Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3186c481-79a3-4e41-b756-238062e481c2", "record_id": "flaws_cloudtrail:0000000:3186c481-79a3-4e41-b756-238062e481c2", "row_index": 0, "timestamp": "2019-05-30T08:32:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3186c481-79a3-4e41-b756-238062e481c2", "eventTime": "2019-05-30T08:32:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cb5f287-f182-4d24-a28f-cb8d4178dd68", "record_id": "flaws_cloudtrail:0000001:0cb5f287-f182-4d24-a28f-cb8d4178dd68", "row_index": 1, "timestamp": "2019-05-30T08:32:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cb5f287-f182-4d24-a28f-cb8d4178dd68", "eventTime": "2019-05-30T08:32:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cb5f287-f182-4d24-a28f-cb8d4178dd68", "record_id": "flaws_cloudtrail:0000002:0cb5f287-f182-4d24-a28f-cb8d4178dd68", "row_index": 2, "timestamp": "2019-05-30T08:32:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cb5f287-f182-4d24-a28f-cb8d4178dd68", "eventTime": "2019-05-30T08:32:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e467c09-687c-4bea-8314-ad440e389d09", "record_id": "flaws_cloudtrail:0000003:1e467c09-687c-4bea-8314-ad440e389d09", "row_index": 3, "timestamp": "2019-05-30T08:32:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e467c09-687c-4bea-8314-ad440e389d09", "eventTime": "2019-05-30T08:32:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e467c09-687c-4bea-8314-ad440e389d09", "record_id": "flaws_cloudtrail:0000004:1e467c09-687c-4bea-8314-ad440e389d09", "row_index": 4, "timestamp": "2019-05-30T08:32:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e467c09-687c-4bea-8314-ad440e389d09", "eventTime": "2019-05-30T08:32:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "record_id": "flaws_cloudtrail:0000005:a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "row_index": 5, "timestamp": "2019-05-30T08:32:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "eventTime": "2019-05-30T08:32:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "record_id": "flaws_cloudtrail:0000006:a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "row_index": 6, "timestamp": "2019-05-30T08:32:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43dac61-354e-4b4b-8028-8eb3cda7b1c8", "eventTime": "2019-05-30T08:32:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d02d8d2-2224-46a2-b696-30dc2acfb297", "record_id": "flaws_cloudtrail:0000007:5d02d8d2-2224-46a2-b696-30dc2acfb297", "row_index": 7, "timestamp": "2019-05-30T08:32:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d02d8d2-2224-46a2-b696-30dc2acfb297", "eventTime": "2019-05-30T08:32:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d02d8d2-2224-46a2-b696-30dc2acfb297", "record_id": "flaws_cloudtrail:0000008:5d02d8d2-2224-46a2-b696-30dc2acfb297", "row_index": 8, "timestamp": "2019-05-30T08:32:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d02d8d2-2224-46a2-b696-30dc2acfb297", "eventTime": "2019-05-30T08:32:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb742ebd-5180-47d4-8cee-17025bd6ba9a", "record_id": "flaws_cloudtrail:0000009:cb742ebd-5180-47d4-8cee-17025bd6ba9a", "row_index": 9, "timestamp": "2019-05-30T08:32:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb742ebd-5180-47d4-8cee-17025bd6ba9a", "eventTime": "2019-05-30T08:32:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb742ebd-5180-47d4-8cee-17025bd6ba9a", "record_id": "flaws_cloudtrail:0000010:cb742ebd-5180-47d4-8cee-17025bd6ba9a", "row_index": 10, "timestamp": "2019-05-30T08:32:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb742ebd-5180-47d4-8cee-17025bd6ba9a", "eventTime": "2019-05-30T08:32:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cab5699-e5e1-407f-aefa-16e18b33b6c5", "record_id": "flaws_cloudtrail:0000011:5cab5699-e5e1-407f-aefa-16e18b33b6c5", "row_index": 11, "timestamp": "2019-05-30T08:32:34Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cab5699-e5e1-407f-aefa-16e18b33b6c5", "eventTime": "2019-05-30T08:32:34Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cab5699-e5e1-407f-aefa-16e18b33b6c5", "record_id": "flaws_cloudtrail:0000012:5cab5699-e5e1-407f-aefa-16e18b33b6c5", "row_index": 12, "timestamp": "2019-05-30T08:32:34Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cab5699-e5e1-407f-aefa-16e18b33b6c5", "eventTime": "2019-05-30T08:32:34Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c86d9c-32be-4922-b92e-97637dbd0142", "record_id": "flaws_cloudtrail:0000013:50c86d9c-32be-4922-b92e-97637dbd0142", "row_index": 13, "timestamp": "2019-05-30T08:32:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c86d9c-32be-4922-b92e-97637dbd0142", "eventTime": "2019-05-30T08:32:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c86d9c-32be-4922-b92e-97637dbd0142", "record_id": "flaws_cloudtrail:0000014:50c86d9c-32be-4922-b92e-97637dbd0142", "row_index": 14, "timestamp": "2019-05-30T08:32:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c86d9c-32be-4922-b92e-97637dbd0142", "eventTime": "2019-05-30T08:32:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde7542e-132a-436e-ae0f-8ef81aeab06a", "record_id": "flaws_cloudtrail:0000015:bde7542e-132a-436e-ae0f-8ef81aeab06a", "row_index": 15, "timestamp": "2019-05-30T08:32:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde7542e-132a-436e-ae0f-8ef81aeab06a", "eventTime": "2019-05-30T08:32:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde7542e-132a-436e-ae0f-8ef81aeab06a", "record_id": "flaws_cloudtrail:0000016:bde7542e-132a-436e-ae0f-8ef81aeab06a", "row_index": 16, "timestamp": "2019-05-30T08:32:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde7542e-132a-436e-ae0f-8ef81aeab06a", "eventTime": "2019-05-30T08:32:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "record_id": "flaws_cloudtrail:0000017:27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "row_index": 17, "timestamp": "2019-05-30T08:32:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "eventTime": "2019-05-30T08:32:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "record_id": "flaws_cloudtrail:0000018:27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "row_index": 18, "timestamp": "2019-05-30T08:32:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27bd6a49-47d1-4cbe-91fa-a5243e16e0cd", "eventTime": "2019-05-30T08:32:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "record_id": "flaws_cloudtrail:0000019:fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "row_index": 19, "timestamp": "2019-05-30T08:32:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "eventTime": "2019-05-30T08:32:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "record_id": "flaws_cloudtrail:0000020:fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "row_index": 20, "timestamp": "2019-05-30T08:32:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa7a1348-b35b-49c2-8472-eee20e2ce4c0", "eventTime": "2019-05-30T08:32:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29226-7ef5-4c09-915c-68f71d6c05f5", "record_id": "flaws_cloudtrail:0000021:29226-7ef5-4c09-915c-68f71d6c05f5", "row_index": 21, "timestamp": "2019-05-30T08:32:40Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29226-7ef5-4c09-915c-68f71d6c05f5", "eventTime": "2019-05-30T08:32:40Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29226-7ef5-4c09-915c-68f71d6c05f5", "record_id": "flaws_cloudtrail:0000022:29226-7ef5-4c09-915c-68f71d6c05f5", "row_index": 22, "timestamp": "2019-05-30T08:32:40Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29226-7ef5-4c09-915c-68f71d6c05f5", "eventTime": "2019-05-30T08:32:40Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "record_id": "flaws_cloudtrail:0000023:af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "row_index": 23, "timestamp": "2019-05-30T08:32:41Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "eventTime": "2019-05-30T08:32:41Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "record_id": "flaws_cloudtrail:0000024:af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "row_index": 24, "timestamp": "2019-05-30T08:32:41Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af431ee1-fff1-4dd6-87b1-f5d7378fe70e", "eventTime": "2019-05-30T08:32:41Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c99c19-48f5-438f-8c8a-570c0043e2f7", "record_id": "flaws_cloudtrail:0000025:62c99c19-48f5-438f-8c8a-570c0043e2f7", "row_index": 25, "timestamp": "2019-05-30T08:32:42Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c99c19-48f5-438f-8c8a-570c0043e2f7", "eventTime": "2019-05-30T08:32:42Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c99c19-48f5-438f-8c8a-570c0043e2f7", "record_id": "flaws_cloudtrail:0000026:62c99c19-48f5-438f-8c8a-570c0043e2f7", "row_index": 26, "timestamp": "2019-05-30T08:32:42Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c99c19-48f5-438f-8c8a-570c0043e2f7", "eventTime": "2019-05-30T08:32:42Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf965427b-7466-42dc-8d35-8e9ccefe75c6", "record_id": "flaws_cloudtrail:0000027:bf965427b-7466-42dc-8d35-8e9ccefe75c6", "row_index": 27, "timestamp": "2019-05-30T08:32:43Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf965427b-7466-42dc-8d35-8e9ccefe75c6", "eventTime": "2019-05-30T08:32:43Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf965427b-7466-42dc-8d35-8e9ccefe75c6", "record_id": "flaws_cloudtrail:0000028:bf965427b-7466-42dc-8d35-8e9ccefe75c6", "row_index": 28, "timestamp": "2019-05-30T08:32:43Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf965427b-7466-42dc-8d35-8e9ccefe75c6", "eventTime": "2019-05-30T08:32:43Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eba1c36-0ff2-4d57-be63-5787bebf0886", "record_id": "flaws_cloudtrail:0000029:5eba1c36-0ff2-4d57-be63-5787bebf0886", "row_index": 29, "timestamp": "2019-05-30T08:32:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-55"], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eba1c36-0ff2-4d57-be63-5787bebf0886", "eventTime": "2019-05-30T08:32:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-55", "roleSessionName": "reader-1565"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-55"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95490fc-013a-426f-9848-82e9b5e756bc", "record_id": "flaws_cloudtrail:0000030:95490fc-013a-426f-9848-82e9b5e756bc", "row_index": 30, "timestamp": "2019-05-30T08:32:45Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95490fc-013a-426f-9848-82e9b5e756bc", "eventTime": "2019-05-30T08:32:45Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95490fc-013a-426f-9848-82e9b5e756bc", "record_id": "flaws_cloudtrail:0000031:95490fc-013a-426f-9848-82e9b5e756bc", "row_index": 31, "timestamp": "2019-05-30T08:32:45Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95490fc-013a-426f-9848-82e9b5e756bc", "eventTime": "2019-05-30T08:32:45Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09c694e4-edb2-42bb-ba65-bdbe6db38362", "record_id": "flaws_cloudtrail:0000032:09c694e4-edb2-42bb-ba65-bdbe6db38362", "row_index": 32, "timestamp": "2019-05-30T08:32:46Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09c694e4-edb2-42bb-ba65-bdbe6db38362", "eventTime": "2019-05-30T08:32:46Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09c694e4-edb2-42bb-ba65-bdbe6db38362", "record_id": "flaws_cloudtrail:0000033:09c694e4-edb2-42bb-ba65-bdbe6db38362", "row_index": 33, "timestamp": "2019-05-30T08:32:46Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09c694e4-edb2-42bb-ba65-bdbe6db38362", "eventTime": "2019-05-30T08:32:46Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0888ee-8e15-4c1e-a1e2-813c824ad077", "record_id": "flaws_cloudtrail:0000034:6e0888ee-8e15-4c1e-a1e2-813c824ad077", "row_index": 34, "timestamp": "2019-05-30T08:32:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0888ee-8e15-4c1e-a1e2-813c824ad077", "eventTime": "2019-05-30T08:32:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0888ee-8e15-4c1e-a1e2-813c824ad077", "record_id": "flaws_cloudtrail:0000035:6e0888ee-8e15-4c1e-a1e2-813c824ad077", "row_index": 35, "timestamp": "2019-05-30T08:32:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0888ee-8e15-4c1e-a1e2-813c824ad077", "eventTime": "2019-05-30T08:32:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48ed2e8-dafd-424b-a298-6f9c656345", "record_id": "flaws_cloudtrail:0000036:c48ed2e8-dafd-424b-a298-6f9c656345", "row_index": 36, "timestamp": "2019-05-30T08:32:48Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48ed2e8-dafd-424b-a298-6f9c656345", "eventTime": "2019-05-30T08:32:48Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48ed2e8-dafd-424b-a298-6f9c656345", "record_id": "flaws_cloudtrail:0000037:c48ed2e8-dafd-424b-a298-6f9c656345", "row_index": 37, "timestamp": "2019-05-30T08:32:48Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48ed2e8-dafd-424b-a298-6f9c656345", "eventTime": "2019-05-30T08:32:48Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86d920e-09fc-443c-b97a-47cb04da4d1d", "record_id": "flaws_cloudtrail:0000038:e86d920e-09fc-443c-b97a-47cb04da4d1d", "row_index": 38, "timestamp": "2019-05-30T08:32:50Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86d920e-09fc-443c-b97a-47cb04da4d1d", "eventTime": "2019-05-30T08:32:50Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86d920e-09fc-443c-b97a-47cb04da4d1d", "record_id": "flaws_cloudtrail:0000039:e86d920e-09fc-443c-b97a-47cb04da4d1d", "row_index": 39, "timestamp": "2019-05-30T08:32:50Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86d920e-09fc-443c-b97a-47cb04da4d1d", "eventTime": "2019-05-30T08:32:50Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "record_id": "flaws_cloudtrail:0000040:9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "row_index": 40, "timestamp": "2019-05-30T08:32:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "eventTime": "2019-05-30T08:32:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "record_id": "flaws_cloudtrail:0000041:9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "row_index": 41, "timestamp": "2019-05-30T08:32:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e9e754a-60e2-4d06-b1b1-ee55dfe34e1c", "eventTime": "2019-05-30T08:32:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c5ad79-4579-4594-a4d2-b322ac790093", "record_id": "flaws_cloudtrail:0000042:71c5ad79-4579-4594-a4d2-b322ac790093", "row_index": 42, "timestamp": "2019-05-30T08:32:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c5ad79-4579-4594-a4d2-b322ac790093", "eventTime": "2019-05-30T08:32:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb543d93-76af-4797-b4a5-454d44456ea", "record_id": "flaws_cloudtrail:0000043:cb543d93-76af-4797-b4a5-454d44456ea", "row_index": 43, "timestamp": "2019-05-30T08:32:52Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb543d93-76af-4797-b4a5-454d44456ea", "eventTime": "2019-05-30T08:32:52Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c5ad79-4579-4594-a4d2-b322ac790093", "record_id": "flaws_cloudtrail:0000044:71c5ad79-4579-4594-a4d2-b322ac790093", "row_index": 44, "timestamp": "2019-05-30T08:32:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c5ad79-4579-4594-a4d2-b322ac790093", "eventTime": "2019-05-30T08:32:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb543d93-76af-4797-b4a5-454d44456ea", "record_id": "flaws_cloudtrail:0000045:cb543d93-76af-4797-b4a5-454d44456ea", "row_index": 45, "timestamp": "2019-05-30T08:32:52Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb543d93-76af-4797-b4a5-454d44456ea", "eventTime": "2019-05-30T08:32:52Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "record_id": "flaws_cloudtrail:0000046:6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "row_index": 46, "timestamp": "2019-05-30T08:32:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "eventTime": "2019-05-30T08:32:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "record_id": "flaws_cloudtrail:0000047:6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "row_index": 47, "timestamp": "2019-05-30T08:32:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0e0928-d57e-4bb3-baba-844f4b4ef13c", "eventTime": "2019-05-30T08:32:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a454e6-33ef-4c81-b57a-2370498f708e", "record_id": "flaws_cloudtrail:0000048:c5a454e6-33ef-4c81-b57a-2370498f708e", "row_index": 48, "timestamp": "2019-05-30T08:32:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a454e6-33ef-4c81-b57a-2370498f708e", "eventTime": "2019-05-30T08:32:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a454e6-33ef-4c81-b57a-2370498f708e", "record_id": "flaws_cloudtrail:0000049:c5a454e6-33ef-4c81-b57a-2370498f708e", "row_index": 49, "timestamp": "2019-05-30T08:32:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a454e6-33ef-4c81-b57a-2370498f708e", "eventTime": "2019-05-30T08:32:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248fe34c-2da9-4698-ad48-51ee9d5e4900", "record_id": "flaws_cloudtrail:0000050:248fe34c-2da9-4698-ad48-51ee9d5e4900", "row_index": 50, "timestamp": "2019-05-30T08:32:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248fe34c-2da9-4698-ad48-51ee9d5e4900", "eventTime": "2019-05-30T08:32:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248fe34c-2da9-4698-ad48-51ee9d5e4900", "record_id": "flaws_cloudtrail:0000051:248fe34c-2da9-4698-ad48-51ee9d5e4900", "row_index": 51, "timestamp": "2019-05-30T08:32:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248fe34c-2da9-4698-ad48-51ee9d5e4900", "eventTime": "2019-05-30T08:32:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "record_id": "flaws_cloudtrail:0000052:19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "row_index": 52, "timestamp": "2019-05-30T08:32:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "eventTime": "2019-05-30T08:32:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "record_id": "flaws_cloudtrail:0000053:19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "row_index": 53, "timestamp": "2019-05-30T08:32:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d8b121-3c2c-44c4-a0b9-2c533b6d9cb3", "eventTime": "2019-05-30T08:32:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbad16e8-2121-4083-b9c9-9d2d7274d148", "record_id": "flaws_cloudtrail:0000054:dbad16e8-2121-4083-b9c9-9d2d7274d148", "row_index": 54, "timestamp": "2019-05-30T08:32:58Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbad16e8-2121-4083-b9c9-9d2d7274d148", "eventTime": "2019-05-30T08:32:58Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbad16e8-2121-4083-b9c9-9d2d7274d148", "record_id": "flaws_cloudtrail:0000055:dbad16e8-2121-4083-b9c9-9d2d7274d148", "row_index": 55, "timestamp": "2019-05-30T08:32:58Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbad16e8-2121-4083-b9c9-9d2d7274d148", "eventTime": "2019-05-30T08:32:58Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a3f2001-c84a-4490-a969-315e5067a5fa", "record_id": "flaws_cloudtrail:0000056:4a3f2001-c84a-4490-a969-315e5067a5fa", "row_index": 56, "timestamp": "2019-05-30T08:32:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a3f2001-c84a-4490-a969-315e5067a5fa", "eventTime": "2019-05-30T08:32:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a3f2001-c84a-4490-a969-315e5067a5fa", "record_id": "flaws_cloudtrail:0000057:4a3f2001-c84a-4490-a969-315e5067a5fa", "row_index": 57, "timestamp": "2019-05-30T08:32:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a3f2001-c84a-4490-a969-315e5067a5fa", "eventTime": "2019-05-30T08:32:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "461f2a49-1ca4-4d63-b776-681dde3c9790", "record_id": "flaws_cloudtrail:0000058:461f2a49-1ca4-4d63-b776-681dde3c9790", "row_index": 58, "timestamp": "2019-05-30T08:33:01Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "461f2a49-1ca4-4d63-b776-681dde3c9790", "eventTime": "2019-05-30T08:33:01Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "461f2a49-1ca4-4d63-b776-681dde3c9790", "record_id": "flaws_cloudtrail:0000059:461f2a49-1ca4-4d63-b776-681dde3c9790", "row_index": 59, "timestamp": "2019-05-30T08:33:01Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "461f2a49-1ca4-4d63-b776-681dde3c9790", "eventTime": "2019-05-30T08:33:01Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1492ec9-fced-42d1-87f3-942d7ec1c78e", "record_id": "flaws_cloudtrail:0000060:c1492ec9-fced-42d1-87f3-942d7ec1c78e", "row_index": 60, "timestamp": "2019-05-30T08:33:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1492ec9-fced-42d1-87f3-942d7ec1c78e", "eventTime": "2019-05-30T08:33:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1492ec9-fced-42d1-87f3-942d7ec1c78e", "record_id": "flaws_cloudtrail:0000061:c1492ec9-fced-42d1-87f3-942d7ec1c78e", "row_index": 61, "timestamp": "2019-05-30T08:33:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1492ec9-fced-42d1-87f3-942d7ec1c78e", "eventTime": "2019-05-30T08:33:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "record_id": "flaws_cloudtrail:0000062:d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "row_index": 62, "timestamp": "2019-05-30T08:33:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "eventTime": "2019-05-30T08:33:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "record_id": "flaws_cloudtrail:0000063:d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "row_index": 63, "timestamp": "2019-05-30T08:33:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d252a5db-cc65-4c6e-8aa1-ffc2b119039f", "eventTime": "2019-05-30T08:33:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "record_id": "flaws_cloudtrail:0000064:fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "row_index": 64, "timestamp": "2019-05-30T08:33:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "eventTime": "2019-05-30T08:33:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f523eb-7e8c-4250-9fe0-3ef52d327455", "record_id": "flaws_cloudtrail:0000065:c0f523eb-7e8c-4250-9fe0-3ef52d327455", "row_index": 65, "timestamp": "2019-05-30T08:33:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f523eb-7e8c-4250-9fe0-3ef52d327455", "eventTime": "2019-05-30T08:33:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "record_id": "flaws_cloudtrail:0000066:fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "row_index": 66, "timestamp": "2019-05-30T08:33:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4c3fdc-121b-47fe-90c6-91ded3de50e5", "eventTime": "2019-05-30T08:33:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f523eb-7e8c-4250-9fe0-3ef52d327455", "record_id": "flaws_cloudtrail:0000067:c0f523eb-7e8c-4250-9fe0-3ef52d327455", "row_index": 67, "timestamp": "2019-05-30T08:33:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f523eb-7e8c-4250-9fe0-3ef52d327455", "eventTime": "2019-05-30T08:33:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "record_id": "flaws_cloudtrail:0000068:c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "row_index": 68, "timestamp": "2019-05-30T08:33:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "eventTime": "2019-05-30T08:33:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "record_id": "flaws_cloudtrail:0000069:c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "row_index": 69, "timestamp": "2019-05-30T08:33:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52a0221-b6cd-43cb-bd1a-7c41f0fb2942", "eventTime": "2019-05-30T08:33:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54590-3ab1-4201-a8d2-0e1dcbccf595", "record_id": "flaws_cloudtrail:0000070:54590-3ab1-4201-a8d2-0e1dcbccf595", "row_index": 70, "timestamp": "2019-05-30T08:33:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54590-3ab1-4201-a8d2-0e1dcbccf595", "eventTime": "2019-05-30T08:33:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54590-3ab1-4201-a8d2-0e1dcbccf595", "record_id": "flaws_cloudtrail:0000071:54590-3ab1-4201-a8d2-0e1dcbccf595", "row_index": 71, "timestamp": "2019-05-30T08:33:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54590-3ab1-4201-a8d2-0e1dcbccf595", "eventTime": "2019-05-30T08:33:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b176bd70-3153-436b-b733-3d5b9c35d158", "record_id": "flaws_cloudtrail:0000072:b176bd70-3153-436b-b733-3d5b9c35d158", "row_index": 72, "timestamp": "2019-05-30T08:33:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b176bd70-3153-436b-b733-3d5b9c35d158", "eventTime": "2019-05-30T08:33:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b176bd70-3153-436b-b733-3d5b9c35d158", "record_id": "flaws_cloudtrail:0000073:b176bd70-3153-436b-b733-3d5b9c35d158", "row_index": 73, "timestamp": "2019-05-30T08:33:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b176bd70-3153-436b-b733-3d5b9c35d158", "eventTime": "2019-05-30T08:33:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e970135fa-654e-45ce-b3fd-d5f3265bbba8", "record_id": "flaws_cloudtrail:0000074:e970135fa-654e-45ce-b3fd-d5f3265bbba8", "row_index": 74, "timestamp": "2019-05-30T08:33:10Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e970135fa-654e-45ce-b3fd-d5f3265bbba8", "eventTime": "2019-05-30T08:33:10Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e970135fa-654e-45ce-b3fd-d5f3265bbba8", "record_id": "flaws_cloudtrail:0000075:e970135fa-654e-45ce-b3fd-d5f3265bbba8", "row_index": 75, "timestamp": "2019-05-30T08:33:10Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e970135fa-654e-45ce-b3fd-d5f3265bbba8", "eventTime": "2019-05-30T08:33:10Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0bb7dfa-05ac-47ea-a675-8536e29e5632", "record_id": "flaws_cloudtrail:0000076:f0bb7dfa-05ac-47ea-a675-8536e29e5632", "row_index": 76, "timestamp": "2019-05-30T08:33:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0bb7dfa-05ac-47ea-a675-8536e29e5632", "eventTime": "2019-05-30T08:33:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0bb7dfa-05ac-47ea-a675-8536e29e5632", "record_id": "flaws_cloudtrail:0000077:f0bb7dfa-05ac-47ea-a675-8536e29e5632", "row_index": 77, "timestamp": "2019-05-30T08:33:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0bb7dfa-05ac-47ea-a675-8536e29e5632", "eventTime": "2019-05-30T08:33:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2365e774-9d2a-4d5a-b886-53213eb784051", "record_id": "flaws_cloudtrail:0000078:2365e774-9d2a-4d5a-b886-53213eb784051", "row_index": 78, "timestamp": "2019-05-30T08:33:12Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2365e774-9d2a-4d5a-b886-53213eb784051", "eventTime": "2019-05-30T08:33:12Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2365e774-9d2a-4d5a-b886-53213eb784051", "record_id": "flaws_cloudtrail:0000079:2365e774-9d2a-4d5a-b886-53213eb784051", "row_index": 79, "timestamp": "2019-05-30T08:33:12Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2365e774-9d2a-4d5a-b886-53213eb784051", "eventTime": "2019-05-30T08:33:12Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "record_id": "flaws_cloudtrail:0000080:0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "row_index": 80, "timestamp": "2019-05-30T08:33:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "eventTime": "2019-05-30T08:33:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "record_id": "flaws_cloudtrail:0000081:0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "row_index": 81, "timestamp": "2019-05-30T08:33:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a34d732-1c61-4374-8f70-4d8f4bdb7bc6", "eventTime": "2019-05-30T08:33:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6e304ff-7608-4a2d-bc6d-e048ab58466d", "record_id": "flaws_cloudtrail:0000082:c6e304ff-7608-4a2d-bc6d-e048ab58466d", "row_index": 82, "timestamp": "2019-05-30T08:33:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6e304ff-7608-4a2d-bc6d-e048ab58466d", "eventTime": "2019-05-30T08:33:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "record_id": "flaws_cloudtrail:0000083:e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "row_index": 83, "timestamp": "2019-05-30T08:33:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "eventTime": "2019-05-30T08:33:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6e304ff-7608-4a2d-bc6d-e048ab58466d", "record_id": "flaws_cloudtrail:0000084:c6e304ff-7608-4a2d-bc6d-e048ab58466d", "row_index": 84, "timestamp": "2019-05-30T08:33:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6e304ff-7608-4a2d-bc6d-e048ab58466d", "eventTime": "2019-05-30T08:33:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "record_id": "flaws_cloudtrail:0000085:e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "row_index": 85, "timestamp": "2019-05-30T08:33:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ad4263-73b9-48e7-ba45-55c3aefa5ec4", "eventTime": "2019-05-30T08:33:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "record_id": "flaws_cloudtrail:0000086:3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "row_index": 86, "timestamp": "2019-05-30T08:33:15Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "eventTime": "2019-05-30T08:33:15Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "record_id": "flaws_cloudtrail:0000087:3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "row_index": 87, "timestamp": "2019-05-30T08:33:15Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddf19ca-96c2-4fc4-beb9-0b493449a6f37", "eventTime": "2019-05-30T08:33:15Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0553ea30-b5f9-4a12-8109-2f7eb0160dce", "record_id": "flaws_cloudtrail:0000088:0553ea30-b5f9-4a12-8109-2f7eb0160dce", "row_index": 88, "timestamp": "2019-05-30T08:33:16Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0553ea30-b5f9-4a12-8109-2f7eb0160dce", "eventTime": "2019-05-30T08:33:16Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0553ea30-b5f9-4a12-8109-2f7eb0160dce", "record_id": "flaws_cloudtrail:0000089:0553ea30-b5f9-4a12-8109-2f7eb0160dce", "row_index": 89, "timestamp": "2019-05-30T08:33:16Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0553ea30-b5f9-4a12-8109-2f7eb0160dce", "eventTime": "2019-05-30T08:33:16Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "record_id": "flaws_cloudtrail:0000090:1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "row_index": 90, "timestamp": "2019-05-30T08:33:17Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "eventTime": "2019-05-30T08:33:17Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "record_id": "flaws_cloudtrail:0000091:1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "row_index": 91, "timestamp": "2019-05-30T08:33:17Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d8d7721-07e4-4d0d-bb23-1cdbc40fe0b4", "eventTime": "2019-05-30T08:33:17Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7ea938-0400-4a65-b568-92055dd1a2d", "record_id": "flaws_cloudtrail:0000092:9c7ea938-0400-4a65-b568-92055dd1a2d", "row_index": 92, "timestamp": "2019-05-30T08:33:19Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7ea938-0400-4a65-b568-92055dd1a2d", "eventTime": "2019-05-30T08:33:19Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7ea938-0400-4a65-b568-92055dd1a2d", "record_id": "flaws_cloudtrail:0000093:9c7ea938-0400-4a65-b568-92055dd1a2d", "row_index": 93, "timestamp": "2019-05-30T08:33:19Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7ea938-0400-4a65-b568-92055dd1a2d", "eventTime": "2019-05-30T08:33:19Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "record_id": "flaws_cloudtrail:0000094:c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "row_index": 94, "timestamp": "2019-05-30T08:33:20Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "eventTime": "2019-05-30T08:33:20Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "record_id": "flaws_cloudtrail:0000095:c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "row_index": 95, "timestamp": "2019-05-30T08:33:20Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7a149a7-33a0-4a1c-8aa5-453cb11f36e3", "eventTime": "2019-05-30T08:33:20Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "record_id": "flaws_cloudtrail:0000096:b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "row_index": 96, "timestamp": "2019-05-30T08:33:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "eventTime": "2019-05-30T08:33:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "record_id": "flaws_cloudtrail:0000097:b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "row_index": 97, "timestamp": "2019-05-30T08:33:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b432f99d-fc88-40fe-aa67-4e5ffc3b73a7", "eventTime": "2019-05-30T08:33:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "record_id": "flaws_cloudtrail:0000098:d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "row_index": 98, "timestamp": "2019-05-30T08:33:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "eventTime": "2019-05-30T08:33:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "record_id": "flaws_cloudtrail:0000099:d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "row_index": 99, "timestamp": "2019-05-30T08:33:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0a2eb31-7ac5-4683-b0d2-7020c8c11cb0", "eventTime": "2019-05-30T08:33:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "record_id": "flaws_cloudtrail:0000100:faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "row_index": 100, "timestamp": "2019-05-30T08:33:24Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "eventTime": "2019-05-30T08:33:24Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "record_id": "flaws_cloudtrail:0000101:faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "row_index": 101, "timestamp": "2019-05-30T08:33:24Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa5fc19-643c-4d06-a1f7-6d468e15d5b6", "eventTime": "2019-05-30T08:33:24Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171797-1f83-40bf-b909-e7acb1f7d22c", "record_id": "flaws_cloudtrail:0000102:171797-1f83-40bf-b909-e7acb1f7d22c", "row_index": 102, "timestamp": "2019-05-30T08:33:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171797-1f83-40bf-b909-e7acb1f7d22c", "eventTime": "2019-05-30T08:33:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6946bfe1-edf0-492e-a4e7-eaa8e459be03", "record_id": "flaws_cloudtrail:0000103:6946bfe1-edf0-492e-a4e7-eaa8e459be03", "row_index": 103, "timestamp": "2019-05-30T08:33:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6946bfe1-edf0-492e-a4e7-eaa8e459be03", "eventTime": "2019-05-30T08:33:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171797-1f83-40bf-b909-e7acb1f7d22c", "record_id": "flaws_cloudtrail:0000104:171797-1f83-40bf-b909-e7acb1f7d22c", "row_index": 104, "timestamp": "2019-05-30T08:33:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171797-1f83-40bf-b909-e7acb1f7d22c", "eventTime": "2019-05-30T08:33:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6946bfe1-edf0-492e-a4e7-eaa8e459be03", "record_id": "flaws_cloudtrail:0000105:6946bfe1-edf0-492e-a4e7-eaa8e459be03", "row_index": 105, "timestamp": "2019-05-30T08:33:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6946bfe1-edf0-492e-a4e7-eaa8e459be03", "eventTime": "2019-05-30T08:33:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "record_id": "flaws_cloudtrail:0000106:7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "row_index": 106, "timestamp": "2019-05-30T08:33:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "eventTime": "2019-05-30T08:33:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "record_id": "flaws_cloudtrail:0000107:7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "row_index": 107, "timestamp": "2019-05-30T08:33:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f77f949-6ec0-4af1-ab3e-f232007b5b9c", "eventTime": "2019-05-30T08:33:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b783353-907e-4efd-af9b-cff9a4a7d8b8", "record_id": "flaws_cloudtrail:0000108:2b783353-907e-4efd-af9b-cff9a4a7d8b8", "row_index": 108, "timestamp": "2019-05-30T08:33:28Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b783353-907e-4efd-af9b-cff9a4a7d8b8", "eventTime": "2019-05-30T08:33:28Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b783353-907e-4efd-af9b-cff9a4a7d8b8", "record_id": "flaws_cloudtrail:0000109:2b783353-907e-4efd-af9b-cff9a4a7d8b8", "row_index": 109, "timestamp": "2019-05-30T08:33:28Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b783353-907e-4efd-af9b-cff9a4a7d8b8", "eventTime": "2019-05-30T08:33:28Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694053d-6f37-43fa-80c2-0dc814296", "record_id": "flaws_cloudtrail:0000110:694053d-6f37-43fa-80c2-0dc814296", "row_index": 110, "timestamp": "2019-05-30T08:33:29Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694053d-6f37-43fa-80c2-0dc814296", "eventTime": "2019-05-30T08:33:29Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694053d-6f37-43fa-80c2-0dc814296", "record_id": "flaws_cloudtrail:0000111:694053d-6f37-43fa-80c2-0dc814296", "row_index": 111, "timestamp": "2019-05-30T08:33:29Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694053d-6f37-43fa-80c2-0dc814296", "eventTime": "2019-05-30T08:33:29Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015844d-41ef-4501-bb72-50d170e79b33", "record_id": "flaws_cloudtrail:0000112:015844d-41ef-4501-bb72-50d170e79b33", "row_index": 112, "timestamp": "2019-05-30T08:33:30Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015844d-41ef-4501-bb72-50d170e79b33", "eventTime": "2019-05-30T08:33:30Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-north-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015844d-41ef-4501-bb72-50d170e79b33", "record_id": "flaws_cloudtrail:0000113:015844d-41ef-4501-bb72-50d170e79b33", "row_index": 113, "timestamp": "2019-05-30T08:33:30Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015844d-41ef-4501-bb72-50d170e79b33", "eventTime": "2019-05-30T08:33:30Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-north-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63fa9179-127a-42ef-a61e-2c43aa02e0e7", "record_id": "flaws_cloudtrail:0000114:63fa9179-127a-42ef-a61e-2c43aa02e0e7", "row_index": 114, "timestamp": "2019-05-30T08:33:31Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63fa9179-127a-42ef-a61e-2c43aa02e0e7", "eventTime": "2019-05-30T08:33:31Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-south-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "record_id": "flaws_cloudtrail:0000115:eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "row_index": 115, "timestamp": "2019-05-30T08:33:31Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "eventTime": "2019-05-30T08:33:31Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-3::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63fa9179-127a-42ef-a61e-2c43aa02e0e7", "record_id": "flaws_cloudtrail:0000116:63fa9179-127a-42ef-a61e-2c43aa02e0e7", "row_index": 116, "timestamp": "2019-05-30T08:33:31Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63fa9179-127a-42ef-a61e-2c43aa02e0e7", "eventTime": "2019-05-30T08:33:31Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-south-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "record_id": "flaws_cloudtrail:0000117:eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "row_index": 117, "timestamp": "2019-05-30T08:33:31Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaf6a274-c3a6-4f6b-9a65-b4aeb45603ae", "eventTime": "2019-05-30T08:33:31Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-3::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd63d455-67e0-409a-a81c-2d73f70f8009", "record_id": "flaws_cloudtrail:0000118:dd63d455-67e0-409a-a81c-2d73f70f8009", "row_index": 118, "timestamp": "2019-05-30T08:33:32Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd63d455-67e0-409a-a81c-2d73f70f8009", "eventTime": "2019-05-30T08:33:32Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd63d455-67e0-409a-a81c-2d73f70f8009", "record_id": "flaws_cloudtrail:0000119:dd63d455-67e0-409a-a81c-2d73f70f8009", "row_index": 119, "timestamp": "2019-05-30T08:33:32Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd63d455-67e0-409a-a81c-2d73f70f8009", "eventTime": "2019-05-30T08:33:32Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f54214ae-e6b0-4cb0-9b18-37132b9e3515", "record_id": "flaws_cloudtrail:0000120:f54214ae-e6b0-4cb0-9b18-37132b9e3515", "row_index": 120, "timestamp": "2019-05-30T08:33:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f54214ae-e6b0-4cb0-9b18-37132b9e3515", "eventTime": "2019-05-30T08:33:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96faac2c-b4df-4ee3-be56-de7d7276c382", "record_id": "flaws_cloudtrail:0000121:96faac2c-b4df-4ee3-be56-de7d7276c382", "row_index": 121, "timestamp": "2019-05-30T08:33:33Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96faac2c-b4df-4ee3-be56-de7d7276c382", "eventTime": "2019-05-30T08:33:33Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96faac2c-b4df-4ee3-be56-de7d7276c382", "record_id": "flaws_cloudtrail:0000122:96faac2c-b4df-4ee3-be56-de7d7276c382", "row_index": 122, "timestamp": "2019-05-30T08:33:33Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96faac2c-b4df-4ee3-be56-de7d7276c382", "eventTime": "2019-05-30T08:33:33Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "record_id": "flaws_cloudtrail:0000123:ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "row_index": 123, "timestamp": "2019-05-30T08:33:34Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "eventTime": "2019-05-30T08:33:34Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "record_id": "flaws_cloudtrail:0000124:ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "row_index": 124, "timestamp": "2019-05-30T08:33:34Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ce3d8-a655-4b3d-97f1-b41ba8b93b0c", "eventTime": "2019-05-30T08:33:34Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08b91822-200e-4ec5-b82b-b86f58d0a213", "record_id": "flaws_cloudtrail:0000125:08b91822-200e-4ec5-b82b-b86f58d0a213", "row_index": 125, "timestamp": "2019-05-30T08:33:36Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08b91822-200e-4ec5-b82b-b86f58d0a213", "eventTime": "2019-05-30T08:33:36Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08b91822-200e-4ec5-b82b-b86f58d0a213", "record_id": "flaws_cloudtrail:0000126:08b91822-200e-4ec5-b82b-b86f58d0a213", "row_index": 126, "timestamp": "2019-05-30T08:33:36Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08b91822-200e-4ec5-b82b-b86f58d0a213", "eventTime": "2019-05-30T08:33:36Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "record_id": "flaws_cloudtrail:0000127:0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "row_index": 127, "timestamp": "2019-05-30T08:33:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "eventTime": "2019-05-30T08:33:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:sa-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "record_id": "flaws_cloudtrail:0000128:0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "row_index": 128, "timestamp": "2019-05-30T08:33:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d8ca74d-4454-4264-8f6c-7becb8aff6dd", "eventTime": "2019-05-30T08:33:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:sa-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010dcb00-d8b9-494c-9e15-5e41be726e85", "record_id": "flaws_cloudtrail:0000129:010dcb00-d8b9-494c-9e15-5e41be726e85", "row_index": 129, "timestamp": "2019-05-30T08:33:38Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010dcb00-d8b9-494c-9e15-5e41be726e85", "eventTime": "2019-05-30T08:33:38Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ca-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010dcb00-d8b9-494c-9e15-5e41be726e85", "record_id": "flaws_cloudtrail:0000130:010dcb00-d8b9-494c-9e15-5e41be726e85", "row_index": 130, "timestamp": "2019-05-30T08:33:38Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010dcb00-d8b9-494c-9e15-5e41be726e85", "eventTime": "2019-05-30T08:33:38Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ca-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "387fcebb-0409-4d57-9db1-9994d8c54b99", "record_id": "flaws_cloudtrail:0000131:387fcebb-0409-4d57-9db1-9994d8c54b99", "row_index": 131, "timestamp": "2019-05-30T08:33:39Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "387fcebb-0409-4d57-9db1-9994d8c54b99", "eventTime": "2019-05-30T08:33:39Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "387fcebb-0409-4d57-9db1-9994d8c54b99", "record_id": "flaws_cloudtrail:0000132:387fcebb-0409-4d57-9db1-9994d8c54b99", "row_index": 132, "timestamp": "2019-05-30T08:33:39Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "387fcebb-0409-4d57-9db1-9994d8c54b99", "eventTime": "2019-05-30T08:33:39Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e6c3c4-068e-469c-a379-23e6dba61ffb", "record_id": "flaws_cloudtrail:0000133:39e6c3c4-068e-469c-a379-23e6dba61ffb", "row_index": 133, "timestamp": "2019-05-30T08:33:41Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e6c3c4-068e-469c-a379-23e6dba61ffb", "eventTime": "2019-05-30T08:33:41Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e6c3c4-068e-469c-a379-23e6dba61ffb", "record_id": "flaws_cloudtrail:0000134:39e6c3c4-068e-469c-a379-23e6dba61ffb", "row_index": 134, "timestamp": "2019-05-30T08:33:41Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e6c3c4-068e-469c-a379-23e6dba61ffb", "eventTime": "2019-05-30T08:33:41Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9481cbe9-e989-4724-9312-6534e6cff8c2", "record_id": "flaws_cloudtrail:0000135:9481cbe9-e989-4724-9312-6534e6cff8c2", "row_index": 135, "timestamp": "2019-05-30T08:33:42Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9481cbe9-e989-4724-9312-6534e6cff8c2", "eventTime": "2019-05-30T08:33:42Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "record_id": "flaws_cloudtrail:0000136:6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "row_index": 136, "timestamp": "2019-05-30T08:33:42Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "eventTime": "2019-05-30T08:33:42Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9481cbe9-e989-4724-9312-6534e6cff8c2", "record_id": "flaws_cloudtrail:0000137:9481cbe9-e989-4724-9312-6534e6cff8c2", "row_index": 137, "timestamp": "2019-05-30T08:33:42Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9481cbe9-e989-4724-9312-6534e6cff8c2", "eventTime": "2019-05-30T08:33:42Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "record_id": "flaws_cloudtrail:0000138:6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "row_index": 138, "timestamp": "2019-05-30T08:33:42Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a3f29cf-79a8-4f93-8a5b-d2e295188dac", "eventTime": "2019-05-30T08:33:42Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "record_id": "flaws_cloudtrail:0000139:61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "row_index": 139, "timestamp": "2019-05-30T08:33:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "eventTime": "2019-05-30T08:33:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "record_id": "flaws_cloudtrail:0000140:61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "row_index": 140, "timestamp": "2019-05-30T08:33:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e23ef7-ea13-461a-8e5f-fd71e6b31f55", "eventTime": "2019-05-30T08:33:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c04db7a-7e39-4b14-bd40-91187a1427a7", "record_id": "flaws_cloudtrail:0000141:9c04db7a-7e39-4b14-bd40-91187a1427a7", "row_index": 141, "timestamp": "2019-05-30T08:33:44Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c04db7a-7e39-4b14-bd40-91187a1427a7", "eventTime": "2019-05-30T08:33:44Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c04db7a-7e39-4b14-bd40-91187a1427a7", "record_id": "flaws_cloudtrail:0000142:9c04db7a-7e39-4b14-bd40-91187a1427a7", "row_index": 142, "timestamp": "2019-05-30T08:33:44Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c04db7a-7e39-4b14-bd40-91187a1427a7", "eventTime": "2019-05-30T08:33:44Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedaf252-7d7a-4e1a-bda6-0f6da446e850", "record_id": "flaws_cloudtrail:0000143:fedaf252-7d7a-4e1a-bda6-0f6da446e850", "row_index": 143, "timestamp": "2019-05-30T08:33:46Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedaf252-7d7a-4e1a-bda6-0f6da446e850", "eventTime": "2019-05-30T08:33:46Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc724551-04d2-47e0-906b-765039ecaaf6", "record_id": "flaws_cloudtrail:0000144:bbc724551-04d2-47e0-906b-765039ecaaf6", "row_index": 144, "timestamp": "2019-05-30T08:33:46Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc724551-04d2-47e0-906b-765039ecaaf6", "eventTime": "2019-05-30T08:33:46Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedaf252-7d7a-4e1a-bda6-0f6da446e850", "record_id": "flaws_cloudtrail:0000145:fedaf252-7d7a-4e1a-bda6-0f6da446e850", "row_index": 145, "timestamp": "2019-05-30T08:33:46Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedaf252-7d7a-4e1a-bda6-0f6da446e850", "eventTime": "2019-05-30T08:33:46Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc724551-04d2-47e0-906b-765039ecaaf6", "record_id": "flaws_cloudtrail:0000146:bbc724551-04d2-47e0-906b-765039ecaaf6", "row_index": 146, "timestamp": "2019-05-30T08:33:46Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc724551-04d2-47e0-906b-765039ecaaf6", "eventTime": "2019-05-30T08:33:46Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd35f73-d986-4983-8eb7-f42caf86e255", "record_id": "flaws_cloudtrail:0000147:ddd35f73-d986-4983-8eb7-f42caf86e255", "row_index": 147, "timestamp": "2019-05-30T08:33:47Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd35f73-d986-4983-8eb7-f42caf86e255", "eventTime": "2019-05-30T08:33:47Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd35f73-d986-4983-8eb7-f42caf86e255", "record_id": "flaws_cloudtrail:0000148:ddd35f73-d986-4983-8eb7-f42caf86e255", "row_index": 148, "timestamp": "2019-05-30T08:33:47Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd35f73-d986-4983-8eb7-f42caf86e255", "eventTime": "2019-05-30T08:33:47Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8733e4d4-948c-4e51-bbaa-0260d04e402c", "record_id": "flaws_cloudtrail:0000149:8733e4d4-948c-4e51-bbaa-0260d04e402c", "row_index": 149, "timestamp": "2019-05-30T08:33:48Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8733e4d4-948c-4e51-bbaa-0260d04e402c", "eventTime": "2019-05-30T08:33:48Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8733e4d4-948c-4e51-bbaa-0260d04e402c", "record_id": "flaws_cloudtrail:0000150:8733e4d4-948c-4e51-bbaa-0260d04e402c", "row_index": 150, "timestamp": "2019-05-30T08:33:48Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8733e4d4-948c-4e51-bbaa-0260d04e402c", "eventTime": "2019-05-30T08:33:48Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530b18ff-d632-40f7-8f12-8b4f61a101009", "record_id": "flaws_cloudtrail:0000151:530b18ff-d632-40f7-8f12-8b4f61a101009", "row_index": 151, "timestamp": "2019-05-30T08:33:49Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530b18ff-d632-40f7-8f12-8b4f61a101009", "eventTime": "2019-05-30T08:33:49Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530b18ff-d632-40f7-8f12-8b4f61a101009", "record_id": "flaws_cloudtrail:0000152:530b18ff-d632-40f7-8f12-8b4f61a101009", "row_index": 152, "timestamp": "2019-05-30T08:33:49Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530b18ff-d632-40f7-8f12-8b4f61a101009", "eventTime": "2019-05-30T08:33:49Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "record_id": "flaws_cloudtrail:0000153:11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "row_index": 153, "timestamp": "2019-05-30T08:33:50Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "eventTime": "2019-05-30T08:33:50Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e702b9-8077-43c3-9553-3b97b4a5f523", "record_id": "flaws_cloudtrail:0000154:64e702b9-8077-43c3-9553-3b97b4a5f523", "row_index": 154, "timestamp": "2019-05-30T08:33:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e702b9-8077-43c3-9553-3b97b4a5f523", "eventTime": "2019-05-30T08:33:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "record_id": "flaws_cloudtrail:0000155:11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "row_index": 155, "timestamp": "2019-05-30T08:33:50Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11d5825f-8ca8-41d3-a8ba-6b2c2b856e92", "eventTime": "2019-05-30T08:33:50Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e702b9-8077-43c3-9553-3b97b4a5f523", "record_id": "flaws_cloudtrail:0000156:64e702b9-8077-43c3-9553-3b97b4a5f523", "row_index": 156, "timestamp": "2019-05-30T08:33:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e702b9-8077-43c3-9553-3b97b4a5f523", "eventTime": "2019-05-30T08:33:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "196b0972-baf3-4e13-840b-b3a35fdf3e20", "record_id": "flaws_cloudtrail:0000157:196b0972-baf3-4e13-840b-b3a35fdf3e20", "row_index": 157, "timestamp": "2019-05-30T08:33:51Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "196b0972-baf3-4e13-840b-b3a35fdf3e20", "eventTime": "2019-05-30T08:33:51Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa43bdc-0968-41d3-8418-b6594bc016e9", "record_id": "flaws_cloudtrail:0000158:3aa43bdc-0968-41d3-8418-b6594bc016e9", "row_index": 158, "timestamp": "2019-05-30T08:33:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa43bdc-0968-41d3-8418-b6594bc016e9", "eventTime": "2019-05-30T08:33:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "196b0972-baf3-4e13-840b-b3a35fdf3e20", "record_id": "flaws_cloudtrail:0000159:196b0972-baf3-4e13-840b-b3a35fdf3e20", "row_index": 159, "timestamp": "2019-05-30T08:33:51Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "196b0972-baf3-4e13-840b-b3a35fdf3e20", "eventTime": "2019-05-30T08:33:51Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa43bdc-0968-41d3-8418-b6594bc016e9", "record_id": "flaws_cloudtrail:0000160:3aa43bdc-0968-41d3-8418-b6594bc016e9", "row_index": 160, "timestamp": "2019-05-30T08:33:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa43bdc-0968-41d3-8418-b6594bc016e9", "eventTime": "2019-05-30T08:33:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "record_id": "flaws_cloudtrail:0000161:b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "row_index": 161, "timestamp": "2019-05-30T08:33:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "eventTime": "2019-05-30T08:33:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "record_id": "flaws_cloudtrail:0000162:b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "row_index": 162, "timestamp": "2019-05-30T08:33:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b995eb0f-9aea-4b55-b30d-6d0df4ff04b2", "eventTime": "2019-05-30T08:33:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f6253a-72e2-4a06-b98c-3d2fe4428936", "record_id": "flaws_cloudtrail:0000163:28f6253a-72e2-4a06-b98c-3d2fe4428936", "row_index": 163, "timestamp": "2019-05-30T08:33:53Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f6253a-72e2-4a06-b98c-3d2fe4428936", "eventTime": "2019-05-30T08:33:53Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f6253a-72e2-4a06-b98c-3d2fe4428936", "record_id": "flaws_cloudtrail:0000164:28f6253a-72e2-4a06-b98c-3d2fe4428936", "row_index": 164, "timestamp": "2019-05-30T08:33:53Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f6253a-72e2-4a06-b98c-3d2fe4428936", "eventTime": "2019-05-30T08:33:53Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b536fab2-8fc6-471a-9d61-e6b14ae666a1", "record_id": "flaws_cloudtrail:0000165:b536fab2-8fc6-471a-9d61-e6b14ae666a1", "row_index": 165, "timestamp": "2019-05-30T08:33:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b536fab2-8fc6-471a-9d61-e6b14ae666a1", "eventTime": "2019-05-30T08:33:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b536fab2-8fc6-471a-9d61-e6b14ae666a1", "record_id": "flaws_cloudtrail:0000166:b536fab2-8fc6-471a-9d61-e6b14ae666a1", "row_index": 166, "timestamp": "2019-05-30T08:33:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b536fab2-8fc6-471a-9d61-e6b14ae666a1", "eventTime": "2019-05-30T08:33:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "record_id": "flaws_cloudtrail:0000167:515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "row_index": 167, "timestamp": "2019-05-30T08:33:55Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "eventTime": "2019-05-30T08:33:55Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "record_id": "flaws_cloudtrail:0000168:515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "row_index": 168, "timestamp": "2019-05-30T08:33:55Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515b7d2a-d00f-4e3a-82b1-451a49b36e6d", "eventTime": "2019-05-30T08:33:55Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97ef2bf1-b4ce-4045-b284-dab064fa5037", "record_id": "flaws_cloudtrail:0000169:97ef2bf1-b4ce-4045-b284-dab064fa5037", "row_index": 169, "timestamp": "2019-05-30T08:33:57Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97ef2bf1-b4ce-4045-b284-dab064fa5037", "eventTime": "2019-05-30T08:33:57Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97ef2bf1-b4ce-4045-b284-dab064fa5037", "record_id": "flaws_cloudtrail:0000170:97ef2bf1-b4ce-4045-b284-dab064fa5037", "row_index": 170, "timestamp": "2019-05-30T08:33:57Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97ef2bf1-b4ce-4045-b284-dab064fa5037", "eventTime": "2019-05-30T08:33:57Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227bee04-1f7e-4f51-b893-163aa338db15", "record_id": "flaws_cloudtrail:0000171:227bee04-1f7e-4f51-b893-163aa338db15", "row_index": 171, "timestamp": "2019-05-30T08:33:58Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227bee04-1f7e-4f51-b893-163aa338db15", "eventTime": "2019-05-30T08:33:58Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227bee04-1f7e-4f51-b893-163aa338db15", "record_id": "flaws_cloudtrail:0000172:227bee04-1f7e-4f51-b893-163aa338db15", "row_index": 172, "timestamp": "2019-05-30T08:33:58Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227bee04-1f7e-4f51-b893-163aa338db15", "eventTime": "2019-05-30T08:33:58Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04125-0ee7-4c60-b20b-18a19789ebf6", "record_id": "flaws_cloudtrail:0000173:04125-0ee7-4c60-b20b-18a19789ebf6", "row_index": 173, "timestamp": "2019-05-30T08:34:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04125-0ee7-4c60-b20b-18a19789ebf6", "eventTime": "2019-05-30T08:34:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04125-0ee7-4c60-b20b-18a19789ebf6", "record_id": "flaws_cloudtrail:0000174:04125-0ee7-4c60-b20b-18a19789ebf6", "row_index": 174, "timestamp": "2019-05-30T08:34:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04125-0ee7-4c60-b20b-18a19789ebf6", "eventTime": "2019-05-30T08:34:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd35cb1-31b3-4219-93d4-34d164a2d75e", "record_id": "flaws_cloudtrail:0000175:1dd35cb1-31b3-4219-93d4-34d164a2d75e", "row_index": 175, "timestamp": "2019-05-30T08:34:01Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd35cb1-31b3-4219-93d4-34d164a2d75e", "eventTime": "2019-05-30T08:34:01Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd35cb1-31b3-4219-93d4-34d164a2d75e", "record_id": "flaws_cloudtrail:0000176:1dd35cb1-31b3-4219-93d4-34d164a2d75e", "row_index": 176, "timestamp": "2019-05-30T08:34:01Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd35cb1-31b3-4219-93d4-34d164a2d75e", "eventTime": "2019-05-30T08:34:01Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cab926da-e951-4a89-82e7-1f67277ffb18", "record_id": "flaws_cloudtrail:0000177:cab926da-e951-4a89-82e7-1f67277ffb18", "row_index": 177, "timestamp": "2019-05-30T08:34:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cab926da-e951-4a89-82e7-1f67277ffb18", "eventTime": "2019-05-30T08:34:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cab926da-e951-4a89-82e7-1f67277ffb18", "record_id": "flaws_cloudtrail:0000178:cab926da-e951-4a89-82e7-1f67277ffb18", "row_index": 178, "timestamp": "2019-05-30T08:34:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cab926da-e951-4a89-82e7-1f67277ffb18", "eventTime": "2019-05-30T08:34:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da590740-4773-40a4-833b-d5c21f8c93a3", "record_id": "flaws_cloudtrail:0000179:7da590740-4773-40a4-833b-d5c21f8c93a3", "row_index": 179, "timestamp": "2019-05-30T08:34:03Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da590740-4773-40a4-833b-d5c21f8c93a3", "eventTime": "2019-05-30T08:34:03Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da590740-4773-40a4-833b-d5c21f8c93a3", "record_id": "flaws_cloudtrail:0000180:7da590740-4773-40a4-833b-d5c21f8c93a3", "row_index": 180, "timestamp": "2019-05-30T08:34:03Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da590740-4773-40a4-833b-d5c21f8c93a3", "eventTime": "2019-05-30T08:34:03Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33405-51a8-463f-a68d-41e83a43d242", "record_id": "flaws_cloudtrail:0000181:33405-51a8-463f-a68d-41e83a43d242", "row_index": 181, "timestamp": "2019-05-30T08:34:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33405-51a8-463f-a68d-41e83a43d242", "eventTime": "2019-05-30T08:34:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33405-51a8-463f-a68d-41e83a43d242", "record_id": "flaws_cloudtrail:0000182:33405-51a8-463f-a68d-41e83a43d242", "row_index": 182, "timestamp": "2019-05-30T08:34:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33405-51a8-463f-a68d-41e83a43d242", "eventTime": "2019-05-30T08:34:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b65922-2fe5-4832-a9c7-4bef460c3928", "record_id": "flaws_cloudtrail:0000183:e2b65922-2fe5-4832-a9c7-4bef460c3928", "row_index": 183, "timestamp": "2019-05-30T08:34:05Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b65922-2fe5-4832-a9c7-4bef460c3928", "eventTime": "2019-05-30T08:34:05Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b65922-2fe5-4832-a9c7-4bef460c3928", "record_id": "flaws_cloudtrail:0000184:e2b65922-2fe5-4832-a9c7-4bef460c3928", "row_index": 184, "timestamp": "2019-05-30T08:34:05Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b65922-2fe5-4832-a9c7-4bef460c3928", "eventTime": "2019-05-30T08:34:05Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "record_id": "flaws_cloudtrail:0000185:5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "row_index": 185, "timestamp": "2019-05-30T08:34:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "eventTime": "2019-05-30T08:34:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "record_id": "flaws_cloudtrail:0000186:5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "row_index": 186, "timestamp": "2019-05-30T08:34:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b290966d-32e2-4f05-9c23-6c3feb02b5b2", "eventTime": "2019-05-30T08:34:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "record_id": "flaws_cloudtrail:0000187:9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "row_index": 187, "timestamp": "2019-05-30T08:34:09Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "eventTime": "2019-05-30T08:34:09Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678baa58-db97-4fc5-be4f-3ab48eac56b5", "record_id": "flaws_cloudtrail:0000188:678baa58-db97-4fc5-be4f-3ab48eac56b5", "row_index": 188, "timestamp": "2019-05-30T08:34:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678baa58-db97-4fc5-be4f-3ab48eac56b5", "eventTime": "2019-05-30T08:34:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "record_id": "flaws_cloudtrail:0000189:9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "row_index": 189, "timestamp": "2019-05-30T08:34:09Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b58e821-9ae7-4ce2-b6bc-984ca34333e2", "eventTime": "2019-05-30T08:34:09Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678baa58-db97-4fc5-be4f-3ab48eac56b5", "record_id": "flaws_cloudtrail:0000190:678baa58-db97-4fc5-be4f-3ab48eac56b5", "row_index": 190, "timestamp": "2019-05-30T08:34:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678baa58-db97-4fc5-be4f-3ab48eac56b5", "eventTime": "2019-05-30T08:34:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a8510a-2b91-4af4-b3a6-248cee5f93ba", "record_id": "flaws_cloudtrail:0000191:04a8510a-2b91-4af4-b3a6-248cee5f93ba", "row_index": 191, "timestamp": "2019-05-30T08:34:10Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a8510a-2b91-4af4-b3a6-248cee5f93ba", "eventTime": "2019-05-30T08:34:10Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a8510a-2b91-4af4-b3a6-248cee5f93ba", "record_id": "flaws_cloudtrail:0000192:04a8510a-2b91-4af4-b3a6-248cee5f93ba", "row_index": 192, "timestamp": "2019-05-30T08:34:10Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a8510a-2b91-4af4-b3a6-248cee5f93ba", "eventTime": "2019-05-30T08:34:10Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b89a75-75cf-4db8-9f75-ee1792a47179", "record_id": "flaws_cloudtrail:0000193:56b89a75-75cf-4db8-9f75-ee1792a47179", "row_index": 193, "timestamp": "2019-05-30T08:34:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b89a75-75cf-4db8-9f75-ee1792a47179", "eventTime": "2019-05-30T08:34:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578d7c0f-cc69-4930-aa13-2c3eca5108be", "record_id": "flaws_cloudtrail:0000194:578d7c0f-cc69-4930-aa13-2c3eca5108be", "row_index": 194, "timestamp": "2019-05-30T08:34:11Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578d7c0f-cc69-4930-aa13-2c3eca5108be", "eventTime": "2019-05-30T08:34:11Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b89a75-75cf-4db8-9f75-ee1792a47179", "record_id": "flaws_cloudtrail:0000195:56b89a75-75cf-4db8-9f75-ee1792a47179", "row_index": 195, "timestamp": "2019-05-30T08:34:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b89a75-75cf-4db8-9f75-ee1792a47179", "eventTime": "2019-05-30T08:34:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578d7c0f-cc69-4930-aa13-2c3eca5108be", "record_id": "flaws_cloudtrail:0000196:578d7c0f-cc69-4930-aa13-2c3eca5108be", "row_index": 196, "timestamp": "2019-05-30T08:34:11Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578d7c0f-cc69-4930-aa13-2c3eca5108be", "eventTime": "2019-05-30T08:34:11Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123140d64-1b72-436f-80bc-480b0ebf9576", "record_id": "flaws_cloudtrail:0000197:123140d64-1b72-436f-80bc-480b0ebf9576", "row_index": 197, "timestamp": "2019-05-30T08:34:12Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123140d64-1b72-436f-80bc-480b0ebf9576", "eventTime": "2019-05-30T08:34:12Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123140d64-1b72-436f-80bc-480b0ebf9576", "record_id": "flaws_cloudtrail:0000198:123140d64-1b72-436f-80bc-480b0ebf9576", "row_index": 198, "timestamp": "2019-05-30T08:34:12Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123140d64-1b72-436f-80bc-480b0ebf9576", "eventTime": "2019-05-30T08:34:12Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f85075-a679-4773-b42d-013f183faa46", "record_id": "flaws_cloudtrail:0000199:66f85075-a679-4773-b42d-013f183faa46", "row_index": 199, "timestamp": "2019-05-30T08:34:13Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f85075-a679-4773-b42d-013f183faa46", "eventTime": "2019-05-30T08:34:13Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f85075-a679-4773-b42d-013f183faa46", "record_id": "flaws_cloudtrail:0000200:66f85075-a679-4773-b42d-013f183faa46", "row_index": 200, "timestamp": "2019-05-30T08:34:13Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f85075-a679-4773-b42d-013f183faa46", "eventTime": "2019-05-30T08:34:13Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e49817-ba66-4c58-a6bc-3210322a5ccd", "record_id": "flaws_cloudtrail:0000201:1e49817-ba66-4c58-a6bc-3210322a5ccd", "row_index": 201, "timestamp": "2019-05-30T08:34:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e49817-ba66-4c58-a6bc-3210322a5ccd", "eventTime": "2019-05-30T08:34:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e49817-ba66-4c58-a6bc-3210322a5ccd", "record_id": "flaws_cloudtrail:0000202:1e49817-ba66-4c58-a6bc-3210322a5ccd", "row_index": 202, "timestamp": "2019-05-30T08:34:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e49817-ba66-4c58-a6bc-3210322a5ccd", "eventTime": "2019-05-30T08:34:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "record_id": "flaws_cloudtrail:0000203:e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "row_index": 203, "timestamp": "2019-05-30T08:34:16Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "eventTime": "2019-05-30T08:34:16Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "record_id": "flaws_cloudtrail:0000204:e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "row_index": 204, "timestamp": "2019-05-30T08:34:16Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f4db5e-2c67-428c-88db-bc4c0d7b6b49", "eventTime": "2019-05-30T08:34:16Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "record_id": "flaws_cloudtrail:0000205:dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "row_index": 205, "timestamp": "2019-05-30T08:34:17Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "eventTime": "2019-05-30T08:34:17Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "record_id": "flaws_cloudtrail:0000206:dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "row_index": 206, "timestamp": "2019-05-30T08:34:17Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dccba56b-19a8-4a8e-aae0-307ef3c46bd3", "eventTime": "2019-05-30T08:34:17Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c816113a-ae63-4e5f-8b23-d771980a661", "record_id": "flaws_cloudtrail:0000207:c816113a-ae63-4e5f-8b23-d771980a661", "row_index": 207, "timestamp": "2019-05-30T08:34:18Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c816113a-ae63-4e5f-8b23-d771980a661", "eventTime": "2019-05-30T08:34:18Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c816113a-ae63-4e5f-8b23-d771980a661", "record_id": "flaws_cloudtrail:0000208:c816113a-ae63-4e5f-8b23-d771980a661", "row_index": 208, "timestamp": "2019-05-30T08:34:18Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c816113a-ae63-4e5f-8b23-d771980a661", "eventTime": "2019-05-30T08:34:18Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9900c84e-a6c0-4e64-901c-4682c41b9747", "record_id": "flaws_cloudtrail:0000209:9900c84e-a6c0-4e64-901c-4682c41b9747", "row_index": 209, "timestamp": "2019-05-30T08:34:19Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9900c84e-a6c0-4e64-901c-4682c41b9747", "eventTime": "2019-05-30T08:34:19Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9900c84e-a6c0-4e64-901c-4682c41b9747", "record_id": "flaws_cloudtrail:0000210:9900c84e-a6c0-4e64-901c-4682c41b9747", "row_index": 210, "timestamp": "2019-05-30T08:34:19Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9900c84e-a6c0-4e64-901c-4682c41b9747", "eventTime": "2019-05-30T08:34:19Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "193b3f35-8f86-4e48-abec-af6b17a7cf37", "record_id": "flaws_cloudtrail:0000211:193b3f35-8f86-4e48-abec-af6b17a7cf37", "row_index": 211, "timestamp": "2019-05-30T08:34:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "193b3f35-8f86-4e48-abec-af6b17a7cf37", "eventTime": "2019-05-30T08:34:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9c9145-3e61-4b81-8d66-b31f39427ae", "record_id": "flaws_cloudtrail:0000212:0f9c9145-3e61-4b81-8d66-b31f39427ae", "row_index": 212, "timestamp": "2019-05-30T08:34:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9c9145-3e61-4b81-8d66-b31f39427ae", "eventTime": "2019-05-30T08:34:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "193b3f35-8f86-4e48-abec-af6b17a7cf37", "record_id": "flaws_cloudtrail:0000213:193b3f35-8f86-4e48-abec-af6b17a7cf37", "row_index": 213, "timestamp": "2019-05-30T08:34:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "193b3f35-8f86-4e48-abec-af6b17a7cf37", "eventTime": "2019-05-30T08:34:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9c9145-3e61-4b81-8d66-b31f39427ae", "record_id": "flaws_cloudtrail:0000214:0f9c9145-3e61-4b81-8d66-b31f39427ae", "row_index": 214, "timestamp": "2019-05-30T08:34:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9c9145-3e61-4b81-8d66-b31f39427ae", "eventTime": "2019-05-30T08:34:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "record_id": "flaws_cloudtrail:0000215:e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "row_index": 215, "timestamp": "2019-05-30T08:34:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "eventTime": "2019-05-30T08:34:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49afdac3-fe0d-48d0-8945-d81ac971f247", "record_id": "flaws_cloudtrail:0000216:49afdac3-fe0d-48d0-8945-d81ac971f247", "row_index": 216, "timestamp": "2019-05-30T08:34:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49afdac3-fe0d-48d0-8945-d81ac971f247", "eventTime": "2019-05-30T08:34:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "record_id": "flaws_cloudtrail:0000217:e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "row_index": 217, "timestamp": "2019-05-30T08:34:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3cda23d-cfb0-41af-a5b4-2e6bee1b2f52", "eventTime": "2019-05-30T08:34:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49afdac3-fe0d-48d0-8945-d81ac971f247", "record_id": "flaws_cloudtrail:0000218:49afdac3-fe0d-48d0-8945-d81ac971f247", "row_index": 218, "timestamp": "2019-05-30T08:34:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49afdac3-fe0d-48d0-8945-d81ac971f247", "eventTime": "2019-05-30T08:34:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c59b09-1dc1-401a-b9d2-468230786771", "record_id": "flaws_cloudtrail:0000219:a7c59b09-1dc1-401a-b9d2-468230786771", "row_index": 219, "timestamp": "2019-05-30T08:34:23Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c59b09-1dc1-401a-b9d2-468230786771", "eventTime": "2019-05-30T08:34:23Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c59b09-1dc1-401a-b9d2-468230786771", "record_id": "flaws_cloudtrail:0000220:a7c59b09-1dc1-401a-b9d2-468230786771", "row_index": 220, "timestamp": "2019-05-30T08:34:23Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c59b09-1dc1-401a-b9d2-468230786771", "eventTime": "2019-05-30T08:34:23Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fb9a9ee-2a79-4a23-8dc2-3ced81b07adb", "record_id": "flaws_cloudtrail:0000221:1fb9a9ee-2a79-4a23-8dc2-3ced81b07adb", "row_index": 221, "timestamp": "2019-05-30T08:34:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fb9a9ee-2a79-4a23-8dc2-3ced81b07adb", "eventTime": "2019-05-30T08:34:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c9c932-2843-48ae-89be-5c1f8c5936f2", "record_id": "flaws_cloudtrail:0000222:06c9c932-2843-48ae-89be-5c1f8c5936f2", "row_index": 222, "timestamp": "2019-05-30T08:34:58Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c9c932-2843-48ae-89be-5c1f8c5936f2", "eventTime": "2019-05-30T08:34:58Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c9c932-2843-48ae-89be-5c1f8c5936f2", "record_id": "flaws_cloudtrail:0000223:06c9c932-2843-48ae-89be-5c1f8c5936f2", "row_index": 223, "timestamp": "2019-05-30T08:34:58Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c9c932-2843-48ae-89be-5c1f8c5936f2", "eventTime": "2019-05-30T08:34:58Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392573cb-38f2-4245-b1f1-4a29a27bc2f9", "record_id": "flaws_cloudtrail:0000224:392573cb-38f2-4245-b1f1-4a29a27bc2f9", "row_index": 224, "timestamp": "2019-05-30T08:35:04Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392573cb-38f2-4245-b1f1-4a29a27bc2f9", "eventTime": "2019-05-30T08:35:04Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392573cb-38f2-4245-b1f1-4a29a27bc2f9", "record_id": "flaws_cloudtrail:0000225:392573cb-38f2-4245-b1f1-4a29a27bc2f9", "row_index": 225, "timestamp": "2019-05-30T08:35:04Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392573cb-38f2-4245-b1f1-4a29a27bc2f9", "eventTime": "2019-05-30T08:35:04Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "record_id": "flaws_cloudtrail:0000226:9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "row_index": 226, "timestamp": "2019-05-30T08:35:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "eventTime": "2019-05-30T08:35:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "record_id": "flaws_cloudtrail:0000227:9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "row_index": 227, "timestamp": "2019-05-30T08:35:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9f6a16-32e0-49f3-8efd-7f8167e8fe7c", "eventTime": "2019-05-30T08:35:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43633a9-6926-4307-aecc-59124a279abf", "record_id": "flaws_cloudtrail:0000228:43633a9-6926-4307-aecc-59124a279abf", "row_index": 228, "timestamp": "2019-05-30T08:35:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43633a9-6926-4307-aecc-59124a279abf", "eventTime": "2019-05-30T08:35:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43633a9-6926-4307-aecc-59124a279abf", "record_id": "flaws_cloudtrail:0000229:43633a9-6926-4307-aecc-59124a279abf", "row_index": 229, "timestamp": "2019-05-30T08:35:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43633a9-6926-4307-aecc-59124a279abf", "eventTime": "2019-05-30T08:35:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0468be0-3bd9-4193-89c4-76a7941d0357", "record_id": "flaws_cloudtrail:0000230:d0468be0-3bd9-4193-89c4-76a7941d0357", "row_index": 230, "timestamp": "2019-05-30T08:35:28Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0468be0-3bd9-4193-89c4-76a7941d0357", "eventTime": "2019-05-30T08:35:28Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0468be0-3bd9-4193-89c4-76a7941d0357", "record_id": "flaws_cloudtrail:0000231:d0468be0-3bd9-4193-89c4-76a7941d0357", "row_index": 231, "timestamp": "2019-05-30T08:35:28Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0468be0-3bd9-4193-89c4-76a7941d0357", "eventTime": "2019-05-30T08:35:28Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "record_id": "flaws_cloudtrail:0000232:a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "row_index": 232, "timestamp": "2019-05-30T08:35:29Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "eventTime": "2019-05-30T08:35:29Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "record_id": "flaws_cloudtrail:0000233:a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "row_index": 233, "timestamp": "2019-05-30T08:35:29Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0fe8030-ed6b-46ea-88a9-424b1e7a20b3", "eventTime": "2019-05-30T08:35:29Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c6e8414-989c-447c-9da9-89266a1dc2f0", "record_id": "flaws_cloudtrail:0000234:9c6e8414-989c-447c-9da9-89266a1dc2f0", "row_index": 234, "timestamp": "2019-05-30T08:35:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754-archive"], "raw_record_size_bytes": 648, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c6e8414-989c-447c-9da9-89266a1dc2f0", "eventTime": "2019-05-30T08:35:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8e6749-4cef-406f-8d86-6d14b2b3c271", "record_id": "flaws_cloudtrail:0000235:eb8e6749-4cef-406f-8d86-6d14b2b3c271", "row_index": 235, "timestamp": "2019-05-30T08:35:31Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8e6749-4cef-406f-8d86-6d14b2b3c271", "eventTime": "2019-05-30T08:35:31Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8e6749-4cef-406f-8d86-6d14b2b3c271", "record_id": "flaws_cloudtrail:0000236:eb8e6749-4cef-406f-8d86-6d14b2b3c271", "row_index": 236, "timestamp": "2019-05-30T08:35:31Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8e6749-4cef-406f-8d86-6d14b2b3c271", "eventTime": "2019-05-30T08:35:31Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efa995fe-e9d6-4c43-8381-01b7cc4b4653", "record_id": "flaws_cloudtrail:0000237:efa995fe-e9d6-4c43-8381-01b7cc4b4653", "row_index": 237, "timestamp": "2019-05-30T08:35:32Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efa995fe-e9d6-4c43-8381-01b7cc4b4653", "eventTime": "2019-05-30T08:35:32Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f46906b-fcb7-44b9-8a49-22e07f626223", "record_id": "flaws_cloudtrail:0000238:2f46906b-fcb7-44b9-8a49-22e07f626223", "row_index": 238, "timestamp": "2019-05-30T08:35:32Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f46906b-fcb7-44b9-8a49-22e07f626223", "eventTime": "2019-05-30T08:35:32Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efa995fe-e9d6-4c43-8381-01b7cc4b4653", "record_id": "flaws_cloudtrail:0000239:efa995fe-e9d6-4c43-8381-01b7cc4b4653", "row_index": 239, "timestamp": "2019-05-30T08:35:32Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efa995fe-e9d6-4c43-8381-01b7cc4b4653", "eventTime": "2019-05-30T08:35:32Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f46906b-fcb7-44b9-8a49-22e07f626223", "record_id": "flaws_cloudtrail:0000240:2f46906b-fcb7-44b9-8a49-22e07f626223", "row_index": 240, "timestamp": "2019-05-30T08:35:32Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f46906b-fcb7-44b9-8a49-22e07f626223", "eventTime": "2019-05-30T08:35:32Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e446be6-bcf4-496b-910f-22b7a54e7c63", "record_id": "flaws_cloudtrail:0000241:6e446be6-bcf4-496b-910f-22b7a54e7c63", "row_index": 241, "timestamp": "2019-05-30T08:35:33Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e446be6-bcf4-496b-910f-22b7a54e7c63", "eventTime": "2019-05-30T08:35:33Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e446be6-bcf4-496b-910f-22b7a54e7c63", "record_id": "flaws_cloudtrail:0000242:6e446be6-bcf4-496b-910f-22b7a54e7c63", "row_index": 242, "timestamp": "2019-05-30T08:35:33Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e446be6-bcf4-496b-910f-22b7a54e7c63", "eventTime": "2019-05-30T08:35:33Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "record_id": "flaws_cloudtrail:0000243:0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "row_index": 243, "timestamp": "2019-05-30T08:35:34Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "eventTime": "2019-05-30T08:35:34Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "record_id": "flaws_cloudtrail:0000244:0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "row_index": 244, "timestamp": "2019-05-30T08:35:34Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa42a0d-5423-44cd-ad6c-dbd09fe723ac", "eventTime": "2019-05-30T08:35:34Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ea854f-a31f-44da-982b-55e9710756cd", "record_id": "flaws_cloudtrail:0000245:b6ea854f-a31f-44da-982b-55e9710756cd", "row_index": 245, "timestamp": "2019-05-30T08:35:36Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ea854f-a31f-44da-982b-55e9710756cd", "eventTime": "2019-05-30T08:35:36Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ea854f-a31f-44da-982b-55e9710756cd", "record_id": "flaws_cloudtrail:0000246:b6ea854f-a31f-44da-982b-55e9710756cd", "row_index": 246, "timestamp": "2019-05-30T08:35:36Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ea854f-a31f-44da-982b-55e9710756cd", "eventTime": "2019-05-30T08:35:36Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49d826b-0d86-46e6-b35a-44057b999361", "record_id": "flaws_cloudtrail:0000247:b49d826b-0d86-46e6-b35a-44057b999361", "row_index": 247, "timestamp": "2019-05-30T08:35:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49d826b-0d86-46e6-b35a-44057b999361", "eventTime": "2019-05-30T08:35:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "record_id": "flaws_cloudtrail:0000248:3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "row_index": 248, "timestamp": "2019-05-30T08:35:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "eventTime": "2019-05-30T08:35:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49d826b-0d86-46e6-b35a-44057b999361", "record_id": "flaws_cloudtrail:0000249:b49d826b-0d86-46e6-b35a-44057b999361", "row_index": 249, "timestamp": "2019-05-30T08:35:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49d826b-0d86-46e6-b35a-44057b999361", "eventTime": "2019-05-30T08:35:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "record_id": "flaws_cloudtrail:0000250:3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "row_index": 250, "timestamp": "2019-05-30T08:35:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4b8405-c1c0-4a10-90e0-a6208ce7f5c1", "eventTime": "2019-05-30T08:35:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d2461c-a8b2-456c-b3ec-32207fce9565", "record_id": "flaws_cloudtrail:0000251:51d2461c-a8b2-456c-b3ec-32207fce9565", "row_index": 251, "timestamp": "2019-05-30T08:35:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d2461c-a8b2-456c-b3ec-32207fce9565", "eventTime": "2019-05-30T08:35:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d2461c-a8b2-456c-b3ec-32207fce9565", "record_id": "flaws_cloudtrail:0000252:51d2461c-a8b2-456c-b3ec-32207fce9565", "row_index": 252, "timestamp": "2019-05-30T08:35:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d2461c-a8b2-456c-b3ec-32207fce9565", "eventTime": "2019-05-30T08:35:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa813f9-f584-49cf-853e-a57fdad9d78f", "record_id": "flaws_cloudtrail:0000253:ffa813f9-f584-49cf-853e-a57fdad9d78f", "row_index": 253, "timestamp": "2019-05-30T08:35:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa813f9-f584-49cf-853e-a57fdad9d78f", "eventTime": "2019-05-30T08:35:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a359aa-8afa-4898-8197-85492f5a23a6", "record_id": "flaws_cloudtrail:0000254:d5a359aa-8afa-4898-8197-85492f5a23a6", "row_index": 254, "timestamp": "2019-05-30T08:35:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a359aa-8afa-4898-8197-85492f5a23a6", "eventTime": "2019-05-30T08:35:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa813f9-f584-49cf-853e-a57fdad9d78f", "record_id": "flaws_cloudtrail:0000255:ffa813f9-f584-49cf-853e-a57fdad9d78f", "row_index": 255, "timestamp": "2019-05-30T08:35:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa813f9-f584-49cf-853e-a57fdad9d78f", "eventTime": "2019-05-30T08:35:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a359aa-8afa-4898-8197-85492f5a23a6", "record_id": "flaws_cloudtrail:0000256:d5a359aa-8afa-4898-8197-85492f5a23a6", "row_index": 256, "timestamp": "2019-05-30T08:35:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a359aa-8afa-4898-8197-85492f5a23a6", "eventTime": "2019-05-30T08:35:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03299b-2d3a-4b2b-b656-aa95cf05d869", "record_id": "flaws_cloudtrail:0000257:03299b-2d3a-4b2b-b656-aa95cf05d869", "row_index": 257, "timestamp": "2019-05-30T08:35:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03299b-2d3a-4b2b-b656-aa95cf05d869", "eventTime": "2019-05-30T08:35:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03299b-2d3a-4b2b-b656-aa95cf05d869", "record_id": "flaws_cloudtrail:0000258:03299b-2d3a-4b2b-b656-aa95cf05d869", "row_index": 258, "timestamp": "2019-05-30T08:35:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03299b-2d3a-4b2b-b656-aa95cf05d869", "eventTime": "2019-05-30T08:35:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "record_id": "flaws_cloudtrail:0000259:e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "row_index": 259, "timestamp": "2019-05-30T08:35:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "eventTime": "2019-05-30T08:35:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "record_id": "flaws_cloudtrail:0000260:e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "row_index": 260, "timestamp": "2019-05-30T08:35:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e0da9f-9079-4a5a-92d8-301820fbbc5e1", "eventTime": "2019-05-30T08:35:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f286b5-8464-4019-b90b-3deb084e7868", "record_id": "flaws_cloudtrail:0000261:d4f286b5-8464-4019-b90b-3deb084e7868", "row_index": 261, "timestamp": "2019-05-30T08:35:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f286b5-8464-4019-b90b-3deb084e7868", "eventTime": "2019-05-30T08:35:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f286b5-8464-4019-b90b-3deb084e7868", "record_id": "flaws_cloudtrail:0000262:d4f286b5-8464-4019-b90b-3deb084e7868", "row_index": 262, "timestamp": "2019-05-30T08:35:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f286b5-8464-4019-b90b-3deb084e7868", "eventTime": "2019-05-30T08:35:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cce996d-3646-4e40-ac7c-3a54388af989", "record_id": "flaws_cloudtrail:0000263:8cce996d-3646-4e40-ac7c-3a54388af989", "row_index": 263, "timestamp": "2019-05-30T08:35:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cce996d-3646-4e40-ac7c-3a54388af989", "eventTime": "2019-05-30T08:35:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cce996d-3646-4e40-ac7c-3a54388af989", "record_id": "flaws_cloudtrail:0000264:8cce996d-3646-4e40-ac7c-3a54388af989", "row_index": 264, "timestamp": "2019-05-30T08:35:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cce996d-3646-4e40-ac7c-3a54388af989", "eventTime": "2019-05-30T08:35:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "record_id": "flaws_cloudtrail:0000265:6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "row_index": 265, "timestamp": "2019-05-30T08:35:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "eventTime": "2019-05-30T08:35:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "record_id": "flaws_cloudtrail:0000266:6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "row_index": 266, "timestamp": "2019-05-30T08:35:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fdd89e8-3f09-4abf-9ddb-a2eaf943dfa0", "eventTime": "2019-05-30T08:35:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da6d6d67-c298-4047-a4e5-b65d77c387f1", "record_id": "flaws_cloudtrail:0000267:da6d6d67-c298-4047-a4e5-b65d77c387f1", "row_index": 267, "timestamp": "2019-05-30T08:35:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da6d6d67-c298-4047-a4e5-b65d77c387f1", "eventTime": "2019-05-30T08:35:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da6d6d67-c298-4047-a4e5-b65d77c387f1", "record_id": "flaws_cloudtrail:0000268:da6d6d67-c298-4047-a4e5-b65d77c387f1", "row_index": 268, "timestamp": "2019-05-30T08:35:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da6d6d67-c298-4047-a4e5-b65d77c387f1", "eventTime": "2019-05-30T08:35:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a06763e-41f0-4710-b87b-ff791a7ff9b6", "record_id": "flaws_cloudtrail:0000269:7a06763e-41f0-4710-b87b-ff791a7ff9b6", "row_index": 269, "timestamp": "2019-05-30T08:35:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a06763e-41f0-4710-b87b-ff791a7ff9b6", "eventTime": "2019-05-30T08:35:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a06763e-41f0-4710-b87b-ff791a7ff9b6", "record_id": "flaws_cloudtrail:0000270:7a06763e-41f0-4710-b87b-ff791a7ff9b6", "row_index": 270, "timestamp": "2019-05-30T08:35:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a06763e-41f0-4710-b87b-ff791a7ff9b6", "eventTime": "2019-05-30T08:35:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60b1601b-4a24-4fc5-8a7e-c570140162ff", "record_id": "flaws_cloudtrail:0000271:60b1601b-4a24-4fc5-8a7e-c570140162ff", "row_index": 271, "timestamp": "2019-05-30T08:35:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60b1601b-4a24-4fc5-8a7e-c570140162ff", "eventTime": "2019-05-30T08:35:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60b1601b-4a24-4fc5-8a7e-c570140162ff", "record_id": "flaws_cloudtrail:0000272:60b1601b-4a24-4fc5-8a7e-c570140162ff", "row_index": 272, "timestamp": "2019-05-30T08:35:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60b1601b-4a24-4fc5-8a7e-c570140162ff", "eventTime": "2019-05-30T08:35:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4048d67-9f24-476f-91fb-bca7809739e4", "record_id": "flaws_cloudtrail:0000273:c4048d67-9f24-476f-91fb-bca7809739e4", "row_index": 273, "timestamp": "2019-05-30T08:35:50Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4048d67-9f24-476f-91fb-bca7809739e4", "eventTime": "2019-05-30T08:35:50Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4048d67-9f24-476f-91fb-bca7809739e4", "record_id": "flaws_cloudtrail:0000274:c4048d67-9f24-476f-91fb-bca7809739e4", "row_index": 274, "timestamp": "2019-05-30T08:35:50Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4048d67-9f24-476f-91fb-bca7809739e4", "eventTime": "2019-05-30T08:35:50Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09735-6a68-4cc9-b0fc-58097f0834d5", "record_id": "flaws_cloudtrail:0000275:09735-6a68-4cc9-b0fc-58097f0834d5", "row_index": 275, "timestamp": "2019-05-30T08:35:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09735-6a68-4cc9-b0fc-58097f0834d5", "eventTime": "2019-05-30T08:35:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09735-6a68-4cc9-b0fc-58097f0834d5", "record_id": "flaws_cloudtrail:0000276:09735-6a68-4cc9-b0fc-58097f0834d5", "row_index": 276, "timestamp": "2019-05-30T08:35:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09735-6a68-4cc9-b0fc-58097f0834d5", "eventTime": "2019-05-30T08:35:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a007a995-37d6-4d5e-a354-6a97f02a2592", "record_id": "flaws_cloudtrail:0000277:a007a995-37d6-4d5e-a354-6a97f02a2592", "row_index": 277, "timestamp": "2019-05-30T08:35:52Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a007a995-37d6-4d5e-a354-6a97f02a2592", "eventTime": "2019-05-30T08:35:52Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a007a995-37d6-4d5e-a354-6a97f02a2592", "record_id": "flaws_cloudtrail:0000278:a007a995-37d6-4d5e-a354-6a97f02a2592", "row_index": 278, "timestamp": "2019-05-30T08:35:52Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a007a995-37d6-4d5e-a354-6a97f02a2592", "eventTime": "2019-05-30T08:35:52Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a32d758-d255-46cf-80ec-8bca9d9efc42", "record_id": "flaws_cloudtrail:0000279:8a32d758-d255-46cf-80ec-8bca9d9efc42", "row_index": 279, "timestamp": "2019-05-30T08:35:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a32d758-d255-46cf-80ec-8bca9d9efc42", "eventTime": "2019-05-30T08:35:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a32d758-d255-46cf-80ec-8bca9d9efc42", "record_id": "flaws_cloudtrail:0000280:8a32d758-d255-46cf-80ec-8bca9d9efc42", "row_index": 280, "timestamp": "2019-05-30T08:35:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a32d758-d255-46cf-80ec-8bca9d9efc42", "eventTime": "2019-05-30T08:35:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ca5c89-21d6-49b7-b7a1-8aed176060", "record_id": "flaws_cloudtrail:0000281:71ca5c89-21d6-49b7-b7a1-8aed176060", "row_index": 281, "timestamp": "2019-05-30T08:35:54Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 888, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ca5c89-21d6-49b7-b7a1-8aed176060", "eventTime": "2019-05-30T08:35:54Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "TrailNotFoundException", "errorMessage": "Unknown trail: arn:aws:cloudtrail:us-east-1:811596193553:trail/summitroute-logs for the user: 811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ca5c89-21d6-49b7-b7a1-8aed176060", "record_id": "flaws_cloudtrail:0000282:71ca5c89-21d6-49b7-b7a1-8aed176060", "row_index": 282, "timestamp": "2019-05-30T08:35:54Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 888, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ca5c89-21d6-49b7-b7a1-8aed176060", "eventTime": "2019-05-30T08:35:54Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "TrailNotFoundException", "errorMessage": "Unknown trail: arn:aws:cloudtrail:us-east-1:811596193553:trail/summitroute-logs for the user: 811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "record_id": "flaws_cloudtrail:0000283:8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "row_index": 283, "timestamp": "2019-05-30T08:35:55Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "eventTime": "2019-05-30T08:35:55Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "record_id": "flaws_cloudtrail:0000284:8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "row_index": 284, "timestamp": "2019-05-30T08:35:55Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a03d723-b838-4d90-b0db-ccf5fdf8f3f7", "eventTime": "2019-05-30T08:35:55Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "record_id": "flaws_cloudtrail:0000285:cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "row_index": 285, "timestamp": "2019-05-30T08:37:02Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "eventTime": "2019-05-30T08:37:02Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "record_id": "flaws_cloudtrail:0000286:cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "row_index": 286, "timestamp": "2019-05-30T08:37:02Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cad6ef0e-43ce-4f0a-aaf6-68b62ae31679", "eventTime": "2019-05-30T08:37:02Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "record_id": "flaws_cloudtrail:0000287:4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "row_index": 287, "timestamp": "2019-05-30T08:37:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "eventTime": "2019-05-30T08:37:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "record_id": "flaws_cloudtrail:0000288:4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "row_index": 288, "timestamp": "2019-05-30T08:37:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b710e78-0c3e-48f6-b990-3dc6c6acaffb", "eventTime": "2019-05-30T08:37:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "822ab9ee-0815-49a2-b7e1-591464e377eb7", "record_id": "flaws_cloudtrail:0000289:822ab9ee-0815-49a2-b7e1-591464e377eb7", "row_index": 289, "timestamp": "2019-05-30T08:37:06Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "822ab9ee-0815-49a2-b7e1-591464e377eb7", "eventTime": "2019-05-30T08:37:06Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "822ab9ee-0815-49a2-b7e1-591464e377eb7", "record_id": "flaws_cloudtrail:0000290:822ab9ee-0815-49a2-b7e1-591464e377eb7", "row_index": 290, "timestamp": "2019-05-30T08:37:06Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "822ab9ee-0815-49a2-b7e1-591464e377eb7", "eventTime": "2019-05-30T08:37:06Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "record_id": "flaws_cloudtrail:0000291:8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "row_index": 291, "timestamp": "2019-05-30T08:37:07Z", "event_type": "DescribeOrganization", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "eventTime": "2019-05-30T08:37:07Z", "eventName": "DescribeOrganization", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: organizations:DescribeOrganization on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "record_id": "flaws_cloudtrail:0000292:8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "row_index": 292, "timestamp": "2019-05-30T08:37:07Z", "event_type": "DescribeOrganization", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc5516e-e9a1-4c63-b34c-bd1bd3bccc7d", "eventTime": "2019-05-30T08:37:07Z", "eventName": "DescribeOrganization", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: organizations:DescribeOrganization on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aea318623-4163-4ccb-ba71-899338fbfaabf", "record_id": "flaws_cloudtrail:0000293:aea318623-4163-4ccb-ba71-899338fbfaabf", "row_index": 293, "timestamp": "2019-05-30T08:37:38Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aea318623-4163-4ccb-ba71-899338fbfaabf", "eventTime": "2019-05-30T08:37:38Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aea318623-4163-4ccb-ba71-899338fbfaabf", "record_id": "flaws_cloudtrail:0000294:aea318623-4163-4ccb-ba71-899338fbfaabf", "row_index": 294, "timestamp": "2019-05-30T08:37:38Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aea318623-4163-4ccb-ba71-899338fbfaabf", "eventTime": "2019-05-30T08:37:38Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea088071-fe7b-41e2-bd48-aee1f53da5d9", "record_id": "flaws_cloudtrail:0000295:ea088071-fe7b-41e2-bd48-aee1f53da5d9", "row_index": 295, "timestamp": "2019-05-30T08:37:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea088071-fe7b-41e2-bd48-aee1f53da5d9", "eventTime": "2019-05-30T08:37:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890653f-6587-411a-9c51-e62c8da63921", "record_id": "flaws_cloudtrail:0000296:890653f-6587-411a-9c51-e62c8da63921", "row_index": 296, "timestamp": "2019-05-30T08:37:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890653f-6587-411a-9c51-e62c8da63921", "eventTime": "2019-05-30T08:37:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea088071-fe7b-41e2-bd48-aee1f53da5d9", "record_id": "flaws_cloudtrail:0000297:ea088071-fe7b-41e2-bd48-aee1f53da5d9", "row_index": 297, "timestamp": "2019-05-30T08:37:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea088071-fe7b-41e2-bd48-aee1f53da5d9", "eventTime": "2019-05-30T08:37:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890653f-6587-411a-9c51-e62c8da63921", "record_id": "flaws_cloudtrail:0000298:890653f-6587-411a-9c51-e62c8da63921", "row_index": 298, "timestamp": "2019-05-30T08:37:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890653f-6587-411a-9c51-e62c8da63921", "eventTime": "2019-05-30T08:37:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372aadc8-64db-47a1-bcc7-fc8714bfd03c", "record_id": "flaws_cloudtrail:0000299:372aadc8-64db-47a1-bcc7-fc8714bfd03c", "row_index": 299, "timestamp": "2019-05-30T08:37:40Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372aadc8-64db-47a1-bcc7-fc8714bfd03c", "eventTime": "2019-05-30T08:37:40Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372aadc8-64db-47a1-bcc7-fc8714bfd03c", "record_id": "flaws_cloudtrail:0000300:372aadc8-64db-47a1-bcc7-fc8714bfd03c", "row_index": 300, "timestamp": "2019-05-30T08:37:40Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372aadc8-64db-47a1-bcc7-fc8714bfd03c", "eventTime": "2019-05-30T08:37:40Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d286633-d100-410d-9d92-9961bc9fb773", "record_id": "flaws_cloudtrail:0000301:d286633-d100-410d-9d92-9961bc9fb773", "row_index": 301, "timestamp": "2019-05-30T08:37:41Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d286633-d100-410d-9d92-9961bc9fb773", "eventTime": "2019-05-30T08:37:41Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d286633-d100-410d-9d92-9961bc9fb773", "record_id": "flaws_cloudtrail:0000302:d286633-d100-410d-9d92-9961bc9fb773", "row_index": 302, "timestamp": "2019-05-30T08:37:41Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d286633-d100-410d-9d92-9961bc9fb773", "eventTime": "2019-05-30T08:37:41Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af976f2-bb86-4722-9951-9f82b4e27a90", "record_id": "flaws_cloudtrail:0000303:9af976f2-bb86-4722-9951-9f82b4e27a90", "row_index": 303, "timestamp": "2019-05-30T08:37:42Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af976f2-bb86-4722-9951-9f82b4e27a90", "eventTime": "2019-05-30T08:37:42Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af976f2-bb86-4722-9951-9f82b4e27a90", "record_id": "flaws_cloudtrail:0000304:9af976f2-bb86-4722-9951-9f82b4e27a90", "row_index": 304, "timestamp": "2019-05-30T08:37:42Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af976f2-bb86-4722-9951-9f82b4e27a90", "eventTime": "2019-05-30T08:37:42Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b90fe08-faca-4a19-aac7-614a322a52d1", "record_id": "flaws_cloudtrail:0000305:2b90fe08-faca-4a19-aac7-614a322a52d1", "row_index": 305, "timestamp": "2019-05-30T08:37:43Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b90fe08-faca-4a19-aac7-614a322a52d1", "eventTime": "2019-05-30T08:37:43Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b90fe08-faca-4a19-aac7-614a322a52d1", "record_id": "flaws_cloudtrail:0000306:2b90fe08-faca-4a19-aac7-614a322a52d1", "row_index": 306, "timestamp": "2019-05-30T08:37:43Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b90fe08-faca-4a19-aac7-614a322a52d1", "eventTime": "2019-05-30T08:37:43Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854a5a9a-74f3-42a2-96e4-7d60e81e041f", "record_id": "flaws_cloudtrail:0000307:854a5a9a-74f3-42a2-96e4-7d60e81e041f", "row_index": 307, "timestamp": "2019-05-30T08:37:44Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854a5a9a-74f3-42a2-96e4-7d60e81e041f", "eventTime": "2019-05-30T08:37:44Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854a5a9a-74f3-42a2-96e4-7d60e81e041f", "record_id": "flaws_cloudtrail:0000308:854a5a9a-74f3-42a2-96e4-7d60e81e041f", "row_index": 308, "timestamp": "2019-05-30T08:37:44Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854a5a9a-74f3-42a2-96e4-7d60e81e041f", "eventTime": "2019-05-30T08:37:44Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616076-5c63-439c-8fd0-56718b26a", "record_id": "flaws_cloudtrail:0000309:616076-5c63-439c-8fd0-56718b26a", "row_index": 309, "timestamp": "2019-05-30T08:37:45Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616076-5c63-439c-8fd0-56718b26a", "eventTime": "2019-05-30T08:37:45Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616076-5c63-439c-8fd0-56718b26a", "record_id": "flaws_cloudtrail:0000310:616076-5c63-439c-8fd0-56718b26a", "row_index": 310, "timestamp": "2019-05-30T08:37:45Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616076-5c63-439c-8fd0-56718b26a", "eventTime": "2019-05-30T08:37:45Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccf7800-82ed-4b3a-9bd3-96d80721b4", "record_id": "flaws_cloudtrail:0000311:cccf7800-82ed-4b3a-9bd3-96d80721b4", "row_index": 311, "timestamp": "2019-05-30T08:37:46Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccf7800-82ed-4b3a-9bd3-96d80721b4", "eventTime": "2019-05-30T08:37:46Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccf7800-82ed-4b3a-9bd3-96d80721b4", "record_id": "flaws_cloudtrail:0000312:cccf7800-82ed-4b3a-9bd3-96d80721b4", "row_index": 312, "timestamp": "2019-05-30T08:37:46Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccf7800-82ed-4b3a-9bd3-96d80721b4", "eventTime": "2019-05-30T08:37:46Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a48895c-cf58-4f9b-9505-c8d682311deb7", "record_id": "flaws_cloudtrail:0000313:2a48895c-cf58-4f9b-9505-c8d682311deb7", "row_index": 313, "timestamp": "2019-05-30T08:37:47Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a48895c-cf58-4f9b-9505-c8d682311deb7", "eventTime": "2019-05-30T08:37:47Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a48895c-cf58-4f9b-9505-c8d682311deb7", "record_id": "flaws_cloudtrail:0000314:2a48895c-cf58-4f9b-9505-c8d682311deb7", "row_index": 314, "timestamp": "2019-05-30T08:37:47Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a48895c-cf58-4f9b-9505-c8d682311deb7", "eventTime": "2019-05-30T08:37:47Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "record_id": "flaws_cloudtrail:0000315:158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "row_index": 315, "timestamp": "2019-05-30T08:37:48Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "eventTime": "2019-05-30T08:37:48Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "record_id": "flaws_cloudtrail:0000316:48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "row_index": 316, "timestamp": "2019-05-30T08:37:48Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "eventTime": "2019-05-30T08:37:48Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "record_id": "flaws_cloudtrail:0000317:158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "row_index": 317, "timestamp": "2019-05-30T08:37:48Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158cd0af-a6bf-4070-bdcd-cd0b2a53d0c6", "eventTime": "2019-05-30T08:37:48Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "record_id": "flaws_cloudtrail:0000318:48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "row_index": 318, "timestamp": "2019-05-30T08:37:48Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48dcf3c1-7190-48b8-a600-b9cf886bdaf0", "eventTime": "2019-05-30T08:37:48Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfeb525-e688-4543-96fb-3fc27944f90e", "record_id": "flaws_cloudtrail:0000319:edfeb525-e688-4543-96fb-3fc27944f90e", "row_index": 319, "timestamp": "2019-05-30T08:37:49Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfeb525-e688-4543-96fb-3fc27944f90e", "eventTime": "2019-05-30T08:37:49Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfeb525-e688-4543-96fb-3fc27944f90e", "record_id": "flaws_cloudtrail:0000320:edfeb525-e688-4543-96fb-3fc27944f90e", "row_index": 320, "timestamp": "2019-05-30T08:37:49Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfeb525-e688-4543-96fb-3fc27944f90e", "eventTime": "2019-05-30T08:37:49Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925c8339-7611-4927-83ae-ad36187cb8a2", "record_id": "flaws_cloudtrail:0000321:925c8339-7611-4927-83ae-ad36187cb8a2", "row_index": 321, "timestamp": "2019-05-30T08:37:50Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925c8339-7611-4927-83ae-ad36187cb8a2", "eventTime": "2019-05-30T08:37:50Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"assignmentStatus": "Assigned"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925c8339-7611-4927-83ae-ad36187cb8a2", "record_id": "flaws_cloudtrail:0000322:925c8339-7611-4927-83ae-ad36187cb8a2", "row_index": 322, "timestamp": "2019-05-30T08:37:50Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925c8339-7611-4927-83ae-ad36187cb8a2", "eventTime": "2019-05-30T08:37:50Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"assignmentStatus": "Assigned"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "809590-4b32-4a3c-b7c7-eca71f53436e", "record_id": "flaws_cloudtrail:0000323:809590-4b32-4a3c-b7c7-eca71f53436e", "row_index": 323, "timestamp": "2019-05-30T08:37:51Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "809590-4b32-4a3c-b7c7-eca71f53436e", "eventTime": "2019-05-30T08:37:51Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "809590-4b32-4a3c-b7c7-eca71f53436e", "record_id": "flaws_cloudtrail:0000324:809590-4b32-4a3c-b7c7-eca71f53436e", "row_index": 324, "timestamp": "2019-05-30T08:37:51Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "809590-4b32-4a3c-b7c7-eca71f53436e", "eventTime": "2019-05-30T08:37:51Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "record_id": "flaws_cloudtrail:0000325:4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "row_index": 325, "timestamp": "2019-05-30T08:37:52Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "eventTime": "2019-05-30T08:37:52Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "record_id": "flaws_cloudtrail:0000326:4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "row_index": 326, "timestamp": "2019-05-30T08:37:52Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce92bf0-1cae-4e32-a5b8-92fae1dc7578", "eventTime": "2019-05-30T08:37:52Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "143db1e3-fd18-4b98-8471-402e04e2d935", "record_id": "flaws_cloudtrail:0000327:143db1e3-fd18-4b98-8471-402e04e2d935", "row_index": 327, "timestamp": "2019-05-30T08:37:53Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "143db1e3-fd18-4b98-8471-402e04e2d935", "eventTime": "2019-05-30T08:37:53Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "143db1e3-fd18-4b98-8471-402e04e2d935", "record_id": "flaws_cloudtrail:0000328:143db1e3-fd18-4b98-8471-402e04e2d935", "row_index": 328, "timestamp": "2019-05-30T08:37:53Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "143db1e3-fd18-4b98-8471-402e04e2d935", "eventTime": "2019-05-30T08:37:53Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aeb2bc6-06fc-4e1d-8296-37008e88", "record_id": "flaws_cloudtrail:0000329:1aeb2bc6-06fc-4e1d-8296-37008e88", "row_index": 329, "timestamp": "2019-05-30T08:37:54Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aeb2bc6-06fc-4e1d-8296-37008e88", "eventTime": "2019-05-30T08:37:54Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aeb2bc6-06fc-4e1d-8296-37008e88", "record_id": "flaws_cloudtrail:0000330:1aeb2bc6-06fc-4e1d-8296-37008e88", "row_index": 330, "timestamp": "2019-05-30T08:37:54Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aeb2bc6-06fc-4e1d-8296-37008e88", "eventTime": "2019-05-30T08:37:54Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5731aa4-a414-4525-8241-461a0a8d488f", "record_id": "flaws_cloudtrail:0000331:c5731aa4-a414-4525-8241-461a0a8d488f", "row_index": 331, "timestamp": "2019-05-30T08:37:55Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5731aa4-a414-4525-8241-461a0a8d488f", "eventTime": "2019-05-30T08:37:55Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5731aa4-a414-4525-8241-461a0a8d488f", "record_id": "flaws_cloudtrail:0000332:c5731aa4-a414-4525-8241-461a0a8d488f", "row_index": 332, "timestamp": "2019-05-30T08:37:55Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5731aa4-a414-4525-8241-461a0a8d488f", "eventTime": "2019-05-30T08:37:55Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "record_id": "flaws_cloudtrail:0000333:90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "row_index": 333, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce5f23e-563b-4291-9e6a-fcdb35197d93", "record_id": "flaws_cloudtrail:0000334:4ce5f23e-563b-4291-9e6a-fcdb35197d93", "row_index": 334, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce5f23e-563b-4291-9e6a-fcdb35197d93", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACYdhdEamt0Q9f1EjQRl769L2ApPQ0ZQ6hnIji1TmBuxaTRFAEm3x4yBCmKxrFUpTv9kiqnCVKQJb0s8tj6q9eI3Hr4azwiUZ9ymQ88CBFI1qg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "record_id": "flaws_cloudtrail:0000335:fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "row_index": 335, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAzq34pxOgDRXPU8YPWy8S5sq7AlBne4gcqdPllR0JFQL4h/H2BERnVRWIPNXhA15pwXwvYJ1vyruH83PuDRn7uabRmsdgx00PXwOkUQPloQMg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30fd8cee-c175-4000-bb15-de58099c988", "record_id": "flaws_cloudtrail:0000336:30fd8cee-c175-4000-bb15-de58099c988", "row_index": 336, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30fd8cee-c175-4000-bb15-de58099c988", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACWTdkilgwoXZVFK8sp7dEelY6PLTGggAWag6Iu+zzJq37H5p9ZK7ztu2nfrs+sU0ZS5qGtygYC+X2aDC/pbHy+7uf2wVoreZKf8dIslQ7yKsQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2337c511-2710-4834-9a6b-ed9cf368b7a8", "record_id": "flaws_cloudtrail:0000337:2337c511-2710-4834-9a6b-ed9cf368b7a8", "row_index": 337, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2337c511-2710-4834-9a6b-ed9cf368b7a8", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABsSv3TxZA0iXFSQ5LCdU6P5naP11c+buV3HzH29iErNqYmoxotvJRBJ204r2401WTkfxHSNGQ4Ud48DXL0xE6dY3KIuk5d2pfI7B+M9ZBiuoQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "record_id": "flaws_cloudtrail:0000338:90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "row_index": 338, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90412a2-b3c7-4a40-9fc0-8bd734901b6ec", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce5f23e-563b-4291-9e6a-fcdb35197d93", "record_id": "flaws_cloudtrail:0000339:4ce5f23e-563b-4291-9e6a-fcdb35197d93", "row_index": 339, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce5f23e-563b-4291-9e6a-fcdb35197d93", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACYdhdEamt0Q9f1EjQRl769L2ApPQ0ZQ6hnIji1TmBuxaTRFAEm3x4yBCmKxrFUpTv9kiqnCVKQJb0s8tj6q9eI3Hr4azwiUZ9ymQ88CBFI1qg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "record_id": "flaws_cloudtrail:0000340:fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "row_index": 340, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdeabfd1-cbf5-4a19-9e4a-88774a6b39e2", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAzq34pxOgDRXPU8YPWy8S5sq7AlBne4gcqdPllR0JFQL4h/H2BERnVRWIPNXhA15pwXwvYJ1vyruH83PuDRn7uabRmsdgx00PXwOkUQPloQMg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30fd8cee-c175-4000-bb15-de58099c988", "record_id": "flaws_cloudtrail:0000341:30fd8cee-c175-4000-bb15-de58099c988", "row_index": 341, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30fd8cee-c175-4000-bb15-de58099c988", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACWTdkilgwoXZVFK8sp7dEelY6PLTGggAWag6Iu+zzJq37H5p9ZK7ztu2nfrs+sU0ZS5qGtygYC+X2aDC/pbHy+7uf2wVoreZKf8dIslQ7yKsQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2337c511-2710-4834-9a6b-ed9cf368b7a8", "record_id": "flaws_cloudtrail:0000342:2337c511-2710-4834-9a6b-ed9cf368b7a8", "row_index": 342, "timestamp": "2019-05-30T08:37:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2337c511-2710-4834-9a6b-ed9cf368b7a8", "eventTime": "2019-05-30T08:37:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABsSv3TxZA0iXFSQ5LCdU6P5naP11c+buV3HzH29iErNqYmoxotvJRBJ204r2401WTkfxHSNGQ4Ud48DXL0xE6dY3KIuk5d2pfI7B+M9ZBiuoQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81767ce-f399-4098-8c4a-d8d3326c9609", "record_id": "flaws_cloudtrail:0000343:81767ce-f399-4098-8c4a-d8d3326c9609", "row_index": 343, "timestamp": "2019-05-30T08:37:57Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81767ce-f399-4098-8c4a-d8d3326c9609", "eventTime": "2019-05-30T08:37:57Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSSupportAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ebd151-4b13-4b38-a27d-ba06c61c1796", "record_id": "flaws_cloudtrail:0000344:b9ebd151-4b13-4b38-a27d-ba06c61c1796", "row_index": 344, "timestamp": "2019-05-30T08:37:57Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ebd151-4b13-4b38-a27d-ba06c61c1796", "eventTime": "2019-05-30T08:37:57Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACIc24lIcmwnPeXX9RqoznJFHYv5D+K9pfhG3ZlpaUsrXN0D6ofHaxiSiysN0vVNa9WvyzNkD/dLK8aZzMQC4VlOSkhKqRa12qFXg9MGuUoKwA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81767ce-f399-4098-8c4a-d8d3326c9609", "record_id": "flaws_cloudtrail:0000345:81767ce-f399-4098-8c4a-d8d3326c9609", "row_index": 345, "timestamp": "2019-05-30T08:37:57Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81767ce-f399-4098-8c4a-d8d3326c9609", "eventTime": "2019-05-30T08:37:57Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSSupportAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ebd151-4b13-4b38-a27d-ba06c61c1796", "record_id": "flaws_cloudtrail:0000346:b9ebd151-4b13-4b38-a27d-ba06c61c1796", "row_index": 346, "timestamp": "2019-05-30T08:37:57Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ebd151-4b13-4b38-a27d-ba06c61c1796", "eventTime": "2019-05-30T08:37:57Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACIc24lIcmwnPeXX9RqoznJFHYv5D+K9pfhG3ZlpaUsrXN0D6ofHaxiSiysN0vVNa9WvyzNkD/dLK8aZzMQC4VlOSkhKqRa12qFXg9MGuUoKwA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "record_id": "flaws_cloudtrail:0000347:9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "row_index": 347, "timestamp": "2019-05-30T08:37:58Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "eventTime": "2019-05-30T08:37:58Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "record_id": "flaws_cloudtrail:0000348:9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "row_index": 348, "timestamp": "2019-05-30T08:37:58Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5a5d8a-f1d3-4ec4-b097-57fda0aa3978", "eventTime": "2019-05-30T08:37:58Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf98798-e60b-4cf9-b216-5630cf30bb32", "record_id": "flaws_cloudtrail:0000349:bf98798-e60b-4cf9-b216-5630cf30bb32", "row_index": 349, "timestamp": "2019-05-30T08:37:59Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf98798-e60b-4cf9-b216-5630cf30bb32", "eventTime": "2019-05-30T08:37:59Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf98798-e60b-4cf9-b216-5630cf30bb32", "record_id": "flaws_cloudtrail:0000350:bf98798-e60b-4cf9-b216-5630cf30bb32", "row_index": 350, "timestamp": "2019-05-30T08:37:59Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf98798-e60b-4cf9-b216-5630cf30bb32", "eventTime": "2019-05-30T08:37:59Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef49b98c-35fb-405d-a81c-6bcf69b45573", "record_id": "flaws_cloudtrail:0000351:ef49b98c-35fb-405d-a81c-6bcf69b45573", "row_index": 351, "timestamp": "2019-05-30T08:38:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef49b98c-35fb-405d-a81c-6bcf69b45573", "eventTime": "2019-05-30T08:38:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef49b98c-35fb-405d-a81c-6bcf69b45573", "record_id": "flaws_cloudtrail:0000352:ef49b98c-35fb-405d-a81c-6bcf69b45573", "row_index": 352, "timestamp": "2019-05-30T08:38:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef49b98c-35fb-405d-a81c-6bcf69b45573", "eventTime": "2019-05-30T08:38:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "208ec6f8-395b-4994-9afc-0ffe2d06c286", "record_id": "flaws_cloudtrail:0000353:208ec6f8-395b-4994-9afc-0ffe2d06c286", "row_index": 353, "timestamp": "2019-05-30T08:38:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "208ec6f8-395b-4994-9afc-0ffe2d06c286", "eventTime": "2019-05-30T08:38:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "208ec6f8-395b-4994-9afc-0ffe2d06c286", "record_id": "flaws_cloudtrail:0000354:208ec6f8-395b-4994-9afc-0ffe2d06c286", "row_index": 354, "timestamp": "2019-05-30T08:38:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "208ec6f8-395b-4994-9afc-0ffe2d06c286", "eventTime": "2019-05-30T08:38:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4643b18b-ff19-440e-80fc-f143d63cd0ae", "record_id": "flaws_cloudtrail:0000355:4643b18b-ff19-440e-80fc-f143d63cd0ae", "row_index": 355, "timestamp": "2019-05-30T08:38:29Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 652, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4643b18b-ff19-440e-80fc-f143d63cd0ae", "eventTime": "2019-05-30T08:38:29Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "record_id": "flaws_cloudtrail:0000356:e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "row_index": 356, "timestamp": "2019-05-30T08:38:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "eventTime": "2019-05-30T08:38:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "record_id": "flaws_cloudtrail:0000357:e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "row_index": 357, "timestamp": "2019-05-30T08:38:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c38bc7-5df0-4841-9405-b9658ce8c6fb", "eventTime": "2019-05-30T08:38:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "record_id": "flaws_cloudtrail:0000358:921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "row_index": 358, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ceb1a7-290f-466f-840e-9ae69aae8886", "record_id": "flaws_cloudtrail:0000359:65ceb1a7-290f-466f-840e-9ae69aae8886", "row_index": 359, "timestamp": "2019-05-30T08:38:48Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ceb1a7-290f-466f-840e-9ae69aae8886", "eventTime": "2019-05-30T08:38:48Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a64a8f0b-605a-4d54-a824-51cafcfa9377", "record_id": "flaws_cloudtrail:0000360:a64a8f0b-605a-4d54-a824-51cafcfa9377", "row_index": 360, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a64a8f0b-605a-4d54-a824-51cafcfa9377", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e8a116-7692-46c4-b7a4-b93accfe7556", "record_id": "flaws_cloudtrail:0000361:95e8a116-7692-46c4-b7a4-b93accfe7556", "row_index": 361, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e8a116-7692-46c4-b7a4-b93accfe7556", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "record_id": "flaws_cloudtrail:0000362:921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "row_index": 362, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "921cda3e-c6b2-4fc4-95c3-bcb6dac6f801", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ceb1a7-290f-466f-840e-9ae69aae8886", "record_id": "flaws_cloudtrail:0000363:65ceb1a7-290f-466f-840e-9ae69aae8886", "row_index": 363, "timestamp": "2019-05-30T08:38:48Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ceb1a7-290f-466f-840e-9ae69aae8886", "eventTime": "2019-05-30T08:38:48Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a64a8f0b-605a-4d54-a824-51cafcfa9377", "record_id": "flaws_cloudtrail:0000364:a64a8f0b-605a-4d54-a824-51cafcfa9377", "row_index": 364, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a64a8f0b-605a-4d54-a824-51cafcfa9377", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e8a116-7692-46c4-b7a4-b93accfe7556", "record_id": "flaws_cloudtrail:0000365:95e8a116-7692-46c4-b7a4-b93accfe7556", "row_index": 365, "timestamp": "2019-05-30T08:38:48Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e8a116-7692-46c4-b7a4-b93accfe7556", "eventTime": "2019-05-30T08:38:48Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "record_id": "flaws_cloudtrail:0000366:c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "row_index": 366, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "448152e3-7498-437b-888d-3c4170ecc05c", "record_id": "flaws_cloudtrail:0000367:448152e3-7498-437b-888d-3c4170ecc05c", "row_index": 367, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "448152e3-7498-437b-888d-3c4170ecc05c", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d6b8b0-5a8a-4006-8145-032152381038", "record_id": "flaws_cloudtrail:0000368:94d6b8b0-5a8a-4006-8145-032152381038", "row_index": 368, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d6b8b0-5a8a-4006-8145-032152381038", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "record_id": "flaws_cloudtrail:0000369:4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "row_index": 369, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "record_id": "flaws_cloudtrail:0000370:c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "row_index": 370, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d38dc5-f9b1-4acb-ad22-b474f7aa04ad", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "448152e3-7498-437b-888d-3c4170ecc05c", "record_id": "flaws_cloudtrail:0000371:448152e3-7498-437b-888d-3c4170ecc05c", "row_index": 371, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "448152e3-7498-437b-888d-3c4170ecc05c", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d6b8b0-5a8a-4006-8145-032152381038", "record_id": "flaws_cloudtrail:0000372:94d6b8b0-5a8a-4006-8145-032152381038", "row_index": 372, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d6b8b0-5a8a-4006-8145-032152381038", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "record_id": "flaws_cloudtrail:0000373:4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "row_index": 373, "timestamp": "2019-05-30T08:38:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb65f2e-1947-4f20-a802-6b41fbdb7d2b", "eventTime": "2019-05-30T08:38:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2f49ed-db14-47b5-b421-1f2068ba2df7", "record_id": "flaws_cloudtrail:0000374:bc2f49ed-db14-47b5-b421-1f2068ba2df7", "row_index": 374, "timestamp": "2019-05-30T08:39:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2f49ed-db14-47b5-b421-1f2068ba2df7", "eventTime": "2019-05-30T08:39:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2f49ed-db14-47b5-b421-1f2068ba2df7", "record_id": "flaws_cloudtrail:0000375:bc2f49ed-db14-47b5-b421-1f2068ba2df7", "row_index": 375, "timestamp": "2019-05-30T08:39:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2f49ed-db14-47b5-b421-1f2068ba2df7", "eventTime": "2019-05-30T08:39:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbc1c73a-accf-4908-a531-9f9095b4fa43", "record_id": "flaws_cloudtrail:0000376:dbc1c73a-accf-4908-a531-9f9095b4fa43", "row_index": 376, "timestamp": "2019-05-30T08:39:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbc1c73a-accf-4908-a531-9f9095b4fa43", "eventTime": "2019-05-30T08:39:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbc1c73a-accf-4908-a531-9f9095b4fa43", "record_id": "flaws_cloudtrail:0000377:dbc1c73a-accf-4908-a531-9f9095b4fa43", "row_index": 377, "timestamp": "2019-05-30T08:39:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbc1c73a-accf-4908-a531-9f9095b4fa43", "eventTime": "2019-05-30T08:39:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7321be34-a0d7-48f7-a5bb-795182d6f283", "record_id": "flaws_cloudtrail:0000378:7321be34-a0d7-48f7-a5bb-795182d6f283", "row_index": 378, "timestamp": "2019-05-30T08:39:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7321be34-a0d7-48f7-a5bb-795182d6f283", "eventTime": "2019-05-30T08:39:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fddec7a-1f41-4ff1-bc39-17196d9", "record_id": "flaws_cloudtrail:0000379:6fddec7a-1f41-4ff1-bc39-17196d9", "row_index": 379, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fddec7a-1f41-4ff1-bc39-17196d9", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "record_id": "flaws_cloudtrail:0000380:040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "row_index": 380, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "record_id": "flaws_cloudtrail:0000381:d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "row_index": 381, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7321be34-a0d7-48f7-a5bb-795182d6f283", "record_id": "flaws_cloudtrail:0000382:7321be34-a0d7-48f7-a5bb-795182d6f283", "row_index": 382, "timestamp": "2019-05-30T08:39:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7321be34-a0d7-48f7-a5bb-795182d6f283", "eventTime": "2019-05-30T08:39:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fddec7a-1f41-4ff1-bc39-17196d9", "record_id": "flaws_cloudtrail:0000383:6fddec7a-1f41-4ff1-bc39-17196d9", "row_index": 383, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fddec7a-1f41-4ff1-bc39-17196d9", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "record_id": "flaws_cloudtrail:0000384:040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "row_index": 384, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "040a78eb-2c67-42ca-b8b6-c4a7f5539bdf", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "record_id": "flaws_cloudtrail:0000385:d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "row_index": 385, "timestamp": "2019-05-30T08:39:17Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8d1f3ac-364b-42b0-b1b0-9682cc9510a6", "eventTime": "2019-05-30T08:39:17Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2ea518a-254d-4c16-b404-3a485580c", "record_id": "flaws_cloudtrail:0000386:d2ea518a-254d-4c16-b404-3a485580c", "row_index": 386, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2ea518a-254d-4c16-b404-3a485580c", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be3e7bf-55b2-4e5f-adb1-93c395177b597", "record_id": "flaws_cloudtrail:0000387:6be3e7bf-55b2-4e5f-adb1-93c395177b597", "row_index": 387, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be3e7bf-55b2-4e5f-adb1-93c395177b597", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc171e00-6a01-4577-b5d6-20857f9626f5", "record_id": "flaws_cloudtrail:0000388:fc171e00-6a01-4577-b5d6-20857f9626f5", "row_index": 388, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc171e00-6a01-4577-b5d6-20857f9626f5", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f986bf-9179-4fa8-b501-aa51001f292", "record_id": "flaws_cloudtrail:0000389:d4f986bf-9179-4fa8-b501-aa51001f292", "row_index": 389, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f986bf-9179-4fa8-b501-aa51001f292", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2ea518a-254d-4c16-b404-3a485580c", "record_id": "flaws_cloudtrail:0000390:d2ea518a-254d-4c16-b404-3a485580c", "row_index": 390, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2ea518a-254d-4c16-b404-3a485580c", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be3e7bf-55b2-4e5f-adb1-93c395177b597", "record_id": "flaws_cloudtrail:0000391:6be3e7bf-55b2-4e5f-adb1-93c395177b597", "row_index": 391, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be3e7bf-55b2-4e5f-adb1-93c395177b597", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc171e00-6a01-4577-b5d6-20857f9626f5", "record_id": "flaws_cloudtrail:0000392:fc171e00-6a01-4577-b5d6-20857f9626f5", "row_index": 392, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc171e00-6a01-4577-b5d6-20857f9626f5", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f986bf-9179-4fa8-b501-aa51001f292", "record_id": "flaws_cloudtrail:0000393:d4f986bf-9179-4fa8-b501-aa51001f292", "row_index": 393, "timestamp": "2019-05-30T08:39:18Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f986bf-9179-4fa8-b501-aa51001f292", "eventTime": "2019-05-30T08:39:18Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359e9fb3-1e26-4b57-a793-bf92eeb7849d", "record_id": "flaws_cloudtrail:0000394:359e9fb3-1e26-4b57-a793-bf92eeb7849d", "row_index": 394, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359e9fb3-1e26-4b57-a793-bf92eeb7849d", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0712d466-7069-4e97-99a3-68151ee5f9", "record_id": "flaws_cloudtrail:0000395:0712d466-7069-4e97-99a3-68151ee5f9", "row_index": 395, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0712d466-7069-4e97-99a3-68151ee5f9", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca4040b-d806-4439-9d2c-1e13b27b3e81", "record_id": "flaws_cloudtrail:0000396:2ca4040b-d806-4439-9d2c-1e13b27b3e81", "row_index": 396, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca4040b-d806-4439-9d2c-1e13b27b3e81", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "record_id": "flaws_cloudtrail:0000397:9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "row_index": 397, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359e9fb3-1e26-4b57-a793-bf92eeb7849d", "record_id": "flaws_cloudtrail:0000398:359e9fb3-1e26-4b57-a793-bf92eeb7849d", "row_index": 398, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359e9fb3-1e26-4b57-a793-bf92eeb7849d", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0712d466-7069-4e97-99a3-68151ee5f9", "record_id": "flaws_cloudtrail:0000399:0712d466-7069-4e97-99a3-68151ee5f9", "row_index": 399, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0712d466-7069-4e97-99a3-68151ee5f9", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca4040b-d806-4439-9d2c-1e13b27b3e81", "record_id": "flaws_cloudtrail:0000400:2ca4040b-d806-4439-9d2c-1e13b27b3e81", "row_index": 400, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca4040b-d806-4439-9d2c-1e13b27b3e81", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "record_id": "flaws_cloudtrail:0000401:9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "row_index": 401, "timestamp": "2019-05-30T08:39:27Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ed4cbe8-e7e4-4303-bd56-3b5ae97b58d6", "eventTime": "2019-05-30T08:39:27Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d26e1af-acf4-4332-be22-dda264461dc1", "record_id": "flaws_cloudtrail:0000402:6d26e1af-acf4-4332-be22-dda264461dc1", "row_index": 402, "timestamp": "2019-05-30T08:40:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d26e1af-acf4-4332-be22-dda264461dc1", "eventTime": "2019-05-30T08:40:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d26e1af-acf4-4332-be22-dda264461dc1", "record_id": "flaws_cloudtrail:0000403:6d26e1af-acf4-4332-be22-dda264461dc1", "row_index": 403, "timestamp": "2019-05-30T08:40:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d26e1af-acf4-4332-be22-dda264461dc1", "eventTime": "2019-05-30T08:40:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "record_id": "flaws_cloudtrail:0000404:b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "row_index": 404, "timestamp": "2019-05-30T08:40:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "eventTime": "2019-05-30T08:40:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "record_id": "flaws_cloudtrail:0000405:b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "row_index": 405, "timestamp": "2019-05-30T08:40:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b308476a3-4729-44d3-b3c4-ddcfcb1fd8c0", "eventTime": "2019-05-30T08:40:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "record_id": "flaws_cloudtrail:0000406:a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "row_index": 406, "timestamp": "2019-05-30T08:40:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "eventTime": "2019-05-30T08:40:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "record_id": "flaws_cloudtrail:0000407:a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "row_index": 407, "timestamp": "2019-05-30T08:40:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c783382-b07f-49b6-98a3-ab6a1b86aa72", "eventTime": "2019-05-30T08:40:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "record_id": "flaws_cloudtrail:0000408:39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "row_index": 408, "timestamp": "2019-05-30T08:40:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "eventTime": "2019-05-30T08:40:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "record_id": "flaws_cloudtrail:0000409:39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "row_index": 409, "timestamp": "2019-05-30T08:40:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39429c1-5e07-4ff0-b73c-ce9e12b43bf9", "eventTime": "2019-05-30T08:40:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974038df6-409b-4ddf-a520-de3b31b6f332", "record_id": "flaws_cloudtrail:0000410:974038df6-409b-4ddf-a520-de3b31b6f332", "row_index": 410, "timestamp": "2019-05-30T08:40:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974038df6-409b-4ddf-a520-de3b31b6f332", "eventTime": "2019-05-30T08:40:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974038df6-409b-4ddf-a520-de3b31b6f332", "record_id": "flaws_cloudtrail:0000411:974038df6-409b-4ddf-a520-de3b31b6f332", "row_index": 411, "timestamp": "2019-05-30T08:40:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974038df6-409b-4ddf-a520-de3b31b6f332", "eventTime": "2019-05-30T08:40:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f82e3f-aaa1-4720-bd72-e6c9f3269fbe", "record_id": "flaws_cloudtrail:0000412:e9f82e3f-aaa1-4720-bd72-e6c9f3269fbe", "row_index": 412, "timestamp": "2019-05-30T08:40:15Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f82e3f-aaa1-4720-bd72-e6c9f3269fbe", "eventTime": "2019-05-30T08:40:15Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "key": "customer/00600.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082c387a-606e-4d38-a319-a60240d84b02", "record_id": "flaws_cloudtrail:0000413:082c387a-606e-4d38-a319-a60240d84b02", "row_index": 413, "timestamp": "2019-05-30T08:41:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082c387a-606e-4d38-a319-a60240d84b02", "eventTime": "2019-05-30T08:41:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082c387a-606e-4d38-a319-a60240d84b02", "record_id": "flaws_cloudtrail:0000414:082c387a-606e-4d38-a319-a60240d84b02", "row_index": 414, "timestamp": "2019-05-30T08:41:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082c387a-606e-4d38-a319-a60240d84b02", "eventTime": "2019-05-30T08:41:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e75399a-272b-4480-9148-9bb769064a0cf", "record_id": "flaws_cloudtrail:0000415:e75399a-272b-4480-9148-9bb769064a0cf", "row_index": 415, "timestamp": "2019-05-30T08:41:11Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e75399a-272b-4480-9148-9bb769064a0cf", "eventTime": "2019-05-30T08:41:11Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e75399a-272b-4480-9148-9bb769064a0cf", "record_id": "flaws_cloudtrail:0000416:e75399a-272b-4480-9148-9bb769064a0cf", "row_index": 416, "timestamp": "2019-05-30T08:41:11Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e75399a-272b-4480-9148-9bb769064a0cf", "eventTime": "2019-05-30T08:41:11Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "272ea5df-1703-469b-bf44-cf7badbf41d1", "record_id": "flaws_cloudtrail:0000417:272ea5df-1703-469b-bf44-cf7badbf41d1", "row_index": 417, "timestamp": "2019-05-30T08:41:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "272ea5df-1703-469b-bf44-cf7badbf41d1", "eventTime": "2019-05-30T08:41:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "key": "customer/07778.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9293a71b-8527-4310-8af8-28a8e4c73166", "record_id": "flaws_cloudtrail:0000418:9293a71b-8527-4310-8af8-28a8e4c73166", "row_index": 418, "timestamp": "2019-05-30T08:41:35Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9293a71b-8527-4310-8af8-28a8e4c73166", "eventTime": "2019-05-30T08:41:35Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "key": "customer/09182.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "record_id": "flaws_cloudtrail:0000419:71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "row_index": 419, "timestamp": "2019-05-30T08:41:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "eventTime": "2019-05-30T08:41:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "record_id": "flaws_cloudtrail:0000420:71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "row_index": 420, "timestamp": "2019-05-30T08:41:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71cfb2fd-d024-47d1-abc7-5c1b9bb296c2", "eventTime": "2019-05-30T08:41:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a6d8671-56ee-4f29-a942-45474d2274e1", "record_id": "flaws_cloudtrail:0000421:4a6d8671-56ee-4f29-a942-45474d2274e1", "row_index": 421, "timestamp": "2019-05-30T08:41:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a6d8671-56ee-4f29-a942-45474d2274e1", "eventTime": "2019-05-30T08:41:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a6d8671-56ee-4f29-a942-45474d2274e1", "record_id": "flaws_cloudtrail:0000422:4a6d8671-56ee-4f29-a942-45474d2274e1", "row_index": 422, "timestamp": "2019-05-30T08:41:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a6d8671-56ee-4f29-a942-45474d2274e1", "eventTime": "2019-05-30T08:41:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7558c402-e8d5-4f43-864a-6f3c08ab35f9", "record_id": "flaws_cloudtrail:0000423:7558c402-e8d5-4f43-864a-6f3c08ab35f9", "row_index": 423, "timestamp": "2019-05-30T08:41:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7558c402-e8d5-4f43-864a-6f3c08ab35f9", "eventTime": "2019-05-30T08:41:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7558c402-e8d5-4f43-864a-6f3c08ab35f9", "record_id": "flaws_cloudtrail:0000424:7558c402-e8d5-4f43-864a-6f3c08ab35f9", "row_index": 424, "timestamp": "2019-05-30T08:41:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7558c402-e8d5-4f43-864a-6f3c08ab35f9", "eventTime": "2019-05-30T08:41:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd69e13a-706e-4901-98b2-3978bbd3f32c", "record_id": "flaws_cloudtrail:0000425:fd69e13a-706e-4901-98b2-3978bbd3f32c", "row_index": 425, "timestamp": "2019-05-30T08:41:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd69e13a-706e-4901-98b2-3978bbd3f32c", "eventTime": "2019-05-30T08:41:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd69e13a-706e-4901-98b2-3978bbd3f32c", "record_id": "flaws_cloudtrail:0000426:fd69e13a-706e-4901-98b2-3978bbd3f32c", "row_index": 426, "timestamp": "2019-05-30T08:41:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd69e13a-706e-4901-98b2-3978bbd3f32c", "eventTime": "2019-05-30T08:41:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "record_id": "flaws_cloudtrail:0000427:2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "row_index": 427, "timestamp": "2019-05-30T08:41:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "eventTime": "2019-05-30T08:41:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca565ba-131c-4788-83c7-cc7585d1b3d3", "record_id": "flaws_cloudtrail:0000428:7ca565ba-131c-4788-83c7-cc7585d1b3d3", "row_index": 428, "timestamp": "2019-05-30T08:41:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca565ba-131c-4788-83c7-cc7585d1b3d3", "eventTime": "2019-05-30T08:41:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "record_id": "flaws_cloudtrail:0000429:2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "row_index": 429, "timestamp": "2019-05-30T08:41:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c4c85b2-6013-4003-bbfe-c0f354ca2f21", "eventTime": "2019-05-30T08:41:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca565ba-131c-4788-83c7-cc7585d1b3d3", "record_id": "flaws_cloudtrail:0000430:7ca565ba-131c-4788-83c7-cc7585d1b3d3", "row_index": 430, "timestamp": "2019-05-30T08:41:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca565ba-131c-4788-83c7-cc7585d1b3d3", "eventTime": "2019-05-30T08:41:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "record_id": "flaws_cloudtrail:0000431:158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "row_index": 431, "timestamp": "2019-05-30T08:41:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "eventTime": "2019-05-30T08:41:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "record_id": "flaws_cloudtrail:0000432:158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "row_index": 432, "timestamp": "2019-05-30T08:41:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158ceeb8-a78c-4abb-88fa-e2c039ce79cd", "eventTime": "2019-05-30T08:41:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98676ca-d7f9-43e4-910b-d2a2a10ea530", "record_id": "flaws_cloudtrail:0000433:98676ca-d7f9-43e4-910b-d2a2a10ea530", "row_index": 433, "timestamp": "2019-05-30T08:41:42Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98676ca-d7f9-43e4-910b-d2a2a10ea530", "eventTime": "2019-05-30T08:41:42Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98676ca-d7f9-43e4-910b-d2a2a10ea530", "record_id": "flaws_cloudtrail:0000434:98676ca-d7f9-43e4-910b-d2a2a10ea530", "row_index": 434, "timestamp": "2019-05-30T08:41:42Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98676ca-d7f9-43e4-910b-d2a2a10ea530", "eventTime": "2019-05-30T08:41:42Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fdfcace-f009-4177-9ea6-569b3dabb7ac", "record_id": "flaws_cloudtrail:0000435:8fdfcace-f009-4177-9ea6-569b3dabb7ac", "row_index": 435, "timestamp": "2019-05-30T08:41:43Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fdfcace-f009-4177-9ea6-569b3dabb7ac", "eventTime": "2019-05-30T08:41:43Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "347316a0d-92c3-4c4f-a114-03fcb5e80084", "record_id": "flaws_cloudtrail:0000436:347316a0d-92c3-4c4f-a114-03fcb5e80084", "row_index": 436, "timestamp": "2019-05-30T08:41:43Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "347316a0d-92c3-4c4f-a114-03fcb5e80084", "eventTime": "2019-05-30T08:41:43Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fdfcace-f009-4177-9ea6-569b3dabb7ac", "record_id": "flaws_cloudtrail:0000437:8fdfcace-f009-4177-9ea6-569b3dabb7ac", "row_index": 437, "timestamp": "2019-05-30T08:41:43Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fdfcace-f009-4177-9ea6-569b3dabb7ac", "eventTime": "2019-05-30T08:41:43Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "347316a0d-92c3-4c4f-a114-03fcb5e80084", "record_id": "flaws_cloudtrail:0000438:347316a0d-92c3-4c4f-a114-03fcb5e80084", "row_index": 438, "timestamp": "2019-05-30T08:41:43Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "347316a0d-92c3-4c4f-a114-03fcb5e80084", "eventTime": "2019-05-30T08:41:43Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "record_id": "flaws_cloudtrail:0000439:22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "row_index": 439, "timestamp": "2019-05-30T08:41:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "eventTime": "2019-05-30T08:41:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "record_id": "flaws_cloudtrail:0000440:22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "row_index": 440, "timestamp": "2019-05-30T08:41:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f08f6d-1453-4237-b5d8-cffa30c4b9e0", "eventTime": "2019-05-30T08:41:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3f91c8e-d14b-4341-8a66-a651cb78b578", "record_id": "flaws_cloudtrail:0000441:d3f91c8e-d14b-4341-8a66-a651cb78b578", "row_index": 441, "timestamp": "2019-05-30T08:42:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3f91c8e-d14b-4341-8a66-a651cb78b578", "eventTime": "2019-05-30T08:42:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "key": "customer/02695.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a39fd3-8826-4fae-8d86-14bb4624c4b8", "record_id": "flaws_cloudtrail:0000442:30a39fd3-8826-4fae-8d86-14bb4624c4b8", "row_index": 442, "timestamp": "2019-05-30T08:42:39Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACV35DEPJOWNMURB8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.127.127.54", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3754"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a39fd3-8826-4fae-8d86-14bb4624c4b8", "eventTime": "2019-05-30T08:42:39Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.127.127.54", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACV35DEPJOWNMURB8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3754", "key": "customer/01705.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3754"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f02f648-8822-4575-a57a-86ca5921b88c", "record_id": "flaws_cloudtrail:0000443:6f02f648-8822-4575-a57a-86ca5921b88c", "row_index": 443, "timestamp": "2019-05-30T08:42:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f02f648-8822-4575-a57a-86ca5921b88c", "eventTime": "2019-05-30T08:42:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f02f648-8822-4575-a57a-86ca5921b88c", "record_id": "flaws_cloudtrail:0000444:6f02f648-8822-4575-a57a-86ca5921b88c", "row_index": 444, "timestamp": "2019-05-30T08:42:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f02f648-8822-4575-a57a-86ca5921b88c", "eventTime": "2019-05-30T08:42:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1991f01-afea-40ba-8fbc-5b0a0a4debed", "record_id": "flaws_cloudtrail:0000445:c1991f01-afea-40ba-8fbc-5b0a0a4debed", "row_index": 445, "timestamp": "2019-05-30T08:42:46Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1991f01-afea-40ba-8fbc-5b0a0a4debed", "eventTime": "2019-05-30T08:42:46Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1991f01-afea-40ba-8fbc-5b0a0a4debed", "record_id": "flaws_cloudtrail:0000446:c1991f01-afea-40ba-8fbc-5b0a0a4debed", "row_index": 446, "timestamp": "2019-05-30T08:42:46Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1991f01-afea-40ba-8fbc-5b0a0a4debed", "eventTime": "2019-05-30T08:42:46Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "record_id": "flaws_cloudtrail:0000447:d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "row_index": 447, "timestamp": "2019-05-30T08:42:47Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "eventTime": "2019-05-30T08:42:47Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "record_id": "flaws_cloudtrail:0000448:d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "row_index": 448, "timestamp": "2019-05-30T08:42:47Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a4f7bb-cb23-4358-9e25-a54098a6c8b2", "eventTime": "2019-05-30T08:42:47Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d0aa377-d965-4587-b88b-c14d12de6245", "record_id": "flaws_cloudtrail:0000449:8d0aa377-d965-4587-b88b-c14d12de6245", "row_index": 449, "timestamp": "2019-05-30T08:42:49Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d0aa377-d965-4587-b88b-c14d12de6245", "eventTime": "2019-05-30T08:42:49Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d0aa377-d965-4587-b88b-c14d12de6245", "record_id": "flaws_cloudtrail:0000450:8d0aa377-d965-4587-b88b-c14d12de6245", "row_index": 450, "timestamp": "2019-05-30T08:42:49Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d0aa377-d965-4587-b88b-c14d12de6245", "eventTime": "2019-05-30T08:42:49Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "830fe261-c290-4700-a0b5-dc38fe8b9739", "record_id": "flaws_cloudtrail:0000451:830fe261-c290-4700-a0b5-dc38fe8b9739", "row_index": 451, "timestamp": "2019-05-30T08:42:50Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "830fe261-c290-4700-a0b5-dc38fe8b9739", "eventTime": "2019-05-30T08:42:50Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "830fe261-c290-4700-a0b5-dc38fe8b9739", "record_id": "flaws_cloudtrail:0000452:830fe261-c290-4700-a0b5-dc38fe8b9739", "row_index": 452, "timestamp": "2019-05-30T08:42:50Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "830fe261-c290-4700-a0b5-dc38fe8b9739", "eventTime": "2019-05-30T08:42:50Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dbf1944-53d6-4f56-9609-ab5a91f34965", "record_id": "flaws_cloudtrail:0000453:1dbf1944-53d6-4f56-9609-ab5a91f34965", "row_index": 453, "timestamp": "2019-05-30T08:42:52Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dbf1944-53d6-4f56-9609-ab5a91f34965", "eventTime": "2019-05-30T08:42:52Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dbf1944-53d6-4f56-9609-ab5a91f34965", "record_id": "flaws_cloudtrail:0000454:1dbf1944-53d6-4f56-9609-ab5a91f34965", "row_index": 454, "timestamp": "2019-05-30T08:42:52Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dbf1944-53d6-4f56-9609-ab5a91f34965", "eventTime": "2019-05-30T08:42:52Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c5534e-e564-472f-863c-8c3ec5e66776", "record_id": "flaws_cloudtrail:0000455:f9c5534e-e564-472f-863c-8c3ec5e66776", "row_index": 455, "timestamp": "2019-05-30T08:42:53Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c5534e-e564-472f-863c-8c3ec5e66776", "eventTime": "2019-05-30T08:42:53Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c5534e-e564-472f-863c-8c3ec5e66776", "record_id": "flaws_cloudtrail:0000456:f9c5534e-e564-472f-863c-8c3ec5e66776", "row_index": 456, "timestamp": "2019-05-30T08:42:53Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c5534e-e564-472f-863c-8c3ec5e66776", "eventTime": "2019-05-30T08:42:53Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "846ac54c-057d-4bc3-b35c-8e244e203fd0", "record_id": "flaws_cloudtrail:0000457:846ac54c-057d-4bc3-b35c-8e244e203fd0", "row_index": 457, "timestamp": "2019-05-30T08:42:54Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "846ac54c-057d-4bc3-b35c-8e244e203fd0", "eventTime": "2019-05-30T08:42:54Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "846ac54c-057d-4bc3-b35c-8e244e203fd0", "record_id": "flaws_cloudtrail:0000458:846ac54c-057d-4bc3-b35c-8e244e203fd0", "row_index": 458, "timestamp": "2019-05-30T08:42:54Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "846ac54c-057d-4bc3-b35c-8e244e203fd0", "eventTime": "2019-05-30T08:42:54Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bff289e-d429-4783-8e3d-6d57151a5c36", "record_id": "flaws_cloudtrail:0000459:1bff289e-d429-4783-8e3d-6d57151a5c36", "row_index": 459, "timestamp": "2019-05-30T08:42:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bff289e-d429-4783-8e3d-6d57151a5c36", "eventTime": "2019-05-30T08:42:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bff289e-d429-4783-8e3d-6d57151a5c36", "record_id": "flaws_cloudtrail:0000460:1bff289e-d429-4783-8e3d-6d57151a5c36", "row_index": 460, "timestamp": "2019-05-30T08:42:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bff289e-d429-4783-8e3d-6d57151a5c36", "eventTime": "2019-05-30T08:42:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e366194-e848-4f45-b507-d2fa27929", "record_id": "flaws_cloudtrail:0000461:52e366194-e848-4f45-b507-d2fa27929", "row_index": 461, "timestamp": "2019-05-30T08:42:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e366194-e848-4f45-b507-d2fa27929", "eventTime": "2019-05-30T08:42:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e366194-e848-4f45-b507-d2fa27929", "record_id": "flaws_cloudtrail:0000462:52e366194-e848-4f45-b507-d2fa27929", "row_index": 462, "timestamp": "2019-05-30T08:42:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e366194-e848-4f45-b507-d2fa27929", "eventTime": "2019-05-30T08:42:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b2975b2-3274-4c4b-8853-f704668d804ef", "record_id": "flaws_cloudtrail:0000463:5b2975b2-3274-4c4b-8853-f704668d804ef", "row_index": 463, "timestamp": "2019-05-30T08:42:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b2975b2-3274-4c4b-8853-f704668d804ef", "eventTime": "2019-05-30T08:42:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b2975b2-3274-4c4b-8853-f704668d804ef", "record_id": "flaws_cloudtrail:0000464:5b2975b2-3274-4c4b-8853-f704668d804ef", "row_index": 464, "timestamp": "2019-05-30T08:42:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b2975b2-3274-4c4b-8853-f704668d804ef", "eventTime": "2019-05-30T08:42:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5c1efc-6b87-4b69-8811-c26c1abade3f", "record_id": "flaws_cloudtrail:0000465:8c5c1efc-6b87-4b69-8811-c26c1abade3f", "row_index": 465, "timestamp": "2019-05-30T08:42:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5c1efc-6b87-4b69-8811-c26c1abade3f", "eventTime": "2019-05-30T08:42:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5c1efc-6b87-4b69-8811-c26c1abade3f", "record_id": "flaws_cloudtrail:0000466:8c5c1efc-6b87-4b69-8811-c26c1abade3f", "row_index": 466, "timestamp": "2019-05-30T08:42:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5c1efc-6b87-4b69-8811-c26c1abade3f", "eventTime": "2019-05-30T08:42:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "record_id": "flaws_cloudtrail:0000467:c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "row_index": 467, "timestamp": "2019-05-30T08:43:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "eventTime": "2019-05-30T08:43:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "record_id": "flaws_cloudtrail:0000468:c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "row_index": 468, "timestamp": "2019-05-30T08:43:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a87a5c-0bda-435a-ae74-8730cf6f62e0", "eventTime": "2019-05-30T08:43:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107ea760-4637-4ea1-b658-9a3d430fc6c0", "record_id": "flaws_cloudtrail:0000469:107ea760-4637-4ea1-b658-9a3d430fc6c0", "row_index": 469, "timestamp": "2019-05-30T08:43:02Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107ea760-4637-4ea1-b658-9a3d430fc6c0", "eventTime": "2019-05-30T08:43:02Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06b8495-eb5f-4f25-b150-00310d1740c", "record_id": "flaws_cloudtrail:0000470:d06b8495-eb5f-4f25-b150-00310d1740c", "row_index": 470, "timestamp": "2019-05-30T08:43:02Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06b8495-eb5f-4f25-b150-00310d1740c", "eventTime": "2019-05-30T08:43:02Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107ea760-4637-4ea1-b658-9a3d430fc6c0", "record_id": "flaws_cloudtrail:0000471:107ea760-4637-4ea1-b658-9a3d430fc6c0", "row_index": 471, "timestamp": "2019-05-30T08:43:02Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107ea760-4637-4ea1-b658-9a3d430fc6c0", "eventTime": "2019-05-30T08:43:02Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06b8495-eb5f-4f25-b150-00310d1740c", "record_id": "flaws_cloudtrail:0000472:d06b8495-eb5f-4f25-b150-00310d1740c", "row_index": 472, "timestamp": "2019-05-30T08:43:02Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06b8495-eb5f-4f25-b150-00310d1740c", "eventTime": "2019-05-30T08:43:02Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2969ceb-5c5b-418f-a688-9c13ed45fd29", "record_id": "flaws_cloudtrail:0000473:f2969ceb-5c5b-418f-a688-9c13ed45fd29", "row_index": 473, "timestamp": "2019-05-30T08:43:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2969ceb-5c5b-418f-a688-9c13ed45fd29", "eventTime": "2019-05-30T08:43:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2969ceb-5c5b-418f-a688-9c13ed45fd29", "record_id": "flaws_cloudtrail:0000474:f2969ceb-5c5b-418f-a688-9c13ed45fd29", "row_index": 474, "timestamp": "2019-05-30T08:43:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2969ceb-5c5b-418f-a688-9c13ed45fd29", "eventTime": "2019-05-30T08:43:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f536981ad-f571-4208-a0dd-a5f322db3eed", "record_id": "flaws_cloudtrail:0000475:f536981ad-f571-4208-a0dd-a5f322db3eed", "row_index": 475, "timestamp": "2019-05-30T08:43:04Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f536981ad-f571-4208-a0dd-a5f322db3eed", "eventTime": "2019-05-30T08:43:04Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f536981ad-f571-4208-a0dd-a5f322db3eed", "record_id": "flaws_cloudtrail:0000476:f536981ad-f571-4208-a0dd-a5f322db3eed", "row_index": 476, "timestamp": "2019-05-30T08:43:04Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f536981ad-f571-4208-a0dd-a5f322db3eed", "eventTime": "2019-05-30T08:43:04Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "record_id": "flaws_cloudtrail:0000477:2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "row_index": 477, "timestamp": "2019-05-30T08:43:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "eventTime": "2019-05-30T08:43:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "record_id": "flaws_cloudtrail:0000478:2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "row_index": 478, "timestamp": "2019-05-30T08:43:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9a95ff-f3d8-4ff4-8184-1101f5e0c1f6", "eventTime": "2019-05-30T08:43:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178888b3b-2263-49e2-a476-b607615c39949", "record_id": "flaws_cloudtrail:0000479:178888b3b-2263-49e2-a476-b607615c39949", "row_index": 479, "timestamp": "2019-05-30T08:43:06Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178888b3b-2263-49e2-a476-b607615c39949", "eventTime": "2019-05-30T08:43:06Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178888b3b-2263-49e2-a476-b607615c39949", "record_id": "flaws_cloudtrail:0000480:178888b3b-2263-49e2-a476-b607615c39949", "row_index": 480, "timestamp": "2019-05-30T08:43:06Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178888b3b-2263-49e2-a476-b607615c39949", "eventTime": "2019-05-30T08:43:06Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d1a2e47-abfc-4712-a764-89aceff4c83e", "record_id": "flaws_cloudtrail:0000481:9d1a2e47-abfc-4712-a764-89aceff4c83e", "row_index": 481, "timestamp": "2019-05-30T08:43:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d1a2e47-abfc-4712-a764-89aceff4c83e", "eventTime": "2019-05-30T08:43:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d1a2e47-abfc-4712-a764-89aceff4c83e", "record_id": "flaws_cloudtrail:0000482:9d1a2e47-abfc-4712-a764-89aceff4c83e", "row_index": 482, "timestamp": "2019-05-30T08:43:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d1a2e47-abfc-4712-a764-89aceff4c83e", "eventTime": "2019-05-30T08:43:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "record_id": "flaws_cloudtrail:0000483:ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "row_index": 483, "timestamp": "2019-05-30T08:43:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "eventTime": "2019-05-30T08:43:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "record_id": "flaws_cloudtrail:0000484:ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "row_index": 484, "timestamp": "2019-05-30T08:43:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec84aa6d-c3ff-4921-a786-a5a2a8ab9109", "eventTime": "2019-05-30T08:43:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "record_id": "flaws_cloudtrail:0000485:6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "row_index": 485, "timestamp": "2019-05-30T08:43:10Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "eventTime": "2019-05-30T08:43:10Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "record_id": "flaws_cloudtrail:0000486:6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "row_index": 486, "timestamp": "2019-05-30T08:43:10Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6afdc8b2-2ca8-47f7-b30d-17eddece67fd", "eventTime": "2019-05-30T08:43:10Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d914a3cc-89ab-4698-ab64-3d2629b5a35b", "record_id": "flaws_cloudtrail:0000487:d914a3cc-89ab-4698-ab64-3d2629b5a35b", "row_index": 487, "timestamp": "2019-05-30T08:43:11Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d914a3cc-89ab-4698-ab64-3d2629b5a35b", "eventTime": "2019-05-30T08:43:11Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d914a3cc-89ab-4698-ab64-3d2629b5a35b", "record_id": "flaws_cloudtrail:0000488:d914a3cc-89ab-4698-ab64-3d2629b5a35b", "row_index": 488, "timestamp": "2019-05-30T08:43:11Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d914a3cc-89ab-4698-ab64-3d2629b5a35b", "eventTime": "2019-05-30T08:43:11Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fc9b00-8ccb-4d48-9f80-674993c91194b", "record_id": "flaws_cloudtrail:0000489:71fc9b00-8ccb-4d48-9f80-674993c91194b", "row_index": 489, "timestamp": "2019-05-30T08:43:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fc9b00-8ccb-4d48-9f80-674993c91194b", "eventTime": "2019-05-30T08:43:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fc9b00-8ccb-4d48-9f80-674993c91194b", "record_id": "flaws_cloudtrail:0000490:71fc9b00-8ccb-4d48-9f80-674993c91194b", "row_index": 490, "timestamp": "2019-05-30T08:43:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fc9b00-8ccb-4d48-9f80-674993c91194b", "eventTime": "2019-05-30T08:43:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f994fa28-bca3-4940-8dac-9eb42ecda4e2", "record_id": "flaws_cloudtrail:0000491:f994fa28-bca3-4940-8dac-9eb42ecda4e2", "row_index": 491, "timestamp": "2019-05-30T08:43:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f994fa28-bca3-4940-8dac-9eb42ecda4e2", "eventTime": "2019-05-30T08:43:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f994fa28-bca3-4940-8dac-9eb42ecda4e2", "record_id": "flaws_cloudtrail:0000492:f994fa28-bca3-4940-8dac-9eb42ecda4e2", "row_index": 492, "timestamp": "2019-05-30T08:43:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f994fa28-bca3-4940-8dac-9eb42ecda4e2", "eventTime": "2019-05-30T08:43:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff177111a-ba78-485d-9932-8e903f2848f3", "record_id": "flaws_cloudtrail:0000493:ff177111a-ba78-485d-9932-8e903f2848f3", "row_index": 493, "timestamp": "2019-05-30T08:43:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff177111a-ba78-485d-9932-8e903f2848f3", "eventTime": "2019-05-30T08:43:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400207a13-3189-48ca-b952-7a57cb270cb8", "record_id": "flaws_cloudtrail:0000494:400207a13-3189-48ca-b952-7a57cb270cb8", "row_index": 494, "timestamp": "2019-05-30T08:43:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400207a13-3189-48ca-b952-7a57cb270cb8", "eventTime": "2019-05-30T08:43:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff177111a-ba78-485d-9932-8e903f2848f3", "record_id": "flaws_cloudtrail:0000495:ff177111a-ba78-485d-9932-8e903f2848f3", "row_index": 495, "timestamp": "2019-05-30T08:43:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff177111a-ba78-485d-9932-8e903f2848f3", "eventTime": "2019-05-30T08:43:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400207a13-3189-48ca-b952-7a57cb270cb8", "record_id": "flaws_cloudtrail:0000496:400207a13-3189-48ca-b952-7a57cb270cb8", "row_index": 496, "timestamp": "2019-05-30T08:43:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400207a13-3189-48ca-b952-7a57cb270cb8", "eventTime": "2019-05-30T08:43:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d2a783-c1d6-4d6c-95f3-a39884", "record_id": "flaws_cloudtrail:0000497:74d2a783-c1d6-4d6c-95f3-a39884", "row_index": 497, "timestamp": "2019-05-30T08:43:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d2a783-c1d6-4d6c-95f3-a39884", "eventTime": "2019-05-30T08:43:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d2a783-c1d6-4d6c-95f3-a39884", "record_id": "flaws_cloudtrail:0000498:74d2a783-c1d6-4d6c-95f3-a39884", "row_index": 498, "timestamp": "2019-05-30T08:43:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d2a783-c1d6-4d6c-95f3-a39884", "eventTime": "2019-05-30T08:43:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f491976a-8fc9-4c49-8ce4-01c600d488922", "record_id": "flaws_cloudtrail:0000499:f491976a-8fc9-4c49-8ce4-01c600d488922", "row_index": 499, "timestamp": "2019-05-30T08:43:16Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f491976a-8fc9-4c49-8ce4-01c600d488922", "eventTime": "2019-05-30T08:43:16Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f491976a-8fc9-4c49-8ce4-01c600d488922", "record_id": "flaws_cloudtrail:0000500:f491976a-8fc9-4c49-8ce4-01c600d488922", "row_index": 500, "timestamp": "2019-05-30T08:43:16Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f491976a-8fc9-4c49-8ce4-01c600d488922", "eventTime": "2019-05-30T08:43:16Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "record_id": "flaws_cloudtrail:0000501:8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "row_index": 501, "timestamp": "2019-05-30T08:43:18Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "eventTime": "2019-05-30T08:43:18Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "record_id": "flaws_cloudtrail:0000502:8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "row_index": 502, "timestamp": "2019-05-30T08:43:18Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5410b8-a65f-4bd3-a6e9-f2ef01d5b967", "eventTime": "2019-05-30T08:43:18Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "record_id": "flaws_cloudtrail:0000503:c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "row_index": 503, "timestamp": "2019-05-30T08:43:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "eventTime": "2019-05-30T08:43:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334adbd9-e252-44d5-a640-22534bc67b0", "record_id": "flaws_cloudtrail:0000504:334adbd9-e252-44d5-a640-22534bc67b0", "row_index": 504, "timestamp": "2019-05-30T08:43:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334adbd9-e252-44d5-a640-22534bc67b0", "eventTime": "2019-05-30T08:43:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "record_id": "flaws_cloudtrail:0000505:c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "row_index": 505, "timestamp": "2019-05-30T08:43:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d1a6f5-4b9c-41eb-bc7f-8ac2b2c6e73e", "eventTime": "2019-05-30T08:43:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334adbd9-e252-44d5-a640-22534bc67b0", "record_id": "flaws_cloudtrail:0000506:334adbd9-e252-44d5-a640-22534bc67b0", "row_index": 506, "timestamp": "2019-05-30T08:43:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334adbd9-e252-44d5-a640-22534bc67b0", "eventTime": "2019-05-30T08:43:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "record_id": "flaws_cloudtrail:0000507:31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "row_index": 507, "timestamp": "2019-05-30T08:43:22Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "eventTime": "2019-05-30T08:43:22Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "record_id": "flaws_cloudtrail:0000508:31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "row_index": 508, "timestamp": "2019-05-30T08:43:22Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a537e0-c6e3-40a4-a56d-29813c2d0aa7", "eventTime": "2019-05-30T08:43:22Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f36a4e2e-f543-4790-8694-f5c7ebc2e406", "record_id": "flaws_cloudtrail:0000509:f36a4e2e-f543-4790-8694-f5c7ebc2e406", "row_index": 509, "timestamp": "2019-05-30T08:43:24Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f36a4e2e-f543-4790-8694-f5c7ebc2e406", "eventTime": "2019-05-30T08:43:24Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "record_id": "flaws_cloudtrail:0000510:ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "row_index": 510, "timestamp": "2019-05-30T08:43:24Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "eventTime": "2019-05-30T08:43:24Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f36a4e2e-f543-4790-8694-f5c7ebc2e406", "record_id": "flaws_cloudtrail:0000511:f36a4e2e-f543-4790-8694-f5c7ebc2e406", "row_index": 511, "timestamp": "2019-05-30T08:43:24Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f36a4e2e-f543-4790-8694-f5c7ebc2e406", "eventTime": "2019-05-30T08:43:24Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "record_id": "flaws_cloudtrail:0000512:ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "row_index": 512, "timestamp": "2019-05-30T08:43:24Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea541a70-c0af-4beb-b7ab-ca6a778f61dc", "eventTime": "2019-05-30T08:43:24Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6089d709-528a-4f98-9f21-89e2f5c5abf6", "record_id": "flaws_cloudtrail:0000513:6089d709-528a-4f98-9f21-89e2f5c5abf6", "row_index": 513, "timestamp": "2019-05-30T08:43:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6089d709-528a-4f98-9f21-89e2f5c5abf6", "eventTime": "2019-05-30T08:43:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6089d709-528a-4f98-9f21-89e2f5c5abf6", "record_id": "flaws_cloudtrail:0000514:6089d709-528a-4f98-9f21-89e2f5c5abf6", "row_index": 514, "timestamp": "2019-05-30T08:43:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6089d709-528a-4f98-9f21-89e2f5c5abf6", "eventTime": "2019-05-30T08:43:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "record_id": "flaws_cloudtrail:0000515:0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "row_index": 515, "timestamp": "2019-05-30T08:43:26Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "eventTime": "2019-05-30T08:43:26Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "record_id": "flaws_cloudtrail:0000516:0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "row_index": 516, "timestamp": "2019-05-30T08:43:26Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1a89e7-c1d3-4eba-b6be-4d862fbcb2f9", "eventTime": "2019-05-30T08:43:26Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "152c8b70-7e10-48fd-ae58-5c119e5af382", "record_id": "flaws_cloudtrail:0000517:152c8b70-7e10-48fd-ae58-5c119e5af382", "row_index": 517, "timestamp": "2019-05-30T08:43:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "152c8b70-7e10-48fd-ae58-5c119e5af382", "eventTime": "2019-05-30T08:43:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "152c8b70-7e10-48fd-ae58-5c119e5af382", "record_id": "flaws_cloudtrail:0000518:152c8b70-7e10-48fd-ae58-5c119e5af382", "row_index": 518, "timestamp": "2019-05-30T08:43:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "152c8b70-7e10-48fd-ae58-5c119e5af382", "eventTime": "2019-05-30T08:43:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "923cea39-2454-4857-9476-6ad845538", "record_id": "flaws_cloudtrail:0000519:923cea39-2454-4857-9476-6ad845538", "row_index": 519, "timestamp": "2019-05-30T08:43:28Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "923cea39-2454-4857-9476-6ad845538", "eventTime": "2019-05-30T08:43:28Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "923cea39-2454-4857-9476-6ad845538", "record_id": "flaws_cloudtrail:0000520:923cea39-2454-4857-9476-6ad845538", "row_index": 520, "timestamp": "2019-05-30T08:43:28Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "923cea39-2454-4857-9476-6ad845538", "eventTime": "2019-05-30T08:43:28Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"certificateSummaryList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49791e5f-d6f5-4c14-81af-ccb129e33cf9", "record_id": "flaws_cloudtrail:0000521:49791e5f-d6f5-4c14-81af-ccb129e33cf9", "row_index": 521, "timestamp": "2019-05-30T08:43:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49791e5f-d6f5-4c14-81af-ccb129e33cf9", "eventTime": "2019-05-30T08:43:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-north-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49791e5f-d6f5-4c14-81af-ccb129e33cf9", "record_id": "flaws_cloudtrail:0000522:49791e5f-d6f5-4c14-81af-ccb129e33cf9", "row_index": 522, "timestamp": "2019-05-30T08:43:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49791e5f-d6f5-4c14-81af-ccb129e33cf9", "eventTime": "2019-05-30T08:43:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-north-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957a1fb8-2f6a-443f-a754-73a774eee9a2", "record_id": "flaws_cloudtrail:0000523:957a1fb8-2f6a-443f-a754-73a774eee9a2", "row_index": 523, "timestamp": "2019-05-30T08:43:30Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957a1fb8-2f6a-443f-a754-73a774eee9a2", "eventTime": "2019-05-30T08:43:30Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957a1fb8-2f6a-443f-a754-73a774eee9a2", "record_id": "flaws_cloudtrail:0000524:957a1fb8-2f6a-443f-a754-73a774eee9a2", "row_index": 524, "timestamp": "2019-05-30T08:43:30Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957a1fb8-2f6a-443f-a754-73a774eee9a2", "eventTime": "2019-05-30T08:43:30Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740a4e84-7e4e-4b6c-82a8-0fb62215", "record_id": "flaws_cloudtrail:0000525:740a4e84-7e4e-4b6c-82a8-0fb62215", "row_index": 525, "timestamp": "2019-05-30T08:43:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740a4e84-7e4e-4b6c-82a8-0fb62215", "eventTime": "2019-05-30T08:43:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b1b4a0-6569-4573-9582-8830b8403bea", "record_id": "flaws_cloudtrail:0000526:c5b1b4a0-6569-4573-9582-8830b8403bea", "row_index": 526, "timestamp": "2019-05-30T08:43:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b1b4a0-6569-4573-9582-8830b8403bea", "eventTime": "2019-05-30T08:43:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740a4e84-7e4e-4b6c-82a8-0fb62215", "record_id": "flaws_cloudtrail:0000527:740a4e84-7e4e-4b6c-82a8-0fb62215", "row_index": 527, "timestamp": "2019-05-30T08:43:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740a4e84-7e4e-4b6c-82a8-0fb62215", "eventTime": "2019-05-30T08:43:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b1b4a0-6569-4573-9582-8830b8403bea", "record_id": "flaws_cloudtrail:0000528:c5b1b4a0-6569-4573-9582-8830b8403bea", "row_index": 528, "timestamp": "2019-05-30T08:43:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b1b4a0-6569-4573-9582-8830b8403bea", "eventTime": "2019-05-30T08:43:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1330c985-52a8-4ac9-8cb3-b1955b629e5d", "record_id": "flaws_cloudtrail:0000529:1330c985-52a8-4ac9-8cb3-b1955b629e5d", "row_index": 529, "timestamp": "2019-05-30T08:43:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1330c985-52a8-4ac9-8cb3-b1955b629e5d", "eventTime": "2019-05-30T08:43:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1330c985-52a8-4ac9-8cb3-b1955b629e5d", "record_id": "flaws_cloudtrail:0000530:1330c985-52a8-4ac9-8cb3-b1955b629e5d", "row_index": 530, "timestamp": "2019-05-30T08:43:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1330c985-52a8-4ac9-8cb3-b1955b629e5d", "eventTime": "2019-05-30T08:43:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "record_id": "flaws_cloudtrail:0000531:39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "row_index": 531, "timestamp": "2019-05-30T08:43:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "eventTime": "2019-05-30T08:43:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "record_id": "flaws_cloudtrail:0000532:39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "row_index": 532, "timestamp": "2019-05-30T08:43:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39bbb49d-b5b3-4660-9dc0-3eec5a2f1d6c", "eventTime": "2019-05-30T08:43:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef6e29d-4396-41d5-88ac-39a3bba66f47", "record_id": "flaws_cloudtrail:0000533:cef6e29d-4396-41d5-88ac-39a3bba66f47", "row_index": 533, "timestamp": "2019-05-30T08:43:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef6e29d-4396-41d5-88ac-39a3bba66f47", "eventTime": "2019-05-30T08:43:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef6e29d-4396-41d5-88ac-39a3bba66f47", "record_id": "flaws_cloudtrail:0000534:cef6e29d-4396-41d5-88ac-39a3bba66f47", "row_index": 534, "timestamp": "2019-05-30T08:43:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef6e29d-4396-41d5-88ac-39a3bba66f47", "eventTime": "2019-05-30T08:43:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd149847c-4352-460f-a03a-580499cf1d64", "record_id": "flaws_cloudtrail:0000535:cd149847c-4352-460f-a03a-580499cf1d64", "row_index": 535, "timestamp": "2019-05-30T08:43:36Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd149847c-4352-460f-a03a-580499cf1d64", "eventTime": "2019-05-30T08:43:36Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd149847c-4352-460f-a03a-580499cf1d64", "record_id": "flaws_cloudtrail:0000536:cd149847c-4352-460f-a03a-580499cf1d64", "row_index": 536, "timestamp": "2019-05-30T08:43:36Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd149847c-4352-460f-a03a-580499cf1d64", "eventTime": "2019-05-30T08:43:36Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "record_id": "flaws_cloudtrail:0000537:890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "row_index": 537, "timestamp": "2019-05-30T08:43:37Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "eventTime": "2019-05-30T08:43:37Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "record_id": "flaws_cloudtrail:0000538:890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "row_index": 538, "timestamp": "2019-05-30T08:43:37Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890e1d18-020d-48f0-a9e9-ecdc50b5cdd7", "eventTime": "2019-05-30T08:43:37Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60974ecf-21a5-4648-bde3-c29fd9b48a3d", "record_id": "flaws_cloudtrail:0000539:60974ecf-21a5-4648-bde3-c29fd9b48a3d", "row_index": 539, "timestamp": "2019-05-30T08:43:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60974ecf-21a5-4648-bde3-c29fd9b48a3d", "eventTime": "2019-05-30T08:43:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60974ecf-21a5-4648-bde3-c29fd9b48a3d", "record_id": "flaws_cloudtrail:0000540:60974ecf-21a5-4648-bde3-c29fd9b48a3d", "row_index": 540, "timestamp": "2019-05-30T08:43:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60974ecf-21a5-4648-bde3-c29fd9b48a3d", "eventTime": "2019-05-30T08:43:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "record_id": "flaws_cloudtrail:0000541:83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "row_index": 541, "timestamp": "2019-05-30T08:43:40Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "eventTime": "2019-05-30T08:43:40Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "record_id": "flaws_cloudtrail:0000542:83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "row_index": 542, "timestamp": "2019-05-30T08:43:40Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83b3f767-7c2d-487d-99dc-a4a0ea3d6457", "eventTime": "2019-05-30T08:43:40Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45fa78f3-7ee8-481f-bd06-0c57a6580c88", "record_id": "flaws_cloudtrail:0000543:45fa78f3-7ee8-481f-bd06-0c57a6580c88", "row_index": 543, "timestamp": "2019-05-30T08:43:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45fa78f3-7ee8-481f-bd06-0c57a6580c88", "eventTime": "2019-05-30T08:43:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45fa78f3-7ee8-481f-bd06-0c57a6580c88", "record_id": "flaws_cloudtrail:0000544:45fa78f3-7ee8-481f-bd06-0c57a6580c88", "row_index": 544, "timestamp": "2019-05-30T08:43:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45fa78f3-7ee8-481f-bd06-0c57a6580c88", "eventTime": "2019-05-30T08:43:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf43e9ac-39f0-4092-b92b-e06924bf96a4", "record_id": "flaws_cloudtrail:0000545:cf43e9ac-39f0-4092-b92b-e06924bf96a4", "row_index": 545, "timestamp": "2019-05-30T08:43:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf43e9ac-39f0-4092-b92b-e06924bf96a4", "eventTime": "2019-05-30T08:43:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf43e9ac-39f0-4092-b92b-e06924bf96a4", "record_id": "flaws_cloudtrail:0000546:cf43e9ac-39f0-4092-b92b-e06924bf96a4", "row_index": 546, "timestamp": "2019-05-30T08:43:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf43e9ac-39f0-4092-b92b-e06924bf96a4", "eventTime": "2019-05-30T08:43:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25902bb9-2f96-4bc7-b32e-e8f039729e1a", "record_id": "flaws_cloudtrail:0000547:25902bb9-2f96-4bc7-b32e-e8f039729e1a", "row_index": 547, "timestamp": "2019-05-30T08:43:43Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25902bb9-2f96-4bc7-b32e-e8f039729e1a", "eventTime": "2019-05-30T08:43:43Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25902bb9-2f96-4bc7-b32e-e8f039729e1a", "record_id": "flaws_cloudtrail:0000548:25902bb9-2f96-4bc7-b32e-e8f039729e1a", "row_index": 548, "timestamp": "2019-05-30T08:43:43Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25902bb9-2f96-4bc7-b32e-e8f039729e1a", "eventTime": "2019-05-30T08:43:43Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d3423a-0da5-4981-ab12-b4112ff20314", "record_id": "flaws_cloudtrail:0000549:a8d3423a-0da5-4981-ab12-b4112ff20314", "row_index": 549, "timestamp": "2019-05-30T08:43:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d3423a-0da5-4981-ab12-b4112ff20314", "eventTime": "2019-05-30T08:43:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d3423a-0da5-4981-ab12-b4112ff20314", "record_id": "flaws_cloudtrail:0000550:a8d3423a-0da5-4981-ab12-b4112ff20314", "row_index": 550, "timestamp": "2019-05-30T08:43:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d3423a-0da5-4981-ab12-b4112ff20314", "eventTime": "2019-05-30T08:43:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dba26ab3-10e6-452f-9414-5784fce8b4a8", "record_id": "flaws_cloudtrail:0000551:dba26ab3-10e6-452f-9414-5784fce8b4a8", "row_index": 551, "timestamp": "2019-05-30T08:43:45Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dba26ab3-10e6-452f-9414-5784fce8b4a8", "eventTime": "2019-05-30T08:43:45Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dba26ab3-10e6-452f-9414-5784fce8b4a8", "record_id": "flaws_cloudtrail:0000552:dba26ab3-10e6-452f-9414-5784fce8b4a8", "row_index": 552, "timestamp": "2019-05-30T08:43:45Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dba26ab3-10e6-452f-9414-5784fce8b4a8", "eventTime": "2019-05-30T08:43:45Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266da87e-122c-40e1-a528-23ae342c2be3", "record_id": "flaws_cloudtrail:0000553:266da87e-122c-40e1-a528-23ae342c2be3", "row_index": 553, "timestamp": "2019-05-30T08:43:46Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266da87e-122c-40e1-a528-23ae342c2be3", "eventTime": "2019-05-30T08:43:46Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266da87e-122c-40e1-a528-23ae342c2be3", "record_id": "flaws_cloudtrail:0000554:266da87e-122c-40e1-a528-23ae342c2be3", "row_index": 554, "timestamp": "2019-05-30T08:43:46Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266da87e-122c-40e1-a528-23ae342c2be3", "eventTime": "2019-05-30T08:43:46Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd344742-6340-4b56-9714-36b7afbc8c3b", "record_id": "flaws_cloudtrail:0000555:bd344742-6340-4b56-9714-36b7afbc8c3b", "row_index": 555, "timestamp": "2019-05-30T08:43:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd344742-6340-4b56-9714-36b7afbc8c3b", "eventTime": "2019-05-30T08:43:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd344742-6340-4b56-9714-36b7afbc8c3b", "record_id": "flaws_cloudtrail:0000556:bd344742-6340-4b56-9714-36b7afbc8c3b", "row_index": 556, "timestamp": "2019-05-30T08:43:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd344742-6340-4b56-9714-36b7afbc8c3b", "eventTime": "2019-05-30T08:43:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988434d47-e000-4116-9365-ea5e68b93df4", "record_id": "flaws_cloudtrail:0000557:988434d47-e000-4116-9365-ea5e68b93df4", "row_index": 557, "timestamp": "2019-05-30T08:43:48Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988434d47-e000-4116-9365-ea5e68b93df4", "eventTime": "2019-05-30T08:43:48Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988434d47-e000-4116-9365-ea5e68b93df4", "record_id": "flaws_cloudtrail:0000558:988434d47-e000-4116-9365-ea5e68b93df4", "row_index": 558, "timestamp": "2019-05-30T08:43:48Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988434d47-e000-4116-9365-ea5e68b93df4", "eventTime": "2019-05-30T08:43:48Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16951f-6f1c-4a5f-b59f-989ae8d8908b", "record_id": "flaws_cloudtrail:0000559:16951f-6f1c-4a5f-b59f-989ae8d8908b", "row_index": 559, "timestamp": "2019-05-30T08:43:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16951f-6f1c-4a5f-b59f-989ae8d8908b", "eventTime": "2019-05-30T08:43:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16951f-6f1c-4a5f-b59f-989ae8d8908b", "record_id": "flaws_cloudtrail:0000560:16951f-6f1c-4a5f-b59f-989ae8d8908b", "row_index": 560, "timestamp": "2019-05-30T08:43:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16951f-6f1c-4a5f-b59f-989ae8d8908b", "eventTime": "2019-05-30T08:43:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771dea3c-ca17-4f30-8b1a-14dae2c15c86", "record_id": "flaws_cloudtrail:0000561:771dea3c-ca17-4f30-8b1a-14dae2c15c86", "row_index": 561, "timestamp": "2019-05-30T08:43:50Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771dea3c-ca17-4f30-8b1a-14dae2c15c86", "eventTime": "2019-05-30T08:43:50Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771dea3c-ca17-4f30-8b1a-14dae2c15c86", "record_id": "flaws_cloudtrail:0000562:771dea3c-ca17-4f30-8b1a-14dae2c15c86", "row_index": 562, "timestamp": "2019-05-30T08:43:50Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771dea3c-ca17-4f30-8b1a-14dae2c15c86", "eventTime": "2019-05-30T08:43:50Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fa38d72-bc12-4443-ae66-d39e23230fe0", "record_id": "flaws_cloudtrail:0000563:1fa38d72-bc12-4443-ae66-d39e23230fe0", "row_index": 563, "timestamp": "2019-05-30T08:43:51Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fa38d72-bc12-4443-ae66-d39e23230fe0", "eventTime": "2019-05-30T08:43:51Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fa38d72-bc12-4443-ae66-d39e23230fe0", "record_id": "flaws_cloudtrail:0000564:1fa38d72-bc12-4443-ae66-d39e23230fe0", "row_index": 564, "timestamp": "2019-05-30T08:43:51Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fa38d72-bc12-4443-ae66-d39e23230fe0", "eventTime": "2019-05-30T08:43:51Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "record_id": "flaws_cloudtrail:0000565:31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "row_index": 565, "timestamp": "2019-05-30T08:43:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "eventTime": "2019-05-30T08:43:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "record_id": "flaws_cloudtrail:0000566:31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "row_index": 566, "timestamp": "2019-05-30T08:43:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31caacda-8230-4b3f-9d5c-b9d6cb6c7a29", "eventTime": "2019-05-30T08:43:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "record_id": "flaws_cloudtrail:0000567:0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "row_index": 567, "timestamp": "2019-05-30T08:43:54Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "eventTime": "2019-05-30T08:43:54Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "record_id": "flaws_cloudtrail:0000568:0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "row_index": 568, "timestamp": "2019-05-30T08:43:54Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0256f4a0-2ae0-4b8c-b95b-debcb0d9dc31", "eventTime": "2019-05-30T08:43:54Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c292100-9772-4e32-810d-0964220253c1", "record_id": "flaws_cloudtrail:0000569:c292100-9772-4e32-810d-0964220253c1", "row_index": 569, "timestamp": "2019-05-30T08:43:55Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c292100-9772-4e32-810d-0964220253c1", "eventTime": "2019-05-30T08:43:55Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c292100-9772-4e32-810d-0964220253c1", "record_id": "flaws_cloudtrail:0000570:c292100-9772-4e32-810d-0964220253c1", "row_index": 570, "timestamp": "2019-05-30T08:43:55Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c292100-9772-4e32-810d-0964220253c1", "eventTime": "2019-05-30T08:43:55Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "101e8ca7-0eb0-4d52-b620-03fabdab707e", "record_id": "flaws_cloudtrail:0000571:101e8ca7-0eb0-4d52-b620-03fabdab707e", "row_index": 571, "timestamp": "2019-05-30T08:43:56Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "101e8ca7-0eb0-4d52-b620-03fabdab707e", "eventTime": "2019-05-30T08:43:56Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "101e8ca7-0eb0-4d52-b620-03fabdab707e", "record_id": "flaws_cloudtrail:0000572:101e8ca7-0eb0-4d52-b620-03fabdab707e", "row_index": 572, "timestamp": "2019-05-30T08:43:56Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "101e8ca7-0eb0-4d52-b620-03fabdab707e", "eventTime": "2019-05-30T08:43:56Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "290e1e65-1188-431e-95b6-c891ea51a1b7", "record_id": "flaws_cloudtrail:0000573:290e1e65-1188-431e-95b6-c891ea51a1b7", "row_index": 573, "timestamp": "2019-05-30T08:43:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "290e1e65-1188-431e-95b6-c891ea51a1b7", "eventTime": "2019-05-30T08:43:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "290e1e65-1188-431e-95b6-c891ea51a1b7", "record_id": "flaws_cloudtrail:0000574:290e1e65-1188-431e-95b6-c891ea51a1b7", "row_index": 574, "timestamp": "2019-05-30T08:43:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "290e1e65-1188-431e-95b6-c891ea51a1b7", "eventTime": "2019-05-30T08:43:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13486-bdf7-497d-ac07-e1eed2a91512", "record_id": "flaws_cloudtrail:0000575:13486-bdf7-497d-ac07-e1eed2a91512", "row_index": 575, "timestamp": "2019-05-30T08:43:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13486-bdf7-497d-ac07-e1eed2a91512", "eventTime": "2019-05-30T08:43:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13486-bdf7-497d-ac07-e1eed2a91512", "record_id": "flaws_cloudtrail:0000576:13486-bdf7-497d-ac07-e1eed2a91512", "row_index": 576, "timestamp": "2019-05-30T08:43:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13486-bdf7-497d-ac07-e1eed2a91512", "eventTime": "2019-05-30T08:43:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b81f141b-4475-430f-ae2f-01734e411e81", "record_id": "flaws_cloudtrail:0000577:b81f141b-4475-430f-ae2f-01734e411e81", "row_index": 577, "timestamp": "2019-05-30T08:44:00Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b81f141b-4475-430f-ae2f-01734e411e81", "eventTime": "2019-05-30T08:44:00Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b81f141b-4475-430f-ae2f-01734e411e81", "record_id": "flaws_cloudtrail:0000578:b81f141b-4475-430f-ae2f-01734e411e81", "row_index": 578, "timestamp": "2019-05-30T08:44:00Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b81f141b-4475-430f-ae2f-01734e411e81", "eventTime": "2019-05-30T08:44:00Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "record_id": "flaws_cloudtrail:0000579:7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "row_index": 579, "timestamp": "2019-05-30T08:44:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "eventTime": "2019-05-30T08:44:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "record_id": "flaws_cloudtrail:0000580:7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "row_index": 580, "timestamp": "2019-05-30T08:44:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc301b3-5e0e-4712-bcc8-91f8a64d78cf", "eventTime": "2019-05-30T08:44:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a399a718-36e5-4501-b13f-9a81c56ab838", "record_id": "flaws_cloudtrail:0000581:a399a718-36e5-4501-b13f-9a81c56ab838", "row_index": 581, "timestamp": "2019-05-30T08:44:02Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a399a718-36e5-4501-b13f-9a81c56ab838", "eventTime": "2019-05-30T08:44:02Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a399a718-36e5-4501-b13f-9a81c56ab838", "record_id": "flaws_cloudtrail:0000582:a399a718-36e5-4501-b13f-9a81c56ab838", "row_index": 582, "timestamp": "2019-05-30T08:44:02Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a399a718-36e5-4501-b13f-9a81c56ab838", "eventTime": "2019-05-30T08:44:02Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "record_id": "flaws_cloudtrail:0000583:79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "row_index": 583, "timestamp": "2019-05-30T08:44:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "eventTime": "2019-05-30T08:44:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "record_id": "flaws_cloudtrail:0000584:79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "row_index": 584, "timestamp": "2019-05-30T08:44:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d24c66-4a0f-4b5d-a26c-da1f3dc8d9c5", "eventTime": "2019-05-30T08:44:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "319f53bb-71bd-481e-9145-6099fa05d0b8", "record_id": "flaws_cloudtrail:0000585:319f53bb-71bd-481e-9145-6099fa05d0b8", "row_index": 585, "timestamp": "2019-05-30T08:44:04Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "319f53bb-71bd-481e-9145-6099fa05d0b8", "eventTime": "2019-05-30T08:44:04Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "319f53bb-71bd-481e-9145-6099fa05d0b8", "record_id": "flaws_cloudtrail:0000586:319f53bb-71bd-481e-9145-6099fa05d0b8", "row_index": 586, "timestamp": "2019-05-30T08:44:04Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "319f53bb-71bd-481e-9145-6099fa05d0b8", "eventTime": "2019-05-30T08:44:04Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "record_id": "flaws_cloudtrail:0000587:86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "row_index": 587, "timestamp": "2019-05-30T08:44:05Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "eventTime": "2019-05-30T08:44:05Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "record_id": "flaws_cloudtrail:0000588:86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "row_index": 588, "timestamp": "2019-05-30T08:44:05Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86806e85-80bf-4fee-b7b0-e4a8aa703b7b", "eventTime": "2019-05-30T08:44:05Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6607d3e6-6405-4810-a2f6-fc678e2205b0", "record_id": "flaws_cloudtrail:0000589:6607d3e6-6405-4810-a2f6-fc678e2205b0", "row_index": 589, "timestamp": "2019-05-30T08:44:07Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6607d3e6-6405-4810-a2f6-fc678e2205b0", "eventTime": "2019-05-30T08:44:07Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6607d3e6-6405-4810-a2f6-fc678e2205b0", "record_id": "flaws_cloudtrail:0000590:6607d3e6-6405-4810-a2f6-fc678e2205b0", "row_index": 590, "timestamp": "2019-05-30T08:44:07Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6607d3e6-6405-4810-a2f6-fc678e2205b0", "eventTime": "2019-05-30T08:44:07Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af396b4-31e9-42a0-9984-766543e658", "record_id": "flaws_cloudtrail:0000591:0af396b4-31e9-42a0-9984-766543e658", "row_index": 591, "timestamp": "2019-05-30T08:44:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af396b4-31e9-42a0-9984-766543e658", "eventTime": "2019-05-30T08:44:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af396b4-31e9-42a0-9984-766543e658", "record_id": "flaws_cloudtrail:0000592:0af396b4-31e9-42a0-9984-766543e658", "row_index": 592, "timestamp": "2019-05-30T08:44:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af396b4-31e9-42a0-9984-766543e658", "eventTime": "2019-05-30T08:44:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad60598c-94dd-47d2-97fd-f276a8ad4669", "record_id": "flaws_cloudtrail:0000593:ad60598c-94dd-47d2-97fd-f276a8ad4669", "row_index": 593, "timestamp": "2019-05-30T08:44:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad60598c-94dd-47d2-97fd-f276a8ad4669", "eventTime": "2019-05-30T08:44:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad60598c-94dd-47d2-97fd-f276a8ad4669", "record_id": "flaws_cloudtrail:0000594:ad60598c-94dd-47d2-97fd-f276a8ad4669", "row_index": 594, "timestamp": "2019-05-30T08:44:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad60598c-94dd-47d2-97fd-f276a8ad4669", "eventTime": "2019-05-30T08:44:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "record_id": "flaws_cloudtrail:0000595:e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "row_index": 595, "timestamp": "2019-05-30T08:44:10Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "eventTime": "2019-05-30T08:44:10Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "record_id": "flaws_cloudtrail:0000596:e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "row_index": 596, "timestamp": "2019-05-30T08:44:10Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c3f72a-4b4a-4e72-b3e4-813f02b3fe0e", "eventTime": "2019-05-30T08:44:10Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a5945c-e9a3-4b87-955f-a090f47f7d70", "record_id": "flaws_cloudtrail:0000597:c1a5945c-e9a3-4b87-955f-a090f47f7d70", "row_index": 597, "timestamp": "2019-05-30T08:44:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a5945c-e9a3-4b87-955f-a090f47f7d70", "eventTime": "2019-05-30T08:44:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a5945c-e9a3-4b87-955f-a090f47f7d70", "record_id": "flaws_cloudtrail:0000598:c1a5945c-e9a3-4b87-955f-a090f47f7d70", "row_index": 598, "timestamp": "2019-05-30T08:44:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a5945c-e9a3-4b87-955f-a090f47f7d70", "eventTime": "2019-05-30T08:44:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83fc2243-412b-45c1-bb3d-19526b5dc152", "record_id": "flaws_cloudtrail:0000599:83fc2243-412b-45c1-bb3d-19526b5dc152", "row_index": 599, "timestamp": "2019-05-30T08:44:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83fc2243-412b-45c1-bb3d-19526b5dc152", "eventTime": "2019-05-30T08:44:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baef39d8-d3eb-430a-847c-58916de64c88", "record_id": "flaws_cloudtrail:0000600:baef39d8-d3eb-430a-847c-58916de64c88", "row_index": 600, "timestamp": "2019-05-30T08:44:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baef39d8-d3eb-430a-847c-58916de64c88", "eventTime": "2019-05-30T08:44:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83fc2243-412b-45c1-bb3d-19526b5dc152", "record_id": "flaws_cloudtrail:0000601:83fc2243-412b-45c1-bb3d-19526b5dc152", "row_index": 601, "timestamp": "2019-05-30T08:44:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83fc2243-412b-45c1-bb3d-19526b5dc152", "eventTime": "2019-05-30T08:44:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baef39d8-d3eb-430a-847c-58916de64c88", "record_id": "flaws_cloudtrail:0000602:baef39d8-d3eb-430a-847c-58916de64c88", "row_index": 602, "timestamp": "2019-05-30T08:44:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baef39d8-d3eb-430a-847c-58916de64c88", "eventTime": "2019-05-30T08:44:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305045f-f9bb-4c21-a074-316c788f2b98", "record_id": "flaws_cloudtrail:0000603:305045f-f9bb-4c21-a074-316c788f2b98", "row_index": 603, "timestamp": "2019-05-30T08:44:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305045f-f9bb-4c21-a074-316c788f2b98", "eventTime": "2019-05-30T08:44:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305045f-f9bb-4c21-a074-316c788f2b98", "record_id": "flaws_cloudtrail:0000604:305045f-f9bb-4c21-a074-316c788f2b98", "row_index": 604, "timestamp": "2019-05-30T08:44:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305045f-f9bb-4c21-a074-316c788f2b98", "eventTime": "2019-05-30T08:44:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a712811e-09a4-419d-b7cc-a8dcbe63163b", "record_id": "flaws_cloudtrail:0000605:a712811e-09a4-419d-b7cc-a8dcbe63163b", "row_index": 605, "timestamp": "2019-05-30T08:44:15Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a712811e-09a4-419d-b7cc-a8dcbe63163b", "eventTime": "2019-05-30T08:44:15Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a712811e-09a4-419d-b7cc-a8dcbe63163b", "record_id": "flaws_cloudtrail:0000606:a712811e-09a4-419d-b7cc-a8dcbe63163b", "row_index": 606, "timestamp": "2019-05-30T08:44:15Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a712811e-09a4-419d-b7cc-a8dcbe63163b", "eventTime": "2019-05-30T08:44:15Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "840a5ba1-690c-45bd-ba01-43906aaefa5", "record_id": "flaws_cloudtrail:0000607:840a5ba1-690c-45bd-ba01-43906aaefa5", "row_index": 607, "timestamp": "2019-05-30T08:44:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "840a5ba1-690c-45bd-ba01-43906aaefa5", "eventTime": "2019-05-30T08:44:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd48b6f7-2691-46cd-acd7-9ff951e100166", "record_id": "flaws_cloudtrail:0000608:fd48b6f7-2691-46cd-acd7-9ff951e100166", "row_index": 608, "timestamp": "2019-05-30T08:44:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd48b6f7-2691-46cd-acd7-9ff951e100166", "eventTime": "2019-05-30T08:44:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "840a5ba1-690c-45bd-ba01-43906aaefa5", "record_id": "flaws_cloudtrail:0000609:840a5ba1-690c-45bd-ba01-43906aaefa5", "row_index": 609, "timestamp": "2019-05-30T08:44:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "840a5ba1-690c-45bd-ba01-43906aaefa5", "eventTime": "2019-05-30T08:44:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}