FOQWY3c1FyeGRSM3puMEpPdEx6ejJJejgvSEx3aW5HTkFCMUdlZWQ4ME5ydnlkcTk4ZGJwS2RkR2R1VFE3Y3B1RTc0cnBUcDloVlpPZ2piVVR5VGRLVGQvNW1rRHhSdzRwUTc5YkhtakJvdUxqTFZ5c2dBR0FRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43cf115-62aa-4eaf-a233-39b37302b4", "record_id": "flaws_cloudtrail:0000466:d43cf115-62aa-4eaf-a233-39b37302b4", "row_index": 466, "timestamp": "2019-08-02T18:30:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43cf115-62aa-4eaf-a233-39b37302b4", "eventTime": "2019-08-02T18:30:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCU3BGQkpseHpyRTJyQTZrWHIxZkFPaWRnNzdMTzVMSkRXMGkyVWhUQjlqalRpcUZUSDZVVVJBVGxmQ1cxMHVpbHNkMXUvL1BER2NzdkNoZStIa3BEOEV4UE5KUUVHUnAzSVVkQ1ZpZzcrbFhzNWdpMnNJQ092bHZGQysyUVg5R2p6cjJoVmxWaTFsblpqS0lxd0crL01HSmlDbEJoSmJHdUhmWW9vaXlNMWIzTURZQnBTOE1HcUp0VUk5dWVHVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43cf115-62aa-4eaf-a233-39b37302b4", "record_id": "flaws_cloudtrail:0000467:d43cf115-62aa-4eaf-a233-39b37302b4", "row_index": 467, "timestamp": "2019-08-02T18:30:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43cf115-62aa-4eaf-a233-39b37302b4", "eventTime": "2019-08-02T18:30:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCU3BGQkpseHpyRTJyQTZrWHIxZkFPaWRnNzdMTzVMSkRXMGkyVWhUQjlqalRpcUZUSDZVVVJBVGxmQ1cxMHVpbHNkMXUvL1BER2NzdkNoZStIa3BEOEV4UE5KUUVHUnAzSVVkQ1ZpZzcrbFhzNWdpMnNJQ092bHZGQysyUVg5R2p6cjJoVmxWaTFsblpqS0lxd0crL01HSmlDbEJoSmJHdUhmWW9vaXlNMWIzTURZQnBTOE1HcUp0VUk5dWVHVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844ec1cf-e0fe-483f-97c4-f88372934eee", "record_id": "flaws_cloudtrail:0000468:844ec1cf-e0fe-483f-97c4-f88372934eee", "row_index": 468, "timestamp": "2019-08-02T18:30:39Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844ec1cf-e0fe-483f-97c4-f88372934eee", "eventTime": "2019-08-02T18:30:39Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92dda3a1-b3e1-4b29-8ef0-37079f02d", "record_id": "flaws_cloudtrail:0000469:92dda3a1-b3e1-4b29-8ef0-37079f02d", "row_index": 469, "timestamp": "2019-08-02T18:31:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92dda3a1-b3e1-4b29-8ef0-37079f02d", "eventTime": "2019-08-02T18:31:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92dda3a1-b3e1-4b29-8ef0-37079f02d", "record_id": "flaws_cloudtrail:0000470:92dda3a1-b3e1-4b29-8ef0-37079f02d", "row_index": 470, "timestamp": "2019-08-02T18:31:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92dda3a1-b3e1-4b29-8ef0-37079f02d", "eventTime": "2019-08-02T18:31:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80ac6c92-bbca-4675-8e69-03a390904f194", "record_id": "flaws_cloudtrail:0000471:80ac6c92-bbca-4675-8e69-03a390904f194", "row_index": 471, "timestamp": "2019-08-02T18:31:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80ac6c92-bbca-4675-8e69-03a390904f194", "eventTime": "2019-08-02T18:31:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80ac6c92-bbca-4675-8e69-03a390904f194", "record_id": "flaws_cloudtrail:0000472:80ac6c92-bbca-4675-8e69-03a390904f194", "row_index": 472, "timestamp": "2019-08-02T18:31:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80ac6c92-bbca-4675-8e69-03a390904f194", "eventTime": "2019-08-02T18:31:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.209 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c64cf10-d67f-4315-8f54-148c554676f0a", "record_id": "flaws_cloudtrail:0000473:5c64cf10-d67f-4315-8f54-148c554676f0a", "row_index": 473, "timestamp": "2019-08-02T18:31:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c64cf10-d67f-4315-8f54-148c554676f0a", "eventTime": "2019-08-02T18:31:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK2416CP3XJJP6U7J", "expiration": "Aug 3, 2019 12:36:57 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c64cf10-d67f-4315-8f54-148c554676f0a", "record_id": "flaws_cloudtrail:0000474:5c64cf10-d67f-4315-8f54-148c554676f0a", "row_index": 474, "timestamp": "2019-08-02T18:31:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c64cf10-d67f-4315-8f54-148c554676f0a", "eventTime": "2019-08-02T18:31:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK2416CP3XJJP6U7J", "expiration": "Aug 3, 2019 12:36:57 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGMaCXVzLXdlc3QtMiJHMEUCIQCYpAGX4Aa61ewp4xc6tTPCSK/Y8CDPfF4tdUbTESAtxQIgavBjwfmDURbPmiUCPa8W5BBoXA9f1N8bfNilS1BkfAkq4wMI3P//////////ARAAGgw5NzU0MjYyNjIwMjkiDCQurJ4Ctr5MqtXDuyq3A6xPUbEkexrpUTI+WXCDlxVDgCFL3kf8+Cw5cPtMneqg6JUdg57QQz5JZgflyZ2/E+Ldw2wFQVa5egJLPVucCUBIz4H4obITGpUOxH7DcpbUJqOEcwrnmxfM76G3MP4MjDdCwL3+leWPOGeM7JWIlPBXTkHibY4iNUBL3abBOFr67izfNLraG+GTtAKc+tMq7mpYLSLde9AJiozJP+w8tiWi/6rq5Qk8QUAqboAwsAd184ss7J5yTy9eNcYzPrke3o9lxtaYqU/r1aiZBHm/eqP2gUisaUVI1nlxLcUjHbUaIL4PchafAiJPyaSRg+kCXztnGFZDtHUDW5Eut7ci62d7Xk5AtqikKp+3L7ECniGAQEDVnf5ZkxGY6XPjS6uFaNkQaGTVwrs6p6aEUIwf1rYeU0wF6Rn6ekhVhkrwvzbBw4Ko1byYN3DxQYSyLugPr8rAxsFxIKUwPRT/Fs9Gc+uEt0V8gUEfoUQO/Re0YWMwmx8n2Ogm1CoWds54qOUKUrhC/rwZdjjPdXxqTZp7AaMVFf6CYmRCxTppZDTYay2eMKlZMRISD8WR61pixUL9pSw40gII7uYwjIOS6gU6tAH/9I+mzjbnGU4NxYd/L7uXjAE77VVrR4roN6VLlaEnu/614gsraHPPgQdA5dZxIUrJXdI2Pm3ggeUrw1IoZx5bS5idGVn5VrhtmHT41bj6ooG5TmwxNvFFz7G8sSVbM7an9YyoRTWKEQd1VPD4MR+tv8k4pP4rwCef1PDgR6O/vF5cjXZlCs/3y2YVJrGND5SBZmHXIAxo5VPhiPtj1iL2FIJ5BEjGOzp1k8YTe6X8a5+CPsM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3c3a0e4-1d5a-467d-a922-f94ea689f037", "record_id": "flaws_cloudtrail:0000475:b3c3a0e4-1d5a-467d-a922-f94ea689f037", "row_index": 475, "timestamp": "2019-08-02T18:32:33Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3c3a0e4-1d5a-467d-a922-f94ea689f037", "eventTime": "2019-08-02T18:32:33Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "626fded9-338c-41b3-b28e-6c20d96f8b08", "record_id": "flaws_cloudtrail:0000476:626fded9-338c-41b3-b28e-6c20d96f8b08", "row_index": 476, "timestamp": "2019-08-02T18:35:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "626fded9-338c-41b3-b28e-6c20d96f8b08", "eventTime": "2019-08-02T18:35:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d82e5f-aae5-4c24-b894-d89aa3713b33", "record_id": "flaws_cloudtrail:0000477:a3d82e5f-aae5-4c24-b894-d89aa3713b33", "row_index": 477, "timestamp": "2019-08-02T18:38:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-88"], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d82e5f-aae5-4c24-b894-d89aa3713b33", "eventTime": "2019-08-02T18:38:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-88", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-88"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ff49cce-b229-4d1a-93ac-b478a6009a58", "record_id": "flaws_cloudtrail:0000478:6ff49cce-b229-4d1a-93ac-b478a6009a58", "row_index": 478, "timestamp": "2019-08-02T18:40:02Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ff49cce-b229-4d1a-93ac-b478a6009a58", "eventTime": "2019-08-02T18:40:02Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshotID.Malformed", "errorMessage": "Value ( snap-83d15d668fb2941dbd ) for parameter SNAPSHOT is invalid. ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941dbd", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ff49cce-b229-4d1a-93ac-b478a6009a58", "record_id": "flaws_cloudtrail:0000479:6ff49cce-b229-4d1a-93ac-b478a6009a58", "row_index": 479, "timestamp": "2019-08-02T18:40:02Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ff49cce-b229-4d1a-93ac-b478a6009a58", "eventTime": "2019-08-02T18:40:02Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshotID.Malformed", "errorMessage": "Value ( snap-83d15d668fb2941dbd ) for parameter SNAPSHOT is invalid. ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941dbd", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f8ac927-e697-4d61-b170-ca9608d045f5", "record_id": "flaws_cloudtrail:0000480:9f8ac927-e697-4d61-b170-ca9608d045f5", "row_index": 480, "timestamp": "2019-08-02T18:40:07Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA973S0JJ1XB2NA6EY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "13.130.84.149", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7770"], "raw_record_size_bytes": 613, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f8ac927-e697-4d61-b170-ca9608d045f5", "eventTime": "2019-08-02T18:40:07Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "13.130.84.149", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA973S0JJ1XB2NA6EY", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-7770", "key": "reports/162.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7770"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "record_id": "flaws_cloudtrail:0000481:bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "row_index": 481, "timestamp": "2019-08-02T18:40:16Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1535, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "eventTime": "2019-08-02T18:40:16Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C0fC1l7ahSIiYwAU4MWTPfLOAHl05A20iViPB2aM4ChORW7KDIdkyR02ao4XLVBIVnk4F3vlyymYOc4--_ZxJeNOxuXWWFzwzs47HAqTdLR5bzHqbNgBvhQ7M2KNqIOgSNkhriIY7K7T1j0KzvU0GHDAkSjiMDoXmTbUIkt7olYtmzxiM3MjUhX5BL9-sllapxgYXuoCCB4y528FfXTbqkhQlxdZR1XAfNrVUoREA51MU7UGK3rXUqwB70QeQn49XQok8L5fwgu2TOl1dSVuVXluUXx-gAUecXqYNoCJH0y9AfD8ftcezB2quPWxBjFWFiZT2PCO92K0azDOmCjjBGmLanbtF2KdQJHs5qJjtQGZL4Zd4hvSfby5ejxgTmk5ptjMv3YYXstlZr21M4EdPxP6uTMpBRMvrGqn_AhZbAs5qkCI7DNozPjmVU4xa40Yo8hZ2kBle3JIxuwyYLDmi1Kyl3k3dDtISUNJdCBhBHx39xer2T1hidGarQv27ImPGInQJSDjVlqBvEHPpsMNYLmAODFPqr6oJzRiPRIR7Isy3KkMzk0kUECHPu-jftP-6mUu82wLhgSzQ56ZUb8Xw7eSurjXGOG-2lWVBKSsTlVkacGthM1Gobn5zEikjxdBOAbrAQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "record_id": "flaws_cloudtrail:0000482:bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "row_index": 482, "timestamp": "2019-08-02T18:40:16Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1535, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1bc3bc-9ab3-47a2-9416-655ce228ec10", "eventTime": "2019-08-02T18:40:16Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C0fC1l7ahSIiYwAU4MWTPfLOAHl05A20iViPB2aM4ChORW7KDIdkyR02ao4XLVBIVnk4F3vlyymYOc4--_ZxJeNOxuXWWFzwzs47HAqTdLR5bzHqbNgBvhQ7M2KNqIOgSNkhriIY7K7T1j0KzvU0GHDAkSjiMDoXmTbUIkt7olYtmzxiM3MjUhX5BL9-sllapxgYXuoCCB4y528FfXTbqkhQlxdZR1XAfNrVUoREA51MU7UGK3rXUqwB70QeQn49XQok8L5fwgu2TOl1dSVuVXluUXx-gAUecXqYNoCJH0y9AfD8ftcezB2quPWxBjFWFiZT2PCO92K0azDOmCjjBGmLanbtF2KdQJHs5qJjtQGZL4Zd4hvSfby5ejxgTmk5ptjMv3YYXstlZr21M4EdPxP6uTMpBRMvrGqn_AhZbAs5qkCI7DNozPjmVU4xa40Yo8hZ2kBle3JIxuwyYLDmi1Kyl3k3dDtISUNJdCBhBHx39xer2T1hidGarQv27ImPGInQJSDjVlqBvEHPpsMNYLmAODFPqr6oJzRiPRIR7Isy3KkMzk0kUECHPu-jftP-6mUu82wLhgSzQ56ZUb8Xw7eSurjXGOG-2lWVBKSsTlVkacGthM1Gobn5zEikjxdBOAbrAQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae96250-aa0d-45da-a835-350ca63b4b0f", "record_id": "flaws_cloudtrail:0000483:6ae96250-aa0d-45da-a835-350ca63b4b0f", "row_index": 483, "timestamp": "2019-08-02T18:49:56Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-sdk-go/1.4.14 (go1.6.2; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae96250-aa0d-45da-a835-350ca63b4b0f", "eventTime": "2019-08-02T18:49:56Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-sdk-go/1.4.14 (go1.6.2; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIASFN8K4P3N8XV4NZA", "expiration": "Aug 2, 2019 10:49:56 PM", "sessionToken": "FQoGZXIvYXdzEHQaDNM9RoCVzOY7NnRUJCKrAejPEpgbApJOXd8PMDda+CT7bxE9anVJhYJk6n0rPFka9/V2t6W/qpedVmXBLwt5wDdnsQGf5lpY+MJ8Z2Z2ZBs4wfwXa0dJaNfB9g2z4B9TK6ny7xDo1tekLHIRP7SsBnE+VNsQsLkk9foijRsfQInISg/RDU8WBXSd/yJpjqu7+V7+guMJm4zYgQY99VU7pW/nv7ISgQJGh7doLgxfZ0yxdu9fHPjCin2/JSjUi5LqBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae96250-aa0d-45da-a835-350ca63b4b0f", "record_id": "flaws_cloudtrail:0000484:6ae96250-aa0d-45da-a835-350ca63b4b0f", "row_index": 484, "timestamp": "2019-08-02T18:49:56Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-sdk-go/1.4.14 (go1.6.2; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae96250-aa0d-45da-a835-350ca63b4b0f", "eventTime": "2019-08-02T18:49:56Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-sdk-go/1.4.14 (go1.6.2; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIASFN8K4P3N8XV4NZA", "expiration": "Aug 2, 2019 10:49:56 PM", "sessionToken": "FQoGZXIvYXdzEHQaDNM9RoCVzOY7NnRUJCKrAejPEpgbApJOXd8PMDda+CT7bxE9anVJhYJk6n0rPFka9/V2t6W/qpedVmXBLwt5wDdnsQGf5lpY+MJ8Z2Z2ZBs4wfwXa0dJaNfB9g2z4B9TK6ny7xDo1tekLHIRP7SsBnE+VNsQsLkk9foijRsfQInISg/RDU8WBXSd/yJpjqu7+V7+guMJm4zYgQY99VU7pW/nv7ISgQJGh7doLgxfZ0yxdu9fHPjCin2/JSjUi5LqBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6efab44b-4c5e-45d4-a856-336e0c62432b", "record_id": "flaws_cloudtrail:0000485:6efab44b-4c5e-45d4-a856-336e0c62432b", "row_index": 485, "timestamp": "2019-08-02T18:50:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6efab44b-4c5e-45d4-a856-336e0c62432b", "eventTime": "2019-08-02T18:50:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6efab44b-4c5e-45d4-a856-336e0c62432b", "record_id": "flaws_cloudtrail:0000486:6efab44b-4c5e-45d4-a856-336e0c62432b", "row_index": 486, "timestamp": "2019-08-02T18:50:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6efab44b-4c5e-45d4-a856-336e0c62432b", "eventTime": "2019-08-02T18:50:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f173844-c6e3-416c-a55a-2d64480b6af4", "record_id": "flaws_cloudtrail:0000487:f173844-c6e3-416c-a55a-2d64480b6af4", "row_index": 487, "timestamp": "2019-08-02T18:50:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f173844-c6e3-416c-a55a-2d64480b6af4", "eventTime": "2019-08-02T18:50:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f173844-c6e3-416c-a55a-2d64480b6af4", "record_id": "flaws_cloudtrail:0000488:f173844-c6e3-416c-a55a-2d64480b6af4", "row_index": 488, "timestamp": "2019-08-02T18:50:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f173844-c6e3-416c-a55a-2d64480b6af4", "eventTime": "2019-08-02T18:50:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e81fb39f-9741-4ae1-8555-4cdf475d16a7", "record_id": "flaws_cloudtrail:0000489:e81fb39f-9741-4ae1-8555-4cdf475d16a7", "row_index": 489, "timestamp": "2019-08-02T19:15:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e81fb39f-9741-4ae1-8555-4cdf475d16a7", "eventTime": "2019-08-02T19:15:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e81fb39f-9741-4ae1-8555-4cdf475d16a7", "record_id": "flaws_cloudtrail:0000490:e81fb39f-9741-4ae1-8555-4cdf475d16a7", "row_index": 490, "timestamp": "2019-08-02T19:15:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e81fb39f-9741-4ae1-8555-4cdf475d16a7", "eventTime": "2019-08-02T19:15:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551e4638-7ce5-4bac-bce8-db16a79d20f2", "record_id": "flaws_cloudtrail:0000491:551e4638-7ce5-4bac-bce8-db16a79d20f2", "row_index": 491, "timestamp": "2019-08-02T19:15:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551e4638-7ce5-4bac-bce8-db16a79d20f2", "eventTime": "2019-08-02T19:15:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4THFhZmlWZHh1Tng1YmdzK2g5NE4xWUNOOEE1TitlSWVvM0I0R0ZPL1J2RnF1a2pJbEcza2pwK1RWZzZPK3J5OWJRZmtlS3kxU1dGRFJETDQwUUxKNkZNTklLeWxiZlNzWFY1U01ScEFXYmJ1ZjdZYitSVSthVDFCNEViejM1eWp1UWs4UGtuQW1LZytGRURNVEZjTVhMWFVkN0VGTWlKNGtGYTF0ZnZFbFY1TU8vaU5ZSFZQWUhkYVRvNlFYemxFc1hQcUdMZEpVazEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551e4638-7ce5-4bac-bce8-db16a79d20f2", "record_id": "flaws_cloudtrail:0000492:551e4638-7ce5-4bac-bce8-db16a79d20f2", "row_index": 492, "timestamp": "2019-08-02T19:15:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551e4638-7ce5-4bac-bce8-db16a79d20f2", "eventTime": "2019-08-02T19:15:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4THFhZmlWZHh1Tng1YmdzK2g5NE4xWUNOOEE1TitlSWVvM0I0R0ZPL1J2RnF1a2pJbEcza2pwK1RWZzZPK3J5OWJRZmtlS3kxU1dGRFJETDQwUUxKNkZNTklLeWxiZlNzWFY1U01ScEFXYmJ1ZjdZYitSVSthVDFCNEViejM1eWp1UWs4UGtuQW1LZytGRURNVEZjTVhMWFVkN0VGTWlKNGtGYTF0ZnZFbFY1TU8vaU5ZSFZQWUhkYVRvNlFYemxFc1hQcUdMZEpVazEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60c3079a-e130-48fd-b91d-cf5805d808f2", "record_id": "flaws_cloudtrail:0000493:60c3079a-e130-48fd-b91d-cf5805d808f2", "row_index": 493, "timestamp": "2019-08-02T19:15:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60c3079a-e130-48fd-b91d-cf5805d808f2", "eventTime": "2019-08-02T19:15:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmV0hzYzRWYnpZNnJqTmM5dG92Tk14aktqOU5jQ0VJOTFZYnlFL0J0ajFZdGYrb3BaMlJpRVNNN3JiOFdMQlZVTkNHVnpMa1VqeVN4WW0vekxETUM1ZmpMYUg2TDNTYXEzMlZKRjVKYklUa1lxK1lCdjVJZG9FM3B3QjBEeTRJL2tZU3k2OGtHQVM2WU9LaEdjenhBUWtLRFhlTmdWNWdhbndMNDF6U1M0L20vTlBoeitaSFhJa3NCNDllVW9IVmxnTDI5R1U2dVBiST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60c3079a-e130-48fd-b91d-cf5805d808f2", "record_id": "flaws_cloudtrail:0000494:60c3079a-e130-48fd-b91d-cf5805d808f2", "row_index": 494, "timestamp": "2019-08-02T19:15:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60c3079a-e130-48fd-b91d-cf5805d808f2", "eventTime": "2019-08-02T19:15:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmV0hzYzRWYnpZNnJqTmM5dG92Tk14aktqOU5jQ0VJOTFZYnlFL0J0ajFZdGYrb3BaMlJpRVNNN3JiOFdMQlZVTkNHVnpMa1VqeVN4WW0vekxETUM1ZmpMYUg2TDNTYXEzMlZKRjVKYklUa1lxK1lCdjVJZG9FM3B3QjBEeTRJL2tZU3k2OGtHQVM2WU9LaEdjenhBUWtLRFhlTmdWNWdhbndMNDF6U1M0L20vTlBoeitaSFhJa3NCNDllVW9IVmxnTDI5R1U2dVBiST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "record_id": "flaws_cloudtrail:0000495:bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "row_index": 495, "timestamp": "2019-08-02T19:15:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "eventTime": "2019-08-02T19:15:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNQkEwWUYyd3IvWHZaWWJ2RnNvUDVJcStVaGZJdjhoSWZqejExREx2L09uQTlLbGpsSEJJMFhib25oSHhGeEtHYWZESnFpczBwZHpYMXFMSThjU0RvSGNwbERZVTJvT25DZXkvNDVMWlhaaW9kOGdnQTA3dk4rRjNWWE1sZWZMcmlCME1kb2g3ZFRZVksvKys5UmtDVG5YM25sazZqajc0UmNGODNzTWIzVm5INkE5dVhtZWFkaC9jQzRuRFd0WHE1cmZtaGcxSkNoSWsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "record_id": "flaws_cloudtrail:0000496:bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "row_index": 496, "timestamp": "2019-08-02T19:15:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcfd935e-715d-4aaa-a015-92c6bbcdfd8e", "eventTime": "2019-08-02T19:15:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNQkEwWUYyd3IvWHZaWWJ2RnNvUDVJcStVaGZJdjhoSWZqejExREx2L09uQTlLbGpsSEJJMFhib25oSHhGeEtHYWZESnFpczBwZHpYMXFMSThjU0RvSGNwbERZVTJvT25DZXkvNDVMWlhaaW9kOGdnQTA3dk4rRjNWWE1sZWZMcmlCME1kb2g3ZFRZVksvKys5UmtDVG5YM25sazZqajc0UmNGODNzTWIzVm5INkE5dVhtZWFkaC9jQzRuRFd0WHE1cmZtaGcxSkNoSWsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647b1a5c-3b8f-4579-8948-097644fb3fd43", "record_id": "flaws_cloudtrail:0000497:647b1a5c-3b8f-4579-8948-097644fb3fd43", "row_index": 497, "timestamp": "2019-08-02T19:15:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647b1a5c-3b8f-4579-8948-097644fb3fd43", "eventTime": "2019-08-02T19:15:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsc0VtZ1pYRFhXbjZWVTVRbHphQkpZUWRPcWliNW4vaVJKZVJFSmJCUDVFU2d1L1hkaHRKYWI0Yjhod3NDalIvdlNma21NdnhkajJpdzkwOUVtTXpWWW9QSjd1aWdONGRLSVg2WHRaTnlnVkZ4aHJtWFY1WEwrc1AyakJPNUhYZGszbU1Tc2syczczS3ByQnlaU3VUamlLYy80VXZrYnF6VEhrcnhFbnFXU1Z0a0pkV1NkUzlwbmlIMXlTZGMxd3p2dnJOTUtnVk9LN1oiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647b1a5c-3b8f-4579-8948-097644fb3fd43", "record_id": "flaws_cloudtrail:0000498:647b1a5c-3b8f-4579-8948-097644fb3fd43", "row_index": 498, "timestamp": "2019-08-02T19:15:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647b1a5c-3b8f-4579-8948-097644fb3fd43", "eventTime": "2019-08-02T19:15:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsc0VtZ1pYRFhXbjZWVTVRbHphQkpZUWRPcWliNW4vaVJKZVJFSmJCUDVFU2d1L1hkaHRKYWI0Yjhod3NDalIvdlNma21NdnhkajJpdzkwOUVtTXpWWW9QSjd1aWdONGRLSVg2WHRaTnlnVkZ4aHJtWFY1WEwrc1AyakJPNUhYZGszbU1Tc2syczczS3ByQnlaU3VUamlLYy80VXZrYnF6VEhrcnhFbnFXU1Z0a0pkV1NkUzlwbmlIMXlTZGMxd3p2dnJOTUtnVk9LN1oiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73e261c-b58c-4eb3-8ed8-30310ed49a", "record_id": "flaws_cloudtrail:0000499:f73e261c-b58c-4eb3-8ed8-30310ed49a", "row_index": 499, "timestamp": "2019-08-02T19:15:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73e261c-b58c-4eb3-8ed8-30310ed49a", "eventTime": "2019-08-02T19:15:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSM05IUFpwUmdOTVR2REthQ1R3bWFlL0RDa1p2NjVNWCtwTmRIOFYxN3UrdElwOFNHRVpBMUNUQ3hRNTRWOXN3MEhDZzgwNDFQQmNUSnhLTUgvYmdNQWsrQXlYMjFERTA4OHFPbllJK1lrb01aU3NHZWdoanNSRkhJaUt2YWtiemtvTHAyOWJtaVFMM0s4Z3MvbVR4VUUyK1E2K0lhZmZYN2RpN1FkaHdxNzMyeS9jUHI2d3ArRFRuc3pzSDZYZ0hZL2xuQ3ltNEg0c1YiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73e261c-b58c-4eb3-8ed8-30310ed49a", "record_id": "flaws_cloudtrail:0000500:f73e261c-b58c-4eb3-8ed8-30310ed49a", "row_index": 500, "timestamp": "2019-08-02T19:15:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73e261c-b58c-4eb3-8ed8-30310ed49a", "eventTime": "2019-08-02T19:15:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSM05IUFpwUmdOTVR2REthQ1R3bWFlL0RDa1p2NjVNWCtwTmRIOFYxN3UrdElwOFNHRVpBMUNUQ3hRNTRWOXN3MEhDZzgwNDFQQmNUSnhLTUgvYmdNQWsrQXlYMjFERTA4OHFPbllJK1lrb01aU3NHZWdoanNSRkhJaUt2YWtiemtvTHAyOWJtaVFMM0s4Z3MvbVR4VUUyK1E2K0lhZmZYN2RpN1FkaHdxNzMyeS9jUHI2d3ArRFRuc3pzSDZYZ0hZL2xuQ3ltNEg0c1YiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86f570f4-7821-4d04-acdd-1eca48c9a3e5", "record_id": "flaws_cloudtrail:0000501:86f570f4-7821-4d04-acdd-1eca48c9a3e5", "row_index": 501, "timestamp": "2019-08-02T19:15:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86f570f4-7821-4d04-acdd-1eca48c9a3e5", "eventTime": "2019-08-02T19:15:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1Z255em15NDIwWkk0VndFc25aWUVEd094aTBKSmFzdUlUdUpDZ3pDM2hQWFh3MnlRMWFrekhrMkswV1dScUEyY081dDhGOUVWNkw0SkhUVm45ZnZlK3V5MWFJc2JLZmw5QUNDb2Vtck0wU2srWHA4bXN6cld2dXBucHVGcld4SFhNdXNzWW9sN1k1eFREd3ZIaVpabUNwK1J5cG81V05HUnlnbllaYnVCYURkdlFsRW40bzg5Uk5VekdWY1VjQVo4WklNYVhmbHUvQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86f570f4-7821-4d04-acdd-1eca48c9a3e5", "record_id": "flaws_cloudtrail:0000502:86f570f4-7821-4d04-acdd-1eca48c9a3e5", "row_index": 502, "timestamp": "2019-08-02T19:15:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86f570f4-7821-4d04-acdd-1eca48c9a3e5", "eventTime": "2019-08-02T19:15:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1Z255em15NDIwWkk0VndFc25aWUVEd094aTBKSmFzdUlUdUpDZ3pDM2hQWFh3MnlRMWFrekhrMkswV1dScUEyY081dDhGOUVWNkw0SkhUVm45ZnZlK3V5MWFJc2JLZmw5QUNDb2Vtck0wU2srWHA4bXN6cld2dXBucHVGcld4SFhNdXNzWW9sN1k1eFREd3ZIaVpabUNwK1J5cG81V05HUnlnbllaYnVCYURkdlFsRW40bzg5Uk5VekdWY1VjQVo4WklNYVhmbHUvQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6920a9-a5f7-448d-9969-0a596205f074", "record_id": "flaws_cloudtrail:0000503:1c6920a9-a5f7-448d-9969-0a596205f074", "row_index": 503, "timestamp": "2019-08-02T19:15:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6920a9-a5f7-448d-9969-0a596205f074", "eventTime": "2019-08-02T19:15:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RmlONlV6MjdLdXhEcVFQSURFRVFrL0RrcS80bDRGMm9NeXhYTWIxNUpFdGpjMGNnaUs0ZEMwSktYYS9YUW5XaDc3VXRIM3NWNVg5eTdqT3Y1S1RwUFdQMVNMUUZxb0VxUXFIZjY4QUZmZzlCaC9pYjlEODVkWitONFY2VnBCRG5lbi9qYVZadkJrdWhFRzZac0JZYnZZc2hrZDZOYXZpa3gydDJYbzZKVkNGQjBQNzBuRDlpdENyd2lqb2ZKNjlnd0lWSk5ydzNXVXciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6920a9-a5f7-448d-9969-0a596205f074", "record_id": "flaws_cloudtrail:0000504:1c6920a9-a5f7-448d-9969-0a596205f074", "row_index": 504, "timestamp": "2019-08-02T19:15:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6920a9-a5f7-448d-9969-0a596205f074", "eventTime": "2019-08-02T19:15:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RmlONlV6MjdLdXhEcVFQSURFRVFrL0RrcS80bDRGMm9NeXhYTWIxNUpFdGpjMGNnaUs0ZEMwSktYYS9YUW5XaDc3VXRIM3NWNVg5eTdqT3Y1S1RwUFdQMVNMUUZxb0VxUXFIZjY4QUZmZzlCaC9pYjlEODVkWitONFY2VnBCRG5lbi9qYVZadkJrdWhFRzZac0JZYnZZc2hrZDZOYXZpa3gydDJYbzZKVkNGQjBQNzBuRDlpdENyd2lqb2ZKNjlnd0lWSk5ydzNXVXciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01138ec-ed79-4790-b04b-f084944b18b9", "record_id": "flaws_cloudtrail:0000505:01138ec-ed79-4790-b04b-f084944b18b9", "row_index": 505, "timestamp": "2019-08-02T19:16:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01138ec-ed79-4790-b04b-f084944b18b9", "eventTime": "2019-08-02T19:16:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOc2JvSEE5S2FHWFdoRnBwTHF1R2NVRUhYVUk2Z2dKOTN3VExzRkpMWWpDL2pmL3hybnlydEpLeFM0UEFUK0JnN2o5ZnBnM0N4TllCSEphYWNUSWh2TlI3V1dTM3AxUnRPMkRxRHc0Mlc0OUlielRNbGxFeS80a0ZDNklQQkhTZFBmcnFueG1qNEg4aW44OWw4TGNnb0hMMVBjTFYwRGFpN2FsQlk2dHRxNjFYa0YwcEQwa0xVcFZ3bXRueDJnK0NSNllscFZteEJaRUIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01138ec-ed79-4790-b04b-f084944b18b9", "record_id": "flaws_cloudtrail:0000506:01138ec-ed79-4790-b04b-f084944b18b9", "row_index": 506, "timestamp": "2019-08-02T19:16:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01138ec-ed79-4790-b04b-f084944b18b9", "eventTime": "2019-08-02T19:16:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOc2JvSEE5S2FHWFdoRnBwTHF1R2NVRUhYVUk2Z2dKOTN3VExzRkpMWWpDL2pmL3hybnlydEpLeFM0UEFUK0JnN2o5ZnBnM0N4TllCSEphYWNUSWh2TlI3V1dTM3AxUnRPMkRxRHc0Mlc0OUlielRNbGxFeS80a0ZDNklQQkhTZFBmcnFueG1qNEg4aW44OWw4TGNnb0hMMVBjTFYwRGFpN2FsQlk2dHRxNjFYa0YwcEQwa0xVcFZ3bXRueDJnK0NSNllscFZteEJaRUIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d90b8b-2471-4445-a809-947598a19db3", "record_id": "flaws_cloudtrail:0000507:50d90b8b-2471-4445-a809-947598a19db3", "row_index": 507, "timestamp": "2019-08-02T19:16:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d90b8b-2471-4445-a809-947598a19db3", "eventTime": "2019-08-02T19:16:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrd1lEMXFKNmlpbG5VRXZaNFlmZ2xQY2xIRjJJVHJOTDgrekNxTndlN3NwaHF6dTVCMHV4SFVCTm1TOFN0MVBSYWV1b2tiSncwUVFNQmMxWHEzZ1luZWNkYWYzMDdEVUhQZE91aHRoNDZrVnNKWXl5WGF1N2lENm85WllUMENFUHVObi83Mm1qTnZXNlZaQ3dFbVlHcm9nMXNPU3VLOGMzQlBxWloyQjlBUytpWHZtaE5hZklnYXprOWo5dDBwK1lKaXlZS3Vyb0VDbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d90b8b-2471-4445-a809-947598a19db3", "record_id": "flaws_cloudtrail:0000508:50d90b8b-2471-4445-a809-947598a19db3", "row_index": 508, "timestamp": "2019-08-02T19:16:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d90b8b-2471-4445-a809-947598a19db3", "eventTime": "2019-08-02T19:16:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrd1lEMXFKNmlpbG5VRXZaNFlmZ2xQY2xIRjJJVHJOTDgrekNxTndlN3NwaHF6dTVCMHV4SFVCTm1TOFN0MVBSYWV1b2tiSncwUVFNQmMxWHEzZ1luZWNkYWYzMDdEVUhQZE91aHRoNDZrVnNKWXl5WGF1N2lENm85WllUMENFUHVObi83Mm1qTnZXNlZaQ3dFbVlHcm9nMXNPU3VLOGMzQlBxWloyQjlBUytpWHZtaE5hZklnYXprOWo5dDBwK1lKaXlZS3Vyb0VDbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13740ce-3c06-42d0-8e91-9db1610d7f63", "record_id": "flaws_cloudtrail:0000509:13740ce-3c06-42d0-8e91-9db1610d7f63", "row_index": 509, "timestamp": "2019-08-02T19:16:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13740ce-3c06-42d0-8e91-9db1610d7f63", "eventTime": "2019-08-02T19:16:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUlBBYzVzeTZsNm5icnRGV1QyMkRYcVhpMmJTYjNMMFZTNFlwZFJtNVhLVytTYnh0TWxxMG1NVW9uc1NLNGJDTXR2aTEzckhNK0JvV2RSQjBia294cHlDdE9qR1ZUMXlzN1dzZ0p2cFZjWTZBUnJYRXljbnA2WEVqSXZ5REJYMHNvUHNaTDluSVE0Y1JGODJOTCtpUWNOSlgxcWE3MStvZk5KQnFaSFQ3VTBJT1FsSHk0N09kenRMSXBrRXhwVHcvSHR4eFB6c1FmTS8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13740ce-3c06-42d0-8e91-9db1610d7f63", "record_id": "flaws_cloudtrail:0000510:13740ce-3c06-42d0-8e91-9db1610d7f63", "row_index": 510, "timestamp": "2019-08-02T19:16:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13740ce-3c06-42d0-8e91-9db1610d7f63", "eventTime": "2019-08-02T19:16:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUlBBYzVzeTZsNm5icnRGV1QyMkRYcVhpMmJTYjNMMFZTNFlwZFJtNVhLVytTYnh0TWxxMG1NVW9uc1NLNGJDTXR2aTEzckhNK0JvV2RSQjBia294cHlDdE9qR1ZUMXlzN1dzZ0p2cFZjWTZBUnJYRXljbnA2WEVqSXZ5REJYMHNvUHNaTDluSVE0Y1JGODJOTCtpUWNOSlgxcWE3MStvZk5KQnFaSFQ3VTBJT1FsSHk0N09kenRMSXBrRXhwVHcvSHR4eFB6c1FmTS8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "record_id": "flaws_cloudtrail:0000511:48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "row_index": 511, "timestamp": "2019-08-02T19:16:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "eventTime": "2019-08-02T19:16:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqbXMyTm5TWmY0eTNkRTZLUkJnd1k0Zi9VTkpjeTZWOWpSMnFDb0R1MDFNcy8wczVZUmZVb3JDUFdScDMzK211UmduK0crbnh6aHdEZXBmS2JzQ0lMUzVnVDRzZnkvYldJU212MDNVZ0FIU1Zvc1k4R2d3ZWpDNGVyNVdTZ0QzMHpXM3pNbmRqSEZiZXFIUC9QcnU4SC9sU2xLcEd2L2ZjYmx6ZVloRTBSSXl6M3A5M3lRYVdmWDI1N0Q2ZnhzQUMrb0VIeEc4NnB5dEMiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "record_id": "flaws_cloudtrail:0000512:48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "row_index": 512, "timestamp": "2019-08-02T19:16:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a6fafa-c76f-47e9-8887-b7ce7ff37ff6", "eventTime": "2019-08-02T19:16:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqbXMyTm5TWmY0eTNkRTZLUkJnd1k0Zi9VTkpjeTZWOWpSMnFDb0R1MDFNcy8wczVZUmZVb3JDUFdScDMzK211UmduK0crbnh6aHdEZXBmS2JzQ0lMUzVnVDRzZnkvYldJU212MDNVZ0FIU1Zvc1k4R2d3ZWpDNGVyNVdTZ0QzMHpXM3pNbmRqSEZiZXFIUC9QcnU4SC9sU2xLcEd2L2ZjYmx6ZVloRTBSSXl6M3A5M3lRYVdmWDI1N0Q2ZnhzQUMrb0VIeEc4NnB5dEMiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f84137-a289-41ff-b574-4340f14feca4", "record_id": "flaws_cloudtrail:0000513:f84137-a289-41ff-b574-4340f14feca4", "row_index": 513, "timestamp": "2019-08-02T19:16:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f84137-a289-41ff-b574-4340f14feca4", "eventTime": "2019-08-02T19:16:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5Q09iTFJFem1CVGtuKy9Ob0pIYlFER1ZsdnVGc0tKY2E2alFGNEJHV1I4cWJydDZzeDJtZU14V2pUeU9lanBKcEdhUW5yWXhJSFpRQmNHb0xoRlJvS3dyZFdyUnFvQjY1Rks5SzZTK0RoUzVUb01qRXIxcHpiRUZKeUNKclJUY2J4dDlDSnVzNFFJSGR6L0RwclBCZ3VoNTZpR0t6c256dDJRTnQ5REpOc3VIRVdSWG5rOGlXVmRkVElKVGdUR0M2MHBtWThHQXVkME4iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f84137-a289-41ff-b574-4340f14feca4", "record_id": "flaws_cloudtrail:0000514:f84137-a289-41ff-b574-4340f14feca4", "row_index": 514, "timestamp": "2019-08-02T19:16:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f84137-a289-41ff-b574-4340f14feca4", "eventTime": "2019-08-02T19:16:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5Q09iTFJFem1CVGtuKy9Ob0pIYlFER1ZsdnVGc0tKY2E2alFGNEJHV1I4cWJydDZzeDJtZU14V2pUeU9lanBKcEdhUW5yWXhJSFpRQmNHb0xoRlJvS3dyZFdyUnFvQjY1Rks5SzZTK0RoUzVUb01qRXIxcHpiRUZKeUNKclJUY2J4dDlDSnVzNFFJSGR6L0RwclBCZ3VoNTZpR0t6c256dDJRTnQ5REpOc3VIRVdSWG5rOGlXVmRkVElKVGdUR0M2MHBtWThHQXVkME4iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "record_id": "flaws_cloudtrail:0000515:6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "row_index": 515, "timestamp": "2019-08-02T19:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "eventTime": "2019-08-02T19:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTV3hTYjRVMXlHODltSTRPcGRQZnFmZnJhenhIRXhuOEd6ZEdCYW9Kc1cyQ052OEphQmVXOWVJcnY3U254dFNKQWduMVkyc1pFT09yaTZFMlVtMjJrZXR0Y1VlZ1FZSVJZMUZQQWhEeUlYOUYwMzd6dXYwNm9QQjVpMzB4NFU2K2t6OU1ndnFiamlXOVByMDhQd2xzVzYwcVM3MkNyald5UW5DYnA3Y3Baa2hsSnA1UE9XbkdlY1BaTUFIN3pvNDVMNzNlbTZuTEh0eE0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "record_id": "flaws_cloudtrail:0000516:6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "row_index": 516, "timestamp": "2019-08-02T19:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cad4a37-cb53-4b1d-8fd1-2b9c1177e607", "eventTime": "2019-08-02T19:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTV3hTYjRVMXlHODltSTRPcGRQZnFmZnJhenhIRXhuOEd6ZEdCYW9Kc1cyQ052OEphQmVXOWVJcnY3U254dFNKQWduMVkyc1pFT09yaTZFMlVtMjJrZXR0Y1VlZ1FZSVJZMUZQQWhEeUlYOUYwMzd6dXYwNm9QQjVpMzB4NFU2K2t6OU1ndnFiamlXOVByMDhQd2xzVzYwcVM3MkNyald5UW5DYnA3Y3Baa2hsSnA1UE9XbkdlY1BaTUFIN3pvNDVMNzNlbTZuTEh0eE0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c212a0-a0dd-40b7-b239-c41f5782a9ac", "record_id": "flaws_cloudtrail:0000517:93c212a0-a0dd-40b7-b239-c41f5782a9ac", "row_index": 517, "timestamp": "2019-08-02T19:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c212a0-a0dd-40b7-b239-c41f5782a9ac", "eventTime": "2019-08-02T19:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWS2N3T1NhR3BwU0VQYXNTK2pDZmJKSXdZZThmZnZzUEhUV05MbVR4TDNjQkxWeFBHM1I2bm5VRnNGT3dtU245L21FbDFXVXFKdEdiSkJZYnczNi9jWEdGdHVxN1VlSGdHbUZncjN1ZEU1bVJWOStZK0J0N0ZHUm1DV29xdk9LakRJOEV1VThkZkp4WGd4RUV5ank3TmVvWVo3RFpNeEQwZHFKK0hZc3ZpaFV5NW52elUvUkNoYW9XdzF0M0J3aktMazliUk13am0vVGhXQmhocTVMc0NiUE1jNENvMVhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93c212a0-a0dd-40b7-b239-c41f5782a9ac", "record_id": "flaws_cloudtrail:0000518:93c212a0-a0dd-40b7-b239-c41f5782a9ac", "row_index": 518, "timestamp": "2019-08-02T19:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93c212a0-a0dd-40b7-b239-c41f5782a9ac", "eventTime": "2019-08-02T19:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWS2N3T1NhR3BwU0VQYXNTK2pDZmJKSXdZZThmZnZzUEhUV05MbVR4TDNjQkxWeFBHM1I2bm5VRnNGT3dtU245L21FbDFXVXFKdEdiSkJZYnczNi9jWEdGdHVxN1VlSGdHbUZncjN1ZEU1bVJWOStZK0J0N0ZHUm1DV29xdk9LakRJOEV1VThkZkp4WGd4RUV5ank3TmVvWVo3RFpNeEQwZHFKK0hZc3ZpaFV5NW52elUvUkNoYW9XdzF0M0J3aktMazliUk13am0vVGhXQmhocTVMc0NiUE1jNENvMVhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "record_id": "flaws_cloudtrail:0000519:2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "row_index": 519, "timestamp": "2019-08-02T19:16:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "eventTime": "2019-08-02T19:16:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWdE9OdWZVZHR6OU1nOCtzNGdZQm82YnlVQmc2UkxMWXM2T0dmeWhCN0c5dFNKZXhQMzl3U1o0YytSSmEwSnFQV0E5WFV1ZnR3YklzRlBEamtHUEVySmRmZTlEendLVmRqRFRxWlAraUYvQTlnRWlQZFpMaHlLZDNQTk1DMkRrVk5LTktJNlZac1QwckljL0UwMWd6aU9ydHhHekhHbFJMbUxhQWQwREJwaGhkSlNOT0QrT3phbW50QmFoclNTND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "record_id": "flaws_cloudtrail:0000520:2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "row_index": 520, "timestamp": "2019-08-02T19:16:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de7c08a-ea47-49ce-9f33-30d157e4bcaf", "eventTime": "2019-08-02T19:16:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWdE9OdWZVZHR6OU1nOCtzNGdZQm82YnlVQmc2UkxMWXM2T0dmeWhCN0c5dFNKZXhQMzl3U1o0YytSSmEwSnFQV0E5WFV1ZnR3YklzRlBEamtHUEVySmRmZTlEendLVmRqRFRxWlAraUYvQTlnRWlQZFpMaHlLZDNQTk1DMkRrVk5LTktJNlZac1QwckljL0UwMWd6aU9ydHhHekhHbFJMbUxhQWQwREJwaGhkSlNOT0QrT3phbW50QmFoclNTND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "record_id": "flaws_cloudtrail:0000521:b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "row_index": 521, "timestamp": "2019-08-02T19:16:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1204, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "eventTime": "2019-08-02T19:16:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUjIwOWcralFQVGIxSWFEK2cvN2FwTTVsR1RjaHU5VlMwcEhISlNkcTRKMTJqbUh4WkhVY2NrQ2FRYTlabXVFWjRWMzE1UjZrM0Vic1lPdG9HQkxkOTMyMmNMeTFsWDZUMEw0VW53K05mVG5BTkRsS1g2ZFpPNGpXSHk3Y2R5UDBVRUZLc0dNUU52QUgzeWtIanFUQ1NoWDlNVzRqeGEyMEhUUXpBMkVOKzZaYUxNTzFOR2N6cTArdkRJNi9FRnhCLzZPOUlFbHpXN2NUd2JuM3kvWno1OFM2Y3V4R3cwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "record_id": "flaws_cloudtrail:0000522:b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "row_index": 522, "timestamp": "2019-08-02T19:16:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1204, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f29db8-90ee-4b3e-a6e9-5734a8c1f559", "eventTime": "2019-08-02T19:16:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUjIwOWcralFQVGIxSWFEK2cvN2FwTTVsR1RjaHU5VlMwcEhISlNkcTRKMTJqbUh4WkhVY2NrQ2FRYTlabXVFWjRWMzE1UjZrM0Vic1lPdG9HQkxkOTMyMmNMeTFsWDZUMEw0VW53K05mVG5BTkRsS1g2ZFpPNGpXSHk3Y2R5UDBVRUZLc0dNUU52QUgzeWtIanFUQ1NoWDlNVzRqeGEyMEhUUXpBMkVOKzZaYUxNTzFOR2N6cTArdkRJNi9FRnhCLzZPOUlFbHpXN2NUd2JuM3kvWno1OFM2Y3V4R3cwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dae3870f-ee98-4355-934b-973e9a6e26d3", "record_id": "flaws_cloudtrail:0000523:dae3870f-ee98-4355-934b-973e9a6e26d3", "row_index": 523, "timestamp": "2019-08-02T19:16:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dae3870f-ee98-4355-934b-973e9a6e26d3", "eventTime": "2019-08-02T19:16:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaUw1OVUva2ppdkNreFlrUEh3U1VqTmltNmtUSGtvNDZTMDc5aG5UVHVNckhhSVFlaFJXc3Y4UktOY2FkeExPdFZiaXZrT3UwV29uREgwQnFkZWFmSTNGaWE0NkRqNURQaWtQeFkvVldZVzllTys4SnVVUUZlNzd1SzR5RVcveGNLK2JXVHNZeW9JcTJoa3phdDN1Ris3TzZCRk5wRDBxeVI1VVE4THhaOWpUbzNHR3lrd3RWZmRQMjdNZ1ZvRkVJcTJsVGxZMzYyeWRKdHdGTzFNRyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dae3870f-ee98-4355-934b-973e9a6e26d3", "record_id": "flaws_cloudtrail:0000524:dae3870f-ee98-4355-934b-973e9a6e26d3", "row_index": 524, "timestamp": "2019-08-02T19:16:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dae3870f-ee98-4355-934b-973e9a6e26d3", "eventTime": "2019-08-02T19:16:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaUw1OVUva2ppdkNreFlrUEh3U1VqTmltNmtUSGtvNDZTMDc5aG5UVHVNckhhSVFlaFJXc3Y4UktOY2FkeExPdFZiaXZrT3UwV29uREgwQnFkZWFmSTNGaWE0NkRqNURQaWtQeFkvVldZVzllTys4SnVVUUZlNzd1SzR5RVcveGNLK2JXVHNZeW9JcTJoa3phdDN1Ris3TzZCRk5wRDBxeVI1VVE4THhaOWpUbzNHR3lrd3RWZmRQMjdNZ1ZvRkVJcTJsVGxZMzYyeWRKdHdGTzFNRyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b58f8589-4322-4fb8-b64a-c5afd62c9915", "record_id": "flaws_cloudtrail:0000525:b58f8589-4322-4fb8-b64a-c5afd62c9915", "row_index": 525, "timestamp": "2019-08-02T19:16:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1204, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b58f8589-4322-4fb8-b64a-c5afd62c9915", "eventTime": "2019-08-02T19:16:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3YjNkdXNBMWZnaEY4YUpzT0xLV1dsRzN4ZWsvWDZaYm9FK2E5ZkJ3K1MybWV4TG9FeW1wb29WTEMvODRoYzhrZVFERXRQQ2VNbUdDWERqUExQWERBUVVLZ1hRUDF3bVBhTDRVNE53STFxejl4SGw5RmdjcFRrMDh4NjFKZkNGWUhDRXZXZ2V6bFVwOUEvand6N2E2Qk9ZZlY5a0dqL2swQmdWRUNlZndVYVNsZVlRUHRXeDVKb1JQTEI3T1VwcW0zbDVoOWlrdzV0N1Q4T1RNRUYxaGxhd0x2Vi9rMS9ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b58f8589-4322-4fb8-b64a-c5afd62c9915", "record_id": "flaws_cloudtrail:0000526:b58f8589-4322-4fb8-b64a-c5afd62c9915", "row_index": 526, "timestamp": "2019-08-02T19:16:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1204, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b58f8589-4322-4fb8-b64a-c5afd62c9915", "eventTime": "2019-08-02T19:16:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3YjNkdXNBMWZnaEY4YUpzT0xLV1dsRzN4ZWsvWDZaYm9FK2E5ZkJ3K1MybWV4TG9FeW1wb29WTEMvODRoYzhrZVFERXRQQ2VNbUdDWERqUExQWERBUVVLZ1hRUDF3bVBhTDRVNE53STFxejl4SGw5RmdjcFRrMDh4NjFKZkNGWUhDRXZXZ2V6bFVwOUEvand6N2E2Qk9ZZlY5a0dqL2swQmdWRUNlZndVYVNsZVlRUHRXeDVKb1JQTEI3T1VwcW0zbDVoOWlrdzV0N1Q4T1RNRUYxaGxhd0x2Vi9rMS9ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "record_id": "flaws_cloudtrail:0000527:0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "row_index": 527, "timestamp": "2019-08-02T19:16:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "eventTime": "2019-08-02T19:16:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvYjVZTWR6TGs0MXZkaXlIazRDUTN4WFJPdGtqRStDcUprd0J5MS9Td3lmSzJoSDFnZzR3Unp4UVBRdm5MdmRCdE44a21uckZZYjdsaXRmMVBFTDZPVExPcEFNU3NlWkUzb2w4a0cwY2Z5T3VIanRQazdLem9BR2xsQjd0VVZEYSsrQjBCUG9xaUJaZXNaZ2xJUSs5MmdTUHhmS0NEaENSUUpaOHhqbDZuWnhLcTRPajVERDFNM3RnYTZtS1RJSWhHQXlHRG5SMTU4R2lwa1ZMR2hXQSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "record_id": "flaws_cloudtrail:0000528:0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "row_index": 528, "timestamp": "2019-08-02T19:16:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d7fa0b7-56af-41f0-9dd1-f143e0ab2d25", "eventTime": "2019-08-02T19:16:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvYjVZTWR6TGs0MXZkaXlIazRDUTN4WFJPdGtqRStDcUprd0J5MS9Td3lmSzJoSDFnZzR3Unp4UVBRdm5MdmRCdE44a21uckZZYjdsaXRmMVBFTDZPVExPcEFNU3NlWkUzb2w4a0cwY2Z5T3VIanRQazdLem9BR2xsQjd0VVZEYSsrQjBCUG9xaUJaZXNaZ2xJUSs5MmdTUHhmS0NEaENSUUpaOHhqbDZuWnhLcTRPajVERDFNM3RnYTZtS1RJSWhHQXlHRG5SMTU4R2lwa1ZMR2hXQSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8328e382-8b0a-43a2-8c00-537cf77b7bbc", "record_id": "flaws_cloudtrail:0000529:8328e382-8b0a-43a2-8c00-537cf77b7bbc", "row_index": 529, "timestamp": "2019-08-02T19:16:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8328e382-8b0a-43a2-8c00-537cf77b7bbc", "eventTime": "2019-08-02T19:16:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJubUhRT1ExQ1UwcnA2SmJwU2syVjMzWElnRTFFa0lEQWVoN0dIOFp4bDlQZEd2bWtRNVRURjA4dWxZekJkZGliWUF2TWFmbDlPM1BrZ1VRWDlkaUFEaHdXYVppZ1BFRzZtS1lnckc0QzhjcTVsSHlOYW5EVFNPTHkzcnBKMXFKZ1owaGlLdVZwa3d2VmVJYno5Ym9QYld1c202UW5Ldk5Da1ZmRkVuWSt3ZXA5Vm1POUFEbmdRb1N5Y0JhMjd5YWE2Uy9LcVVCZDNENXlFdWk3amFmNlB0QXlRTHl0dzY4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8328e382-8b0a-43a2-8c00-537cf77b7bbc", "record_id": "flaws_cloudtrail:0000530:8328e382-8b0a-43a2-8c00-537cf77b7bbc", "row_index": 530, "timestamp": "2019-08-02T19:16:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8328e382-8b0a-43a2-8c00-537cf77b7bbc", "eventTime": "2019-08-02T19:16:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJubUhRT1ExQ1UwcnA2SmJwU2syVjMzWElnRTFFa0lEQWVoN0dIOFp4bDlQZEd2bWtRNVRURjA4dWxZekJkZGliWUF2TWFmbDlPM1BrZ1VRWDlkaUFEaHdXYVppZ1BFRzZtS1lnckc0QzhjcTVsSHlOYW5EVFNPTHkzcnBKMXFKZ1owaGlLdVZwa3d2VmVJYno5Ym9QYld1c202UW5Ldk5Da1ZmRkVuWSt3ZXA5Vm1POUFEbmdRb1N5Y0JhMjd5YWE2Uy9LcVVCZDNENXlFdWk3amFmNlB0QXlRTHl0dzY4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8400e85c-092b-45fb-8c95-20373e5353cd", "record_id": "flaws_cloudtrail:0000531:8400e85c-092b-45fb-8c95-20373e5353cd", "row_index": 531, "timestamp": "2019-08-02T19:17:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8400e85c-092b-45fb-8c95-20373e5353cd", "eventTime": "2019-08-02T19:17:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0N2NrZEU4ZzVkWC9OeklYNFZ1dStnYVdTUE5hTll6TW1lZTdtdnVUZ1k3bUR5LzI0WmNYb2JWZmxndEdBei8wOEJvb24waXJiWnptR1VXZzgrUkVpZU9FMmxrbnhMZEJCbml3OGdLMkxqOU9GOXF3UEFrUTdINzY2SldEQ3NwM1Rmdlp0WjJJYnIvT29TdXRIazJweHpDNnNRS1VkYlVrKzdka0dpdkVZUDVubjJSOTJVYzFJS285UlB5NEtWZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8400e85c-092b-45fb-8c95-20373e5353cd", "record_id": "flaws_cloudtrail:0000532:8400e85c-092b-45fb-8c95-20373e5353cd", "row_index": 532, "timestamp": "2019-08-02T19:17:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8400e85c-092b-45fb-8c95-20373e5353cd", "eventTime": "2019-08-02T19:17:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0N2NrZEU4ZzVkWC9OeklYNFZ1dStnYVdTUE5hTll6TW1lZTdtdnVUZ1k3bUR5LzI0WmNYb2JWZmxndEdBei8wOEJvb24waXJiWnptR1VXZzgrUkVpZU9FMmxrbnhMZEJCbml3OGdLMkxqOU9GOXF3UEFrUTdINzY2SldEQ3NwM1Rmdlp0WjJJYnIvT29TdXRIazJweHpDNnNRS1VkYlVrKzdka0dpdkVZUDVubjJSOTJVYzFJS285UlB5NEtWZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "record_id": "flaws_cloudtrail:0000533:0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "row_index": 533, "timestamp": "2019-08-02T19:18:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "eventTime": "2019-08-02T19:18:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "record_id": "flaws_cloudtrail:0000534:0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "row_index": 534, "timestamp": "2019-08-02T19:18:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5e0762-4ef4-4498-b384-ab9a9b6d9c8f", "eventTime": "2019-08-02T19:18:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4695e728-c143-4183-8853-153845e90939", "record_id": "flaws_cloudtrail:0000535:4695e728-c143-4183-8853-153845e90939", "row_index": 535, "timestamp": "2019-08-02T19:20:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4695e728-c143-4183-8853-153845e90939", "eventTime": "2019-08-02T19:20:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4695e728-c143-4183-8853-153845e90939", "record_id": "flaws_cloudtrail:0000536:4695e728-c143-4183-8853-153845e90939", "row_index": 536, "timestamp": "2019-08-02T19:20:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4695e728-c143-4183-8853-153845e90939", "eventTime": "2019-08-02T19:20:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "record_id": "flaws_cloudtrail:0000537:6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "row_index": 537, "timestamp": "2019-08-02T19:20:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "eventTime": "2019-08-02T19:20:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "record_id": "flaws_cloudtrail:0000538:6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "row_index": 538, "timestamp": "2019-08-02T19:20:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0da95b-5e15-41e9-ae6b-aa03e6b1aa54", "eventTime": "2019-08-02T19:20:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "record_id": "flaws_cloudtrail:0000539:4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "row_index": 539, "timestamp": "2019-08-02T19:20:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "eventTime": "2019-08-02T19:20:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "record_id": "flaws_cloudtrail:0000540:4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "row_index": 540, "timestamp": "2019-08-02T19:20:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b30b7c0-ae4e-4a37-9eae-9d5011670cf2", "eventTime": "2019-08-02T19:20:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "record_id": "flaws_cloudtrail:0000541:cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "row_index": 541, "timestamp": "2019-08-02T19:21:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "eventTime": "2019-08-02T19:21:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "record_id": "flaws_cloudtrail:0000542:cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "row_index": 542, "timestamp": "2019-08-02T19:21:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb5556a9-4bc2-49a7-96cd-ebeb28cc6b5e", "eventTime": "2019-08-02T19:21:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969b6606-dc1a-4d3a-a557-2ab2df16906d", "record_id": "flaws_cloudtrail:0000543:969b6606-dc1a-4d3a-a557-2ab2df16906d", "row_index": 543, "timestamp": "2019-08-02T19:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969b6606-dc1a-4d3a-a557-2ab2df16906d", "eventTime": "2019-08-02T19:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"-\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}, {"owner": "-"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969b6606-dc1a-4d3a-a557-2ab2df16906d", "record_id": "flaws_cloudtrail:0000544:969b6606-dc1a-4d3a-a557-2ab2df16906d", "row_index": 544, "timestamp": "2019-08-02T19:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969b6606-dc1a-4d3a-a557-2ab2df16906d", "eventTime": "2019-08-02T19:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"-\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}, {"owner": "-"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "record_id": "flaws_cloudtrail:0000545:b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "row_index": 545, "timestamp": "2019-08-02T19:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "eventTime": "2019-08-02T19:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "record_id": "flaws_cloudtrail:0000546:b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "row_index": 546, "timestamp": "2019-08-02T19:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f50fc3-ad42-4160-a1a8-0184a8bc9226", "eventTime": "2019-08-02T19:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b88650e-eb29-43b6-afe6-ac3e15000f", "record_id": "flaws_cloudtrail:0000547:8b88650e-eb29-43b6-afe6-ac3e15000f", "row_index": 547, "timestamp": "2019-08-02T19:21:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b88650e-eb29-43b6-afe6-ac3e15000f", "eventTime": "2019-08-02T19:21:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b88650e-eb29-43b6-afe6-ac3e15000f", "record_id": "flaws_cloudtrail:0000548:8b88650e-eb29-43b6-afe6-ac3e15000f", "row_index": 548, "timestamp": "2019-08-02T19:21:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b88650e-eb29-43b6-afe6-ac3e15000f", "eventTime": "2019-08-02T19:21:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ab6249-a124-45da-8442-5809dc6d8458", "record_id": "flaws_cloudtrail:0000549:e3ab6249-a124-45da-8442-5809dc6d8458", "row_index": 549, "timestamp": "2019-08-02T19:31:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ab6249-a124-45da-8442-5809dc6d8458", "eventTime": "2019-08-02T19:31:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASCVPIV0RAIB4JC7O", "expiration": "Aug 3, 2019 1:57:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ab6249-a124-45da-8442-5809dc6d8458", "record_id": "flaws_cloudtrail:0000550:e3ab6249-a124-45da-8442-5809dc6d8458", "row_index": 550, "timestamp": "2019-08-02T19:31:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ab6249-a124-45da-8442-5809dc6d8458", "eventTime": "2019-08-02T19:31:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASCVPIV0RAIB4JC7O", "expiration": "Aug 3, 2019 1:57:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c685718d-ee1d-4654-9bd4-331bf6d7d77e", "record_id": "flaws_cloudtrail:0000551:c685718d-ee1d-4654-9bd4-331bf6d7d77e", "row_index": 551, "timestamp": "2019-08-02T19:44:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c685718d-ee1d-4654-9bd4-331bf6d7d77e", "eventTime": "2019-08-02T19:44:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c685718d-ee1d-4654-9bd4-331bf6d7d77e", "record_id": "flaws_cloudtrail:0000552:c685718d-ee1d-4654-9bd4-331bf6d7d77e", "row_index": 552, "timestamp": "2019-08-02T19:44:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASFN8K4P3N8XV4NZA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c685718d-ee1d-4654-9bd4-331bf6d7d77e", "eventTime": "2019-08-02T19:44:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASFN8K4P3N8XV4NZA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T18:49:56Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f546d7b1-7f44-4f27-bfe8-146b21153d1d", "record_id": "flaws_cloudtrail:0000553:f546d7b1-7f44-4f27-bfe8-146b21153d1d", "row_index": 553, "timestamp": "2019-08-02T19:46:27Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f546d7b1-7f44-4f27-bfe8-146b21153d1d", "eventTime": "2019-08-02T19:46:27Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f546d7b1-7f44-4f27-bfe8-146b21153d1d", "record_id": "flaws_cloudtrail:0000554:f546d7b1-7f44-4f27-bfe8-146b21153d1d", "row_index": 554, "timestamp": "2019-08-02T19:46:27Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f546d7b1-7f44-4f27-bfe8-146b21153d1d", "eventTime": "2019-08-02T19:46:27Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e4b135-6126-4d58-8556-893b6b211309", "record_id": "flaws_cloudtrail:0000555:d1e4b135-6126-4d58-8556-893b6b211309", "row_index": 555, "timestamp": "2019-08-02T19:46:51Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e4b135-6126-4d58-8556-893b6b211309", "eventTime": "2019-08-02T19:46:51Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e4b135-6126-4d58-8556-893b6b211309", "record_id": "flaws_cloudtrail:0000556:d1e4b135-6126-4d58-8556-893b6b211309", "row_index": 556, "timestamp": "2019-08-02T19:46:51Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e4b135-6126-4d58-8556-893b6b211309", "eventTime": "2019-08-02T19:46:51Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3237b67-eafb-488f-8acf-7ed33207a869", "record_id": "flaws_cloudtrail:0000557:b3237b67-eafb-488f-8acf-7ed33207a869", "row_index": 557, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3237b67-eafb-488f-8acf-7ed33207a869", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACiB4YbWj2deWpU1ULqOpt/qEpA2btPsiH32x6Q+bsF2H3JdZS4d+PWgns4rEKPuKUjvc3mBiSShCvRzut0i3/ncUKsHaeLuXnZ8oc8QVMbZlw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dbfa526-25ed-48a4-b9aa-207dd3806a30", "record_id": "flaws_cloudtrail:0000558:4dbfa526-25ed-48a4-b9aa-207dd3806a30", "row_index": 558, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dbfa526-25ed-48a4-b9aa-207dd3806a30", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AChY/aWFTdUXBQ96gSskArzwOIbyS73s4YxgNlDnGH9GAEz/ZAnXE0O8jvywxyvnMNwPYzQoQkv3QqDreBduB67yueO2i4+O1OvWYhhqpc675Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f661a42-4f15-4935-bfb9-474fce7081d0", "record_id": "flaws_cloudtrail:0000559:6f661a42-4f15-4935-bfb9-474fce7081d0", "row_index": 559, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f661a42-4f15-4935-bfb9-474fce7081d0", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "record_id": "flaws_cloudtrail:0000560:ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "row_index": 560, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABKi+mQg7S5xr/5EkdNiLYPd1ZiLuY61GZ3wYE0Kq9X+oLEekmTpNKc82bBmbJHz7qW81HI9IH59G67oQ/CWRtelxWAiTa7AfyD7abicZK8/Ug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d355bc2c-c330-41c9-ad83-be373479d09", "record_id": "flaws_cloudtrail:0000561:d355bc2c-c330-41c9-ad83-be373479d09", "row_index": 561, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d355bc2c-c330-41c9-ad83-be373479d09", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADIEZv2+ijrIC1sILNX82GB6En21C6RXXflkVImB3vAJZvuMRBYmkq5hAvyX5NvC1vN9ayofcDOZdl0qi66rtdr/FChi6lr8+JRz1XG0l0pSzg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "record_id": "flaws_cloudtrail:0000562:ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "row_index": 562, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABh7orEwHSmxPaQotw37e9OjBRMynFYwY1Ixl+0SoPYXgocv/eLvtWW5tPd+1V0ZIqUmD9z7Nf+hQjof2un0Xo12U+/DHFNqGc2MFUIXR/6COg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3237b67-eafb-488f-8acf-7ed33207a869", "record_id": "flaws_cloudtrail:0000563:b3237b67-eafb-488f-8acf-7ed33207a869", "row_index": 563, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3237b67-eafb-488f-8acf-7ed33207a869", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACiB4YbWj2deWpU1ULqOpt/qEpA2btPsiH32x6Q+bsF2H3JdZS4d+PWgns4rEKPuKUjvc3mBiSShCvRzut0i3/ncUKsHaeLuXnZ8oc8QVMbZlw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dbfa526-25ed-48a4-b9aa-207dd3806a30", "record_id": "flaws_cloudtrail:0000564:4dbfa526-25ed-48a4-b9aa-207dd3806a30", "row_index": 564, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dbfa526-25ed-48a4-b9aa-207dd3806a30", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AChY/aWFTdUXBQ96gSskArzwOIbyS73s4YxgNlDnGH9GAEz/ZAnXE0O8jvywxyvnMNwPYzQoQkv3QqDreBduB67yueO2i4+O1OvWYhhqpc675Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f661a42-4f15-4935-bfb9-474fce7081d0", "record_id": "flaws_cloudtrail:0000565:6f661a42-4f15-4935-bfb9-474fce7081d0", "row_index": 565, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f661a42-4f15-4935-bfb9-474fce7081d0", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "record_id": "flaws_cloudtrail:0000566:ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "row_index": 566, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddc9309e-0b6a-4114-bfac-9e2ebe9fead9", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABKi+mQg7S5xr/5EkdNiLYPd1ZiLuY61GZ3wYE0Kq9X+oLEekmTpNKc82bBmbJHz7qW81HI9IH59G67oQ/CWRtelxWAiTa7AfyD7abicZK8/Ug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d355bc2c-c330-41c9-ad83-be373479d09", "record_id": "flaws_cloudtrail:0000567:d355bc2c-c330-41c9-ad83-be373479d09", "row_index": 567, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d355bc2c-c330-41c9-ad83-be373479d09", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADIEZv2+ijrIC1sILNX82GB6En21C6RXXflkVImB3vAJZvuMRBYmkq5hAvyX5NvC1vN9ayofcDOZdl0qi66rtdr/FChi6lr8+JRz1XG0l0pSzg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "record_id": "flaws_cloudtrail:0000568:ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "row_index": 568, "timestamp": "2019-08-02T19:46:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4ac87b-6b85-482e-9c3b-f87aae1e03f2", "eventTime": "2019-08-02T19:46:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABh7orEwHSmxPaQotw37e9OjBRMynFYwY1Ixl+0SoPYXgocv/eLvtWW5tPd+1V0ZIqUmD9z7Nf+hQjof2un0Xo12U+/DHFNqGc2MFUIXR/6COg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "record_id": "flaws_cloudtrail:0000569:71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "row_index": 569, "timestamp": "2019-08-02T19:47:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "eventTime": "2019-08-02T19:47:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "record_id": "flaws_cloudtrail:0000570:71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "row_index": 570, "timestamp": "2019-08-02T19:47:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71428a0e-89fb-4abe-aba3-14f4a9f4e21d", "eventTime": "2019-08-02T19:47:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "record_id": "flaws_cloudtrail:0000571:2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "row_index": 571, "timestamp": "2019-08-02T19:47:53Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "eventTime": "2019-08-02T19:47:53Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "record_id": "flaws_cloudtrail:0000572:2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "row_index": 572, "timestamp": "2019-08-02T19:47:53Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a3c12e9-f55a-46e1-9ffe-979f5d309cfe", "eventTime": "2019-08-02T19:47:53Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c00d7d-3a38-440b-a77f-abb7e76da6fd", "record_id": "flaws_cloudtrail:0000573:77c00d7d-3a38-440b-a77f-abb7e76da6fd", "row_index": 573, "timestamp": "2019-08-02T19:48:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c00d7d-3a38-440b-a77f-abb7e76da6fd", "eventTime": "2019-08-02T19:48:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c00d7d-3a38-440b-a77f-abb7e76da6fd", "record_id": "flaws_cloudtrail:0000574:77c00d7d-3a38-440b-a77f-abb7e76da6fd", "row_index": 574, "timestamp": "2019-08-02T19:48:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c00d7d-3a38-440b-a77f-abb7e76da6fd", "eventTime": "2019-08-02T19:48:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3034c12-2b0f-426f-a5a2-279f90b681a6", "record_id": "flaws_cloudtrail:0000575:a3034c12-2b0f-426f-a5a2-279f90b681a6", "row_index": 575, "timestamp": "2019-08-02T19:48:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3034c12-2b0f-426f-a5a2-279f90b681a6", "eventTime": "2019-08-02T19:48:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3034c12-2b0f-426f-a5a2-279f90b681a6", "record_id": "flaws_cloudtrail:0000576:a3034c12-2b0f-426f-a5a2-279f90b681a6", "row_index": 576, "timestamp": "2019-08-02T19:48:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3034c12-2b0f-426f-a5a2-279f90b681a6", "eventTime": "2019-08-02T19:48:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0c628e6-0303-4da2-8206-3fb336a59df2", "record_id": "flaws_cloudtrail:0000577:b0c628e6-0303-4da2-8206-3fb336a59df2", "row_index": 577, "timestamp": "2019-08-02T19:49:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0c628e6-0303-4da2-8206-3fb336a59df2", "eventTime": "2019-08-02T19:49:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0c628e6-0303-4da2-8206-3fb336a59df2", "record_id": "flaws_cloudtrail:0000578:b0c628e6-0303-4da2-8206-3fb336a59df2", "row_index": 578, "timestamp": "2019-08-02T19:49:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0c628e6-0303-4da2-8206-3fb336a59df2", "eventTime": "2019-08-02T19:49:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47e31abe-6373-49cd-bdf4-3458bb10d690", "record_id": "flaws_cloudtrail:0000579:47e31abe-6373-49cd-bdf4-3458bb10d690", "row_index": 579, "timestamp": "2019-08-02T19:50:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47e31abe-6373-49cd-bdf4-3458bb10d690", "eventTime": "2019-08-02T19:50:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47e31abe-6373-49cd-bdf4-3458bb10d690", "record_id": "flaws_cloudtrail:0000580:47e31abe-6373-49cd-bdf4-3458bb10d690", "row_index": 580, "timestamp": "2019-08-02T19:50:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47e31abe-6373-49cd-bdf4-3458bb10d690", "eventTime": "2019-08-02T19:50:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d6bea2-81a6-45bb-8095-dd195448abf2", "record_id": "flaws_cloudtrail:0000581:a7d6bea2-81a6-45bb-8095-dd195448abf2", "row_index": 581, "timestamp": "2019-08-02T19:51:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d6bea2-81a6-45bb-8095-dd195448abf2", "eventTime": "2019-08-02T19:51:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d6bea2-81a6-45bb-8095-dd195448abf2", "record_id": "flaws_cloudtrail:0000582:a7d6bea2-81a6-45bb-8095-dd195448abf2", "row_index": 582, "timestamp": "2019-08-02T19:51:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d6bea2-81a6-45bb-8095-dd195448abf2", "eventTime": "2019-08-02T19:51:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "record_id": "flaws_cloudtrail:0000583:2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "row_index": 583, "timestamp": "2019-08-02T19:52:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "eventTime": "2019-08-02T19:52:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "record_id": "flaws_cloudtrail:0000584:2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "row_index": 584, "timestamp": "2019-08-02T19:52:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6ac90e-cf5a-4bb8-92c5-c28f403421cbf", "eventTime": "2019-08-02T19:52:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5295e599-27f0-4f3b-b098-ee801f05a9c1", "record_id": "flaws_cloudtrail:0000585:5295e599-27f0-4f3b-b098-ee801f05a9c1", "row_index": 585, "timestamp": "2019-08-02T19:52:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5295e599-27f0-4f3b-b098-ee801f05a9c1", "eventTime": "2019-08-02T19:52:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5295e599-27f0-4f3b-b098-ee801f05a9c1", "record_id": "flaws_cloudtrail:0000586:5295e599-27f0-4f3b-b098-ee801f05a9c1", "row_index": 586, "timestamp": "2019-08-02T19:52:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5295e599-27f0-4f3b-b098-ee801f05a9c1", "eventTime": "2019-08-02T19:52:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f971650-e974-46b4-98e5-5bd9c5a73ba3", "record_id": "flaws_cloudtrail:0000587:2f971650-e974-46b4-98e5-5bd9c5a73ba3", "row_index": 587, "timestamp": "2019-08-02T19:52:40Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f971650-e974-46b4-98e5-5bd9c5a73ba3", "eventTime": "2019-08-02T19:52:40Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f971650-e974-46b4-98e5-5bd9c5a73ba3", "record_id": "flaws_cloudtrail:0000588:2f971650-e974-46b4-98e5-5bd9c5a73ba3", "row_index": 588, "timestamp": "2019-08-02T19:52:40Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f971650-e974-46b4-98e5-5bd9c5a73ba3", "eventTime": "2019-08-02T19:52:40Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a19b2d-4184-49e5-9392-c882e20fb8ee", "record_id": "flaws_cloudtrail:0000589:e6a19b2d-4184-49e5-9392-c882e20fb8ee", "row_index": 589, "timestamp": "2019-08-02T19:53:47Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a19b2d-4184-49e5-9392-c882e20fb8ee", "eventTime": "2019-08-02T19:53:47Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a19b2d-4184-49e5-9392-c882e20fb8ee", "record_id": "flaws_cloudtrail:0000590:e6a19b2d-4184-49e5-9392-c882e20fb8ee", "row_index": 590, "timestamp": "2019-08-02T19:53:47Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "204.8.245.87", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a19b2d-4184-49e5-9392-c882e20fb8ee", "eventTime": "2019-08-02T19:53:47Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "204.8.245.87", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66acae18-ee40-4741-b58a-e988ece2a371", "record_id": "flaws_cloudtrail:0000591:66acae18-ee40-4741-b58a-e988ece2a371", "row_index": 591, "timestamp": "2019-08-02T19:54:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66acae18-ee40-4741-b58a-e988ece2a371", "eventTime": "2019-08-02T19:54:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACAIUO538MMXF4HA2", "expiration": "Aug 3, 2019 7:54:07 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGQaCXVzLXdlc3QtMiJIMEYCIQC/b0wUTR9sWfBTe4u+bD4FWcHGJUuF9ECNF3XM44mDLAIhAL8d8R7CW75kLo3LlQqM7SDiQpbwkPbR3OmnW8Z98LhvKosCCN3//////////wEQABoMOTc1NDI2MjYyMDI5Igz9TkkZeRvx6s2Opysq3wF1n3KqleIFZbvUpG8ZFr0jjTD4dbC5iQpmliIztORDPDLxF1us1QCo3WOLIuw80SzvAyIlKHwWUD4LWorilXl1SLGbMT27BDsKnxo/ojJadbqyXfgTx//nmaFHKI/xVxKQAt1ntnyW+T52F5Gz/tiXr1BY8mg3cL7D7rqJ2NmoAmexcEksfbKkxCMlow2XB8fgVjDoetAW34VnCa8Wsh4rZU6Ulz117VkNY75sdZEoDdH9MzbbC9DGZ1CD3dInyo7XAiyiiG2S/qNBBdVHA+SPqR/ynoggZDWaUenNQvOUMN+pkuoFOrMB2NcJxe8RQSWHJ9Xbz/bnPAFFraUlBt2gHBZ1pb1kFl1RlFBhRqbrY5f820UfVM6Tcp53tabIa6Zbolj9+sid1Vy20mCBRR2WGNbeVQkiXsyjFKIflmPtnBLO7n8YM2dt0WfEo8v5Sdcnq+Hosca6orxzH0SqtLDxT5czCE5/vVom+xXfw7Et8FbAw6BdFn6XCNQBkG35pEJsMvicEFVemLM+Nsc2iM6k/LfNV2W0RH8VLF0="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c349731c-3b43-40c2-9718-96cf0a4b1c39", "record_id": "flaws_cloudtrail:0000592:3c349731c-3b43-40c2-9718-96cf0a4b1c39", "row_index": 592, "timestamp": "2019-08-02T19:54:07Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIACAIUO538MMXF4HA2", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "3.2.230.145", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c349731c-3b43-40c2-9718-96cf0a4b1c39", "eventTime": "2019-08-02T19:54:07Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.2.230.145", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIACAIUO538MMXF4HA2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:54:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/02/[$LATEST]2f4fc55b3e00a112444d778cd14afca7", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e625b28-3003-43df-b298-e82b8b876dfd", "record_id": "flaws_cloudtrail:0000593:6e625b28-3003-43df-b298-e82b8b876dfd", "row_index": 593, "timestamp": "2019-08-02T19:54:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e625b28-3003-43df-b298-e82b8b876dfd", "eventTime": "2019-08-02T19:54:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYI5NXTJV96DC2QMQ", "expiration": "Aug 3, 2019 7:54:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66acae18-ee40-4741-b58a-e988ece2a371", "record_id": "flaws_cloudtrail:0000594:66acae18-ee40-4741-b58a-e988ece2a371", "row_index": 594, "timestamp": "2019-08-02T19:54:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66acae18-ee40-4741-b58a-e988ece2a371", "eventTime": "2019-08-02T19:54:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACAIUO538MMXF4HA2", "expiration": "Aug 3, 2019 7:54:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c349731c-3b43-40c2-9718-96cf0a4b1c39", "record_id": "flaws_cloudtrail:0000595:3c349731c-3b43-40c2-9718-96cf0a4b1c39", "row_index": 595, "timestamp": "2019-08-02T19:54:07Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIACAIUO538MMXF4HA2", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "3.2.230.145", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c349731c-3b43-40c2-9718-96cf0a4b1c39", "eventTime": "2019-08-02T19:54:07Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.2.230.145", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIACAIUO538MMXF4HA2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:54:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/02/[$LATEST]2f4fc55b3e00a112444d778cd14afca7", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e625b28-3003-43df-b298-e82b8b876dfd", "record_id": "flaws_cloudtrail:0000596:6e625b28-3003-43df-b298-e82b8b876dfd", "row_index": 596, "timestamp": "2019-08-02T19:54:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e625b28-3003-43df-b298-e82b8b876dfd", "eventTime": "2019-08-02T19:54:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYI5NXTJV96DC2QMQ", "expiration": "Aug 3, 2019 7:54:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ff362503-a767-4a82-a509-87dadf2f0f21", "record_id": "flaws_cloudtrail:0000597:1ff362503-a767-4a82-a509-87dadf2f0f21", "row_index": 597, "timestamp": "2019-08-02T19:56:50Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ff362503-a767-4a82-a509-87dadf2f0f21", "eventTime": "2019-08-02T19:56:50Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ff362503-a767-4a82-a509-87dadf2f0f21", "record_id": "flaws_cloudtrail:0000598:1ff362503-a767-4a82-a509-87dadf2f0f21", "row_index": 598, "timestamp": "2019-08-02T19:56:50Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ff362503-a767-4a82-a509-87dadf2f0f21", "eventTime": "2019-08-02T19:56:50Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a9728e-d294-4533-a26b-e65764e7434c", "record_id": "flaws_cloudtrail:0000599:b0a9728e-d294-4533-a26b-e65764e7434c", "row_index": 599, "timestamp": "2019-08-02T19:58:16Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a9728e-d294-4533-a26b-e65764e7434c", "eventTime": "2019-08-02T19:58:16Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a9728e-d294-4533-a26b-e65764e7434c", "record_id": "flaws_cloudtrail:0000600:b0a9728e-d294-4533-a26b-e65764e7434c", "row_index": 600, "timestamp": "2019-08-02T19:58:16Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a9728e-d294-4533-a26b-e65764e7434c", "eventTime": "2019-08-02T19:58:16Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f65616d-6373-4ca2-8988-34482eb4c476", "record_id": "flaws_cloudtrail:0000601:f65616d-6373-4ca2-8988-34482eb4c476", "row_index": 601, "timestamp": "2019-08-02T19:58:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA6I99PT8545KZZIUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f65616d-6373-4ca2-8988-34482eb4c476", "eventTime": "2019-08-02T19:58:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA6I99PT8545KZZIUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:11:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f65616d-6373-4ca2-8988-34482eb4c476", "record_id": "flaws_cloudtrail:0000602:f65616d-6373-4ca2-8988-34482eb4c476", "row_index": 602, "timestamp": "2019-08-02T19:58:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA6I99PT8545KZZIUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.229.2.204", "user_agent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f65616d-6373-4ca2-8988-34482eb4c476", "eventTime": "2019-08-02T19:58:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA6I99PT8545KZZIUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:11:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316ed8f7-d986-4d66-b34c-b91a64e8231e", "record_id": "flaws_cloudtrail:0000603:316ed8f7-d986-4d66-b34c-b91a64e8231e", "row_index": 603, "timestamp": "2019-08-02T19:58:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA6I99PT8545KZZIUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1216, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316ed8f7-d986-4d66-b34c-b91a64e8231e", "eventTime": "2019-08-02T19:58:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA6I99PT8545KZZIUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:11:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316ed8f7-d986-4d66-b34c-b91a64e8231e", "record_id": "flaws_cloudtrail:0000604:316ed8f7-d986-4d66-b34c-b91a64e8231e", "row_index": 604, "timestamp": "2019-08-02T19:58:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA6I99PT8545KZZIUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.229.2.204", "user_agent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1216, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316ed8f7-d986-4d66-b34c-b91a64e8231e", "eventTime": "2019-08-02T19:58:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.229.2.204", "userAgent": "[aws-cli/1.16.47 Python/3.5.2 Linux/4.4.0-157-generic botocore/1.12.37]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA6I99PT8545KZZIUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-02T19:11:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3285b914-88a3-4d5f-bbed-0b2f0d0dc30f", "record_id": "flaws_cloudtrail:0000605:3285b914-88a3-4d5f-bbed-0b2f0d0dc30f", "row_index": 605, "timestamp": "2019-08-02T19:59:09Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.252.23.95", "user_agent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3285b914-88a3-4d5f-bbed-0b2f0d0dc30f", "eventTime": "2019-08-02T19:59:09Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.252.23.95", "userAgent": "aws-cli/1.16.61 Python/3.6.5 Linux/4.12.14-lp150.12.64-default botocore/1.12.57", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/*", "template": false}, "resources": []}}