Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c28e43-0f88-4d46-a482-aacb506c8395", "record_id": "flaws_cloudtrail:0000000:31c28e43-0f88-4d46-a482-aacb506c8395", "row_index": 0, "timestamp": "2019-08-21T14:40:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c28e43-0f88-4d46-a482-aacb506c8395", "eventTime": "2019-08-21T14:40:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ef62cc5-156a-4177-8447-e93b6ca0e055", "record_id": "flaws_cloudtrail:0000001:6ef62cc5-156a-4177-8447-e93b6ca0e055", "row_index": 1, "timestamp": "2019-08-21T14:40:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ef62cc5-156a-4177-8447-e93b6ca0e055", "eventTime": "2019-08-21T14:40:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 08Lnxqj-FYvJ5Jsi2_eqleEalIlfxcQnoFk1-_aa11c4OxP5-Hb0bDZtcJC_qasyYeSk6Sz-JSBms7RB8MXfwy296jaK7HayCQ1Y0B2yfxdklD5X-7Npvz0ppv5UZTMFFLUL-xiiGEPdV0SZ7QDIsbcAGPZlZhp3_rOa0AqgDrhPDsNexBggs7RNLlzqqkyUMsYnqQMPNwH44A7Bg4g8skaI41CyMndYdMzyCSvdvRkCtQZq344c661yPq4Beyw5T3YvWdi07CfReXmtM8D9OUD8dYvVhP7XMxXgCC5B0Zmi2s-JKYfCYoynOAfKdAv8WelKNnEB7gnzXI0Yyic9wx9PiM0g7sGQLZ9ZUi7fbqtEUy8cNonF0akXwjBM6ZKovUJXtL8xxdB7bsjdMEZsFDdJHoUl8dHKJfDKQdzZa-MuXPOFKOJw6vOQr1Y8lZg1XLvgHhD-jTihQcK_ge_3vVsCNEoAVOm75gJN-miWTWNqOy2N9QxC08jxapVfrjf_ltVfkdVw1z5XFnxxZCPEfuqg6wFK-Bs45qhCpuow1NEXDj__qv1xtE9KtocmDzAe7U-rX2v3T_4zH4F9Ik5FJL8TnDT8pBXTjwyG0x436dZo8KLF3CsyPMvecWebO0c4N3S5mubs-uqHPAeqG1VhSbJeBcTDFr4", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c28e43-0f88-4d46-a482-aacb506c8395", "record_id": "flaws_cloudtrail:0000002:31c28e43-0f88-4d46-a482-aacb506c8395", "row_index": 2, "timestamp": "2019-08-21T14:40:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c28e43-0f88-4d46-a482-aacb506c8395", "eventTime": "2019-08-21T14:40:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "record_id": "flaws_cloudtrail:0000003:260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "row_index": 3, "timestamp": "2019-08-21T14:40:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "eventTime": "2019-08-21T14:40:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "record_id": "flaws_cloudtrail:0000004:260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "row_index": 4, "timestamp": "2019-08-21T14:40:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260ebd72-49bf-4c99-98f5-e8fe4a7addfe", "eventTime": "2019-08-21T14:40:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "record_id": "flaws_cloudtrail:0000005:eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "row_index": 5, "timestamp": "2019-08-21T14:40:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "eventTime": "2019-08-21T14:40:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a3b673-2af9-4b53-b54a-25fc8afb7e71", "record_id": "flaws_cloudtrail:0000006:92a3b673-2af9-4b53-b54a-25fc8afb7e71", "row_index": 6, "timestamp": "2019-08-21T14:40:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a3b673-2af9-4b53-b54a-25fc8afb7e71", "eventTime": "2019-08-21T14:40:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mQBT4yoBF5SRwNlIbhMBsfLXGibMd3THEUv5ef4SOCJoChKjAjqxdRj5_X-bqInZV9Ope822B0g6w_DyF-UHEgx7hjI3RV_jim-_Fm3zFuEjssxxLFsFluTG2PK9Xq_AJnZMAR_BZzQh5jubvwfe7PT0nKaXqQR6ZOoQmf2FvWWYMM4-vT4XulfTO_NmVGCiJqTz5WaHu9nt2jtI46F6lTeD8TYgwDAmnLThBpgdZq2cYlVWFUmgjUj9zom7cP2Gthj4460khmtTIAYTX2P3QieIYMve4hmYA42jgTRSTDxlTEk-8exzQ82-P0_c2Z6m1m7bWt4Y1xFyIgmbVSoZf_xNYeDfwOpECoxxjEsgKPGwdRP0wF43T0YAXSaWSWhFvHDYnsNik1TxRpVubqHZD6ud1oCSA0TjxvB8DiZJEYBpPM5OCgcVPmykCI7YjeuVWcIwAxLiyWYW9MopodeaNrG60hKW8z91oxTc918SOZzpiUesAHQ-9q65t6HAoRmhj70hcunqUjQ29u1E2zMNrYZQOGKYGEVjICs2nM_N9lXCaVhUEgGlz4Oac-avwCwiewKAW9ItPvKPHyATETX2J64brVxORAI6roSr4HAXBUHRx_tZMZk8b7YeTJR9as0FNetqnd-HS_L2C0YnD-MBA5-OEts0eTSk", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "record_id": "flaws_cloudtrail:0000007:eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "row_index": 7, "timestamp": "2019-08-21T14:40:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8c1b23-7dd4-4e74-893d-92bf747d0d2e", "eventTime": "2019-08-21T14:40:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a3b673-2af9-4b53-b54a-25fc8afb7e71", "record_id": "flaws_cloudtrail:0000008:92a3b673-2af9-4b53-b54a-25fc8afb7e71", "row_index": 8, "timestamp": "2019-08-21T14:40:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a3b673-2af9-4b53-b54a-25fc8afb7e71", "eventTime": "2019-08-21T14:40:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mQBT4yoBF5SRwNlIbhMBsfLXGibMd3THEUv5ef4SOCJoChKjAjqxdRj5_X-bqInZV9Ope822B0g6w_DyF-UHEgx7hjI3RV_jim-_Fm3zFuEjssxxLFsFluTG2PK9Xq_AJnZMAR_BZzQh5jubvwfe7PT0nKaXqQR6ZOoQmf2FvWWYMM4-vT4XulfTO_NmVGCiJqTz5WaHu9nt2jtI46F6lTeD8TYgwDAmnLThBpgdZq2cYlVWFUmgjUj9zom7cP2Gthj4460khmtTIAYTX2P3QieIYMve4hmYA42jgTRSTDxlTEk-8exzQ82-P0_c2Z6m1m7bWt4Y1xFyIgmbVSoZf_xNYeDfwOpECoxxjEsgKPGwdRP0wF43T0YAXSaWSWhFvHDYnsNik1TxRpVubqHZD6ud1oCSA0TjxvB8DiZJEYBpPM5OCgcVPmykCI7YjeuVWcIwAxLiyWYW9MopodeaNrG60hKW8z91oxTc918SOZzpiUesAHQ-9q65t6HAoRmhj70hcunqUjQ29u1E2zMNrYZQOGKYGEVjICs2nM_N9lXCaVhUEgGlz4Oac-avwCwiewKAW9ItPvKPHyATETX2J64brVxORAI6roSr4HAXBUHRx_tZMZk8b7YeTJR9as0FNetqnd-HS_L2C0YnD-MBA5-OEts0eTSk", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "record_id": "flaws_cloudtrail:0000009:f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "row_index": 9, "timestamp": "2019-08-21T14:41:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "eventTime": "2019-08-21T14:41:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "record_id": "flaws_cloudtrail:0000010:f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "row_index": 10, "timestamp": "2019-08-21T14:41:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f3ec48-f5e4-4568-a459-3c4cd98dca40", "eventTime": "2019-08-21T14:41:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced50f3b-ec40-4aab-a747-73b7c6ad3761", "record_id": "flaws_cloudtrail:0000011:ced50f3b-ec40-4aab-a747-73b7c6ad3761", "row_index": 11, "timestamp": "2019-08-21T14:41:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced50f3b-ec40-4aab-a747-73b7c6ad3761", "eventTime": "2019-08-21T14:41:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced50f3b-ec40-4aab-a747-73b7c6ad3761", "record_id": "flaws_cloudtrail:0000012:ced50f3b-ec40-4aab-a747-73b7c6ad3761", "row_index": 12, "timestamp": "2019-08-21T14:41:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced50f3b-ec40-4aab-a747-73b7c6ad3761", "eventTime": "2019-08-21T14:41:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9e7265f-48a6-4b2a-a877-009e4e240e17", "record_id": "flaws_cloudtrail:0000013:a9e7265f-48a6-4b2a-a877-009e4e240e17", "row_index": 13, "timestamp": "2019-08-21T14:41:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9e7265f-48a6-4b2a-a877-009e4e240e17", "eventTime": "2019-08-21T14:41:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KMcF0tWigyTsWRjm0M-YhHQRv5qrOyo2WiyH7qr_0tgAsQVDrAkmXxk2Dxscf4N4IZ09YPCVxj44p1vyCDtnjfY5bPzt8yVancGCzgO9nQUOXqPBeO6A-w01_mCAhW9nDyS-Pnxxc2xShY3y0bMUOPHCv4uvHAEhkXL3nQs94K-AbVb-pd-eDpZKMt7qeXP72xTh8mNZUMu9NKN7BJ54IXFr7yiBYol5GtpysvyeXWAAqzHep8UwIQpbPEvghuId_07yHxBTG2ZefgExDi9Bcribb-7QMNYGgpHUW99rmUbgVVoGy4EtJxJXpNwlBC1mV0TBCEjPS_4VseImdf_r76kj7hjq7nFCceAqUzi89HVZEUeTvgFZSidh9-OcRvLE9G_qpnzDK9wSN37vqI2qSe6CPhSY5tDC-p_6qUq_YNh1jSMIRcHC_cCyKqAbR5vqtaYlkJR-tJ56NNMsftFXuLO0fRJjwvEORE0OPhCEQCNe1OtmYOj3sScP8UibIxrinTuy5noneC-yXLHJfS20uikpAwomQ7H64sMf9qauYxlEx30P5BifMNlV5oNg39xfs1M4Gdy0sA8pAhRoBHCgz1LVlcA_QigXJWmQ4WoiOX9hMtWrAeycOaBWwPFCgKB5k94tGqYKxaxDe9JE5NdP1ibNWKHR2aeT", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "record_id": "flaws_cloudtrail:0000014:1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "row_index": 14, "timestamp": "2019-08-21T14:41:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "eventTime": "2019-08-21T14:41:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j7uezXiMyR8njx9yyyGYbJHQnF6XAMYGW4YYySwI2yFiNZZOPoopN6ABq70WoXi_-IfPIaNGHJWNHBAn819N9YOPkyf36TODctvTsdISFG8THgSMXmzoX8IStb4WqOE1NQbp0NiXbk44XDz_txmoPdOvXpu80b9fy-WjaPFtWBt7ejUWfqck9e5ts7DSZQLfh4nLU2MYejdHf1YTpBMWUnSfr2rUlwDJvbNyKsSNfvN9kvL-fiKJ3qXTDRVS96mdDX-VhKJmGiNGHDzp4-qCL9h5Qc2Rqz_cAgz-ZcFTzRRyV736KEoP0sBAi23GwBLlRoiRTpZtKnAaaPYlkGdvo8KlmzOkJSQXBMDWIjPiAguO7yB0-VeZn_2HMj2IDv6l1quvyi3zfZTcp2Vooet3Rhoq6UgkjTaJQjpEJ7oTI6JJJZTgGJX2B7Y4vpsdNv-3d2o-9YmWgK0HU4WOi1Oq_PEqNUfq5f5FH8U0rHyYYig24cZma5HakJOHCncHiKuxtJ-LsWxATpl3RVC2vmt-NNrRKYjtr3HMfLzDWeF_KN4tFT1pkkhNlW3iTJzFa-jvxLopcFkTROQJTHHp7_xnj4drknYRU76kbuo67w4-uxYbn0i9RGyE2NfgnnexbOS5u8fieUJs8Bs42sqd05HkhaFvD39YUDw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9e7265f-48a6-4b2a-a877-009e4e240e17", "record_id": "flaws_cloudtrail:0000015:a9e7265f-48a6-4b2a-a877-009e4e240e17", "row_index": 15, "timestamp": "2019-08-21T14:41:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9e7265f-48a6-4b2a-a877-009e4e240e17", "eventTime": "2019-08-21T14:41:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KMcF0tWigyTsWRjm0M-YhHQRv5qrOyo2WiyH7qr_0tgAsQVDrAkmXxk2Dxscf4N4IZ09YPCVxj44p1vyCDtnjfY5bPzt8yVancGCzgO9nQUOXqPBeO6A-w01_mCAhW9nDyS-Pnxxc2xShY3y0bMUOPHCv4uvHAEhkXL3nQs94K-AbVb-pd-eDpZKMt7qeXP72xTh8mNZUMu9NKN7BJ54IXFr7yiBYol5GtpysvyeXWAAqzHep8UwIQpbPEvghuId_07yHxBTG2ZefgExDi9Bcribb-7QMNYGgpHUW99rmUbgVVoGy4EtJxJXpNwlBC1mV0TBCEjPS_4VseImdf_r76kj7hjq7nFCceAqUzi89HVZEUeTvgFZSidh9-OcRvLE9G_qpnzDK9wSN37vqI2qSe6CPhSY5tDC-p_6qUq_YNh1jSMIRcHC_cCyKqAbR5vqtaYlkJR-tJ56NNMsftFXuLO0fRJjwvEORE0OPhCEQCNe1OtmYOj3sScP8UibIxrinTuy5noneC-yXLHJfS20uikpAwomQ7H64sMf9qauYxlEx30P5BifMNlV5oNg39xfs1M4Gdy0sA8pAhRoBHCgz1LVlcA_QigXJWmQ4WoiOX9hMtWrAeycOaBWwPFCgKB5k94tGqYKxaxDe9JE5NdP1ibNWKHR2aeT", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "record_id": "flaws_cloudtrail:0000016:1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "row_index": 16, "timestamp": "2019-08-21T14:41:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c430faa-ccb3-446d-bd4a-0fe2f22b8607", "eventTime": "2019-08-21T14:41:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j7uezXiMyR8njx9yyyGYbJHQnF6XAMYGW4YYySwI2yFiNZZOPoopN6ABq70WoXi_-IfPIaNGHJWNHBAn819N9YOPkyf36TODctvTsdISFG8THgSMXmzoX8IStb4WqOE1NQbp0NiXbk44XDz_txmoPdOvXpu80b9fy-WjaPFtWBt7ejUWfqck9e5ts7DSZQLfh4nLU2MYejdHf1YTpBMWUnSfr2rUlwDJvbNyKsSNfvN9kvL-fiKJ3qXTDRVS96mdDX-VhKJmGiNGHDzp4-qCL9h5Qc2Rqz_cAgz-ZcFTzRRyV736KEoP0sBAi23GwBLlRoiRTpZtKnAaaPYlkGdvo8KlmzOkJSQXBMDWIjPiAguO7yB0-VeZn_2HMj2IDv6l1quvyi3zfZTcp2Vooet3Rhoq6UgkjTaJQjpEJ7oTI6JJJZTgGJX2B7Y4vpsdNv-3d2o-9YmWgK0HU4WOi1Oq_PEqNUfq5f5FH8U0rHyYYig24cZma5HakJOHCncHiKuxtJ-LsWxATpl3RVC2vmt-NNrRKYjtr3HMfLzDWeF_KN4tFT1pkkhNlW3iTJzFa-jvxLopcFkTROQJTHHp7_xnj4drknYRU76kbuo67w4-uxYbn0i9RGyE2NfgnnexbOS5u8fieUJs8Bs42sqd05HkhaFvD39YUDw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d59314-3c3c-4097-bda2-b2ad3595ca19", "record_id": "flaws_cloudtrail:0000017:6d59314-3c3c-4097-bda2-b2ad3595ca19", "row_index": 17, "timestamp": "2019-08-21T14:41:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d59314-3c3c-4097-bda2-b2ad3595ca19", "eventTime": "2019-08-21T14:41:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d59314-3c3c-4097-bda2-b2ad3595ca19", "record_id": "flaws_cloudtrail:0000018:6d59314-3c3c-4097-bda2-b2ad3595ca19", "row_index": 18, "timestamp": "2019-08-21T14:41:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d59314-3c3c-4097-bda2-b2ad3595ca19", "eventTime": "2019-08-21T14:41:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14eb9537-e2c6-4c95-affa-749b0640ee1a", "record_id": "flaws_cloudtrail:0000019:14eb9537-e2c6-4c95-affa-749b0640ee1a", "row_index": 19, "timestamp": "2019-08-21T14:41:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14eb9537-e2c6-4c95-affa-749b0640ee1a", "eventTime": "2019-08-21T14:41:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14eb9537-e2c6-4c95-affa-749b0640ee1a", "record_id": "flaws_cloudtrail:0000020:14eb9537-e2c6-4c95-affa-749b0640ee1a", "row_index": 20, "timestamp": "2019-08-21T14:41:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14eb9537-e2c6-4c95-affa-749b0640ee1a", "eventTime": "2019-08-21T14:41:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82be35d-fe9d-4075-87b7-b76a6de9df32", "record_id": "flaws_cloudtrail:0000021:c82be35d-fe9d-4075-87b7-b76a6de9df32", "row_index": 21, "timestamp": "2019-08-21T14:41:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82be35d-fe9d-4075-87b7-b76a6de9df32", "eventTime": "2019-08-21T14:41:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "record_id": "flaws_cloudtrail:0000022:e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "row_index": 22, "timestamp": "2019-08-21T14:41:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "eventTime": "2019-08-21T14:41:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "record_id": "flaws_cloudtrail:0000023:e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "row_index": 23, "timestamp": "2019-08-21T14:41:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1cf1e04-c78a-4de6-b9dc-bb034ccafc50", "eventTime": "2019-08-21T14:41:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757780-bd52-4882-8d54-2e8d4106e41b", "record_id": "flaws_cloudtrail:0000024:757780-bd52-4882-8d54-2e8d4106e41b", "row_index": 24, "timestamp": "2019-08-21T14:41:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757780-bd52-4882-8d54-2e8d4106e41b", "eventTime": "2019-08-21T14:41:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757780-bd52-4882-8d54-2e8d4106e41b", "record_id": "flaws_cloudtrail:0000025:757780-bd52-4882-8d54-2e8d4106e41b", "row_index": 25, "timestamp": "2019-08-21T14:41:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757780-bd52-4882-8d54-2e8d4106e41b", "eventTime": "2019-08-21T14:41:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a05bf7-c71c-4e69-87ab-ec23e772de3a", "record_id": "flaws_cloudtrail:0000026:04a05bf7-c71c-4e69-87ab-ec23e772de3a", "row_index": 26, "timestamp": "2019-08-21T14:41:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a05bf7-c71c-4e69-87ab-ec23e772de3a", "eventTime": "2019-08-21T14:41:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "record_id": "flaws_cloudtrail:0000027:ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "row_index": 27, "timestamp": "2019-08-21T14:41:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "eventTime": "2019-08-21T14:41:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kNffUQY2N7cqpSNA69OhJepZmKAjHEbYY3b8bgGWr19bRcb116R59g_ce2sVsuP_SAs8L_S3nuEHbc2OdQMeoDfnpQZebzussP-rSbwuPc-2elsmgR__DMGrm6J4EJKwsa228CAJHO7muA5QKja9zTgypv76n8jF5VKHwAsi0Ne1Hnjb6pdY39o280oSHaKQAhjIwn3zWdhHm4bPpHEQ7Huqw6xeTuTzzN82kZwiMBBJ9i3edJd9a0_bcRcnU9g5euDzL0VwDQn7d-mdCIYnzk5bBTJm7iStJGk_nbNaGuIOyJHyFF35xpKGjrGwPdm7zahuBzkXQ3zXXKye249ykhJyj7sp8m4cXkNSzY2qVCLNgdGY4Q13b5d8y5TNC4sRKf-DoPJD4seV5tlvsnmKlTcDaiiLRKPP9PV_FIK7z5kQAydDHgVa2YPGBrSJGIKScC19B_9fmd68uFH-FLIwMXkpjcvY3qF18XLVeTtHZxtbwjRaaRYPoEgRaSsjSFLYgluMs6Em8Ioame5ILPEQeDYikQRwXNIMsmwIS-fB-fQy2ujFaN5_-q6yGsTyPKh9bSlWlhwsLKyBh93OPzdWyXIX57qo45H7RZruTk0cK9NH2IBTFYTJgq53qYNXaD7w50jTXS3gG4ONc0o3ElmJjVNs795HzBv5", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a05bf7-c71c-4e69-87ab-ec23e772de3a", "record_id": "flaws_cloudtrail:0000028:04a05bf7-c71c-4e69-87ab-ec23e772de3a", "row_index": 28, "timestamp": "2019-08-21T14:41:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a05bf7-c71c-4e69-87ab-ec23e772de3a", "eventTime": "2019-08-21T14:41:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "record_id": "flaws_cloudtrail:0000029:ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "row_index": 29, "timestamp": "2019-08-21T14:41:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8ceb1d-7880-43b9-921c-5ac88f0cb058", "eventTime": "2019-08-21T14:41:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kNffUQY2N7cqpSNA69OhJepZmKAjHEbYY3b8bgGWr19bRcb116R59g_ce2sVsuP_SAs8L_S3nuEHbc2OdQMeoDfnpQZebzussP-rSbwuPc-2elsmgR__DMGrm6J4EJKwsa228CAJHO7muA5QKja9zTgypv76n8jF5VKHwAsi0Ne1Hnjb6pdY39o280oSHaKQAhjIwn3zWdhHm4bPpHEQ7Huqw6xeTuTzzN82kZwiMBBJ9i3edJd9a0_bcRcnU9g5euDzL0VwDQn7d-mdCIYnzk5bBTJm7iStJGk_nbNaGuIOyJHyFF35xpKGjrGwPdm7zahuBzkXQ3zXXKye249ykhJyj7sp8m4cXkNSzY2qVCLNgdGY4Q13b5d8y5TNC4sRKf-DoPJD4seV5tlvsnmKlTcDaiiLRKPP9PV_FIK7z5kQAydDHgVa2YPGBrSJGIKScC19B_9fmd68uFH-FLIwMXkpjcvY3qF18XLVeTtHZxtbwjRaaRYPoEgRaSsjSFLYgluMs6Em8Ioame5ILPEQeDYikQRwXNIMsmwIS-fB-fQy2ujFaN5_-q6yGsTyPKh9bSlWlhwsLKyBh93OPzdWyXIX57qo45H7RZruTk0cK9NH2IBTFYTJgq53qYNXaD7w50jTXS3gG4ONc0o3ElmJjVNs795HzBv5", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0784f650-d11e-499e-8082-89abced222c1", "record_id": "flaws_cloudtrail:0000030:0784f650-d11e-499e-8082-89abced222c1", "row_index": 30, "timestamp": "2019-08-21T14:41:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0784f650-d11e-499e-8082-89abced222c1", "eventTime": "2019-08-21T14:41:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0784f650-d11e-499e-8082-89abced222c1", "record_id": "flaws_cloudtrail:0000031:0784f650-d11e-499e-8082-89abced222c1", "row_index": 31, "timestamp": "2019-08-21T14:41:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0784f650-d11e-499e-8082-89abced222c1", "eventTime": "2019-08-21T14:41:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f198b46-1682-4172-8977-072443191347", "record_id": "flaws_cloudtrail:0000032:6f198b46-1682-4172-8977-072443191347", "row_index": 32, "timestamp": "2019-08-21T14:41:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f198b46-1682-4172-8977-072443191347", "eventTime": "2019-08-21T14:41:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3286fb7a-166a-4ce7-a89c-653ba0689eb4", "record_id": "flaws_cloudtrail:0000033:3286fb7a-166a-4ce7-a89c-653ba0689eb4", "row_index": 33, "timestamp": "2019-08-21T14:41:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3286fb7a-166a-4ce7-a89c-653ba0689eb4", "eventTime": "2019-08-21T14:41:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cHOL8pCh5u-N0AhFtF_JOT-T5ZMTlTOTqzQOSnTf8vRheyCv1O_eLMYQuf4wlfPwGuLinuRahTBH_WmyO9dOujuvm5OwDjvYZ76wpWZ3BI1n0f2Vp3Ga6igGisgOL3xoVe6S2anoA-7Ce0PijGluXhiIytnbPxbT4_A_uMnto_4aNLpZb8x2q0NLPeP30P5TyfoXuBYFDHwHG1xsvWyW0UzgZhModeizXU6xMiBVN-zyp8a-MJJjk9jr1YVXgHSPLWf0k7EScJx0Dxu7BANkEM-xvOkdY9A0jtl1Z1lxZdhVh_Ayf6k5VRUPOZ0TKXfk3gNYPwJMYdOqEdHJumKl5gLDtxlZEvvCdnazvmhr7c7JuqRH6MNKbesfKroSFgIQGlpo0SGWbcRyErUOMOOv1Qid9_xA2EwX8VvLeXXHduqCQvnYUM6VUc9S1QCr_MvV3x0wxfq3oDHAMQwgF2WDEbBmRTIRWwVG4lrbI1ZePvQpmTluSZl5Ht5kpJWPbXd-vpa4D3_nr9JAptvoh4PwYD1maiupGq_yfl0MMVZp1LmtceWCFYWHlx8dI9aXaAzKbVVbRNC5h-3OeNEx9CXZtZyM2juPvrlppmehySebu2f5qYe1Kb-Vis2EJg-yzfxtl5r4Q8w3-HV3-5oUY_ooy2aakB-gXag", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f198b46-1682-4172-8977-072443191347", "record_id": "flaws_cloudtrail:0000034:6f198b46-1682-4172-8977-072443191347", "row_index": 34, "timestamp": "2019-08-21T14:41:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f198b46-1682-4172-8977-072443191347", "eventTime": "2019-08-21T14:41:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3286fb7a-166a-4ce7-a89c-653ba0689eb4", "record_id": "flaws_cloudtrail:0000035:3286fb7a-166a-4ce7-a89c-653ba0689eb4", "row_index": 35, "timestamp": "2019-08-21T14:41:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3286fb7a-166a-4ce7-a89c-653ba0689eb4", "eventTime": "2019-08-21T14:41:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cHOL8pCh5u-N0AhFtF_JOT-T5ZMTlTOTqzQOSnTf8vRheyCv1O_eLMYQuf4wlfPwGuLinuRahTBH_WmyO9dOujuvm5OwDjvYZ76wpWZ3BI1n0f2Vp3Ga6igGisgOL3xoVe6S2anoA-7Ce0PijGluXhiIytnbPxbT4_A_uMnto_4aNLpZb8x2q0NLPeP30P5TyfoXuBYFDHwHG1xsvWyW0UzgZhModeizXU6xMiBVN-zyp8a-MJJjk9jr1YVXgHSPLWf0k7EScJx0Dxu7BANkEM-xvOkdY9A0jtl1Z1lxZdhVh_Ayf6k5VRUPOZ0TKXfk3gNYPwJMYdOqEdHJumKl5gLDtxlZEvvCdnazvmhr7c7JuqRH6MNKbesfKroSFgIQGlpo0SGWbcRyErUOMOOv1Qid9_xA2EwX8VvLeXXHduqCQvnYUM6VUc9S1QCr_MvV3x0wxfq3oDHAMQwgF2WDEbBmRTIRWwVG4lrbI1ZePvQpmTluSZl5Ht5kpJWPbXd-vpa4D3_nr9JAptvoh4PwYD1maiupGq_yfl0MMVZp1LmtceWCFYWHlx8dI9aXaAzKbVVbRNC5h-3OeNEx9CXZtZyM2juPvrlppmehySebu2f5qYe1Kb-Vis2EJg-yzfxtl5r4Q8w3-HV3-5oUY_ooy2aakB-gXag", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a79593-344c-4db2-bcb1-3bab18b012f6", "record_id": "flaws_cloudtrail:0000036:7a79593-344c-4db2-bcb1-3bab18b012f6", "row_index": 36, "timestamp": "2019-08-21T14:41:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a79593-344c-4db2-bcb1-3bab18b012f6", "eventTime": "2019-08-21T14:41:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a79593-344c-4db2-bcb1-3bab18b012f6", "record_id": "flaws_cloudtrail:0000037:7a79593-344c-4db2-bcb1-3bab18b012f6", "row_index": 37, "timestamp": "2019-08-21T14:41:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a79593-344c-4db2-bcb1-3bab18b012f6", "eventTime": "2019-08-21T14:41:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0327f297-91d7-4f7d-894d-77d0c09c5007", "record_id": "flaws_cloudtrail:0000038:0327f297-91d7-4f7d-894d-77d0c09c5007", "row_index": 38, "timestamp": "2019-08-21T14:41:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0327f297-91d7-4f7d-894d-77d0c09c5007", "eventTime": "2019-08-21T14:41:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0327f297-91d7-4f7d-894d-77d0c09c5007", "record_id": "flaws_cloudtrail:0000039:0327f297-91d7-4f7d-894d-77d0c09c5007", "row_index": 39, "timestamp": "2019-08-21T14:41:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0327f297-91d7-4f7d-894d-77d0c09c5007", "eventTime": "2019-08-21T14:41:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "record_id": "flaws_cloudtrail:0000040:64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "row_index": 40, "timestamp": "2019-08-21T14:41:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "eventTime": "2019-08-21T14:41:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "record_id": "flaws_cloudtrail:0000041:64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "row_index": 41, "timestamp": "2019-08-21T14:41:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64cd2c8c-46c5-4d24-bb59-c57e7b3f482d", "eventTime": "2019-08-21T14:41:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2187b0a-a472-47a4-9157-307da80fa9bc", "record_id": "flaws_cloudtrail:0000042:a2187b0a-a472-47a4-9157-307da80fa9bc", "row_index": 42, "timestamp": "2019-08-21T14:41:29Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 540, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2187b0a-a472-47a4-9157-307da80fa9bc", "eventTime": "2019-08-21T14:41:29Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ac6a974-df16-46e1-9e29-0bf5a024d38e", "record_id": "flaws_cloudtrail:0000043:0ac6a974-df16-46e1-9e29-0bf5a024d38e", "row_index": 43, "timestamp": "2019-08-21T14:41:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ac6a974-df16-46e1-9e29-0bf5a024d38e", "eventTime": "2019-08-21T14:41:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: K5q8I2P8sXTOzWpcT3FEy1ozRZ9ipJTgrIiuVbFz3SWGoiyfHJATX7SFHEFKm5Ld9pcM71JhSCmX5nIK0OxQcXIqXzFc7Ser0Jyn7WpoVxE9edj02cpHENb8GdH6OgSLxSscdMQaEM-FHZaMPNyXLWdl0DLKvWbmoVYrg6gYPeyXpy-33cDBPw0trHM8HN7X_a3tvWEIt4TvNIwxSV6Pp7eQLdtIat8AAZ_3i8Hj8Gf_MznZmx0WLZ263ZYMXttWA34tB9A40bVO21H5OPuAWgU80sXDhwSCm3ZL8R7BkOdr7z30zpuznrM9lhbbtzXtf4VEmOvXvHF1BjWQnsXYwjwKrPecGN-NiIqNuZ_iLh9B3lsHhr3AkWf2K7K0JKiozW4oT4wzdUp9HdHRWty4V3cq48b45oZT-smSq1dUCbTMWLAf2ARfQJ_0yoJ-vmR2JuiTy4qLRUWY9zBH-3V6fRmbOSK49fX-RObGg8YjDVAYFb7b0yeU0I6MXVQ0Ye4bI3L5VbWtpARpU7nwReM5QEYgOnK8z9Iu1Zj2v5UmyB_2KRkeAfFR0Ar5r9Pqne52sJOsxD11PqdtO_z725E89GxLcFE3e0N2ti_DKqLOvrzLpKWVZ8ZgC_oFCod6qeoejfCgSXdKpNK4QzK02xcoDGRRcOHnnbsI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ac6a974-df16-46e1-9e29-0bf5a024d38e", "record_id": "flaws_cloudtrail:0000044:0ac6a974-df16-46e1-9e29-0bf5a024d38e", "row_index": 44, "timestamp": "2019-08-21T14:41:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ac6a974-df16-46e1-9e29-0bf5a024d38e", "eventTime": "2019-08-21T14:41:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: K5q8I2P8sXTOzWpcT3FEy1ozRZ9ipJTgrIiuVbFz3SWGoiyfHJATX7SFHEFKm5Ld9pcM71JhSCmX5nIK0OxQcXIqXzFc7Ser0Jyn7WpoVxE9edj02cpHENb8GdH6OgSLxSscdMQaEM-FHZaMPNyXLWdl0DLKvWbmoVYrg6gYPeyXpy-33cDBPw0trHM8HN7X_a3tvWEIt4TvNIwxSV6Pp7eQLdtIat8AAZ_3i8Hj8Gf_MznZmx0WLZ263ZYMXttWA34tB9A40bVO21H5OPuAWgU80sXDhwSCm3ZL8R7BkOdr7z30zpuznrM9lhbbtzXtf4VEmOvXvHF1BjWQnsXYwjwKrPecGN-NiIqNuZ_iLh9B3lsHhr3AkWf2K7K0JKiozW4oT4wzdUp9HdHRWty4V3cq48b45oZT-smSq1dUCbTMWLAf2ARfQJ_0yoJ-vmR2JuiTy4qLRUWY9zBH-3V6fRmbOSK49fX-RObGg8YjDVAYFb7b0yeU0I6MXVQ0Ye4bI3L5VbWtpARpU7nwReM5QEYgOnK8z9Iu1Zj2v5UmyB_2KRkeAfFR0Ar5r9Pqne52sJOsxD11PqdtO_z725E89GxLcFE3e0N2ti_DKqLOvrzLpKWVZ8ZgC_oFCod6qeoejfCgSXdKpNK4QzK02xcoDGRRcOHnnbsI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08a780c-e5ea-489a-8479-d9b63b265486", "record_id": "flaws_cloudtrail:0000045:d08a780c-e5ea-489a-8479-d9b63b265486", "row_index": 45, "timestamp": "2019-08-21T14:41:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08a780c-e5ea-489a-8479-d9b63b265486", "eventTime": "2019-08-21T14:41:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08a780c-e5ea-489a-8479-d9b63b265486", "record_id": "flaws_cloudtrail:0000046:d08a780c-e5ea-489a-8479-d9b63b265486", "row_index": 46, "timestamp": "2019-08-21T14:41:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08a780c-e5ea-489a-8479-d9b63b265486", "eventTime": "2019-08-21T14:41:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "record_id": "flaws_cloudtrail:0000047:b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "row_index": 47, "timestamp": "2019-08-21T14:41:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "eventTime": "2019-08-21T14:41:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "record_id": "flaws_cloudtrail:0000048:b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "row_index": 48, "timestamp": "2019-08-21T14:41:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f1b0f8-6322-4cba-ab5d-26cb9aa354f5", "eventTime": "2019-08-21T14:41:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42886f8e-4615-4e48-964a-421e3738a976", "record_id": "flaws_cloudtrail:0000049:42886f8e-4615-4e48-964a-421e3738a976", "row_index": 49, "timestamp": "2019-08-21T14:41:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42886f8e-4615-4e48-964a-421e3738a976", "eventTime": "2019-08-21T14:41:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42886f8e-4615-4e48-964a-421e3738a976", "record_id": "flaws_cloudtrail:0000050:42886f8e-4615-4e48-964a-421e3738a976", "row_index": 50, "timestamp": "2019-08-21T14:41:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42886f8e-4615-4e48-964a-421e3738a976", "eventTime": "2019-08-21T14:41:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22a842e-d46d-4fbb-8112-928cadcf2d0f", "record_id": "flaws_cloudtrail:0000051:e22a842e-d46d-4fbb-8112-928cadcf2d0f", "row_index": 51, "timestamp": "2019-08-21T14:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22a842e-d46d-4fbb-8112-928cadcf2d0f", "eventTime": "2019-08-21T14:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "record_id": "flaws_cloudtrail:0000052:484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "row_index": 52, "timestamp": "2019-08-21T14:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "eventTime": "2019-08-21T14:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cJsStrr2LtufsVYNGBY-Xvyl7SoI6lt5dJbtdHmbgIWSP19Lg1XaCh9r6u-gQJy8GX6b7arkZFeADKkTAnLAFZvzT07uKchkaha75LxNOelFDHspKpIAcJFedGidSLuth387OK5wwI0-pxy0v2R4XH1_QT5CP5OMIzTtI3lzRdFZl6iyvOLgPbTsJI0QHFtwWyWjD1Wm-7vBCBA2OfNvoclNrwS_Bvop0v8q2SnL0ySjzIrtm0A93Cb_tpk0ZGwJg-brjoouxASzAWoJ8uJJiztcph1zOKfFiT7IrmfDgOArkq_6ZCRelu7NJVloNnT_tRCKf874wre9XyBcmnVloCNuSY3Sdrk4hXtvhhqB1z4-zAwjz1qeYKttRRRzjIykWSSobJQNT35hkdRoWI1eOEqrFNX0lexOXzwicc-JgEYi978Z-xdAPSGW4olH0UpPstpZQxdUtRfhQUZ2P7mHydw3Vnn5DQJg0HZI_hqXw4zbz4K9_dxf1LZwZcWKIVRsIGmtxhCU0ViUr8TPnuMhm4VfgCo2IbE-r_T1QFWHUh8e_y3Cyasop-wpk4tAleZdDp3eB4HrjGA1V9oKYzOlHu3BqdAqT7yElOO0h_yzo0WT_2GlnqYh4lVjlUdVIFLsrI66aFtbi8s3qY6pyi7SZWEvni_IUyo", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22a842e-d46d-4fbb-8112-928cadcf2d0f", "record_id": "flaws_cloudtrail:0000053:e22a842e-d46d-4fbb-8112-928cadcf2d0f", "row_index": 53, "timestamp": "2019-08-21T14:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22a842e-d46d-4fbb-8112-928cadcf2d0f", "eventTime": "2019-08-21T14:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "record_id": "flaws_cloudtrail:0000054:484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "row_index": 54, "timestamp": "2019-08-21T14:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484a5765-7c0e-45a8-93c3-7a8ac788ee2f", "eventTime": "2019-08-21T14:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cJsStrr2LtufsVYNGBY-Xvyl7SoI6lt5dJbtdHmbgIWSP19Lg1XaCh9r6u-gQJy8GX6b7arkZFeADKkTAnLAFZvzT07uKchkaha75LxNOelFDHspKpIAcJFedGidSLuth387OK5wwI0-pxy0v2R4XH1_QT5CP5OMIzTtI3lzRdFZl6iyvOLgPbTsJI0QHFtwWyWjD1Wm-7vBCBA2OfNvoclNrwS_Bvop0v8q2SnL0ySjzIrtm0A93Cb_tpk0ZGwJg-brjoouxASzAWoJ8uJJiztcph1zOKfFiT7IrmfDgOArkq_6ZCRelu7NJVloNnT_tRCKf874wre9XyBcmnVloCNuSY3Sdrk4hXtvhhqB1z4-zAwjz1qeYKttRRRzjIykWSSobJQNT35hkdRoWI1eOEqrFNX0lexOXzwicc-JgEYi978Z-xdAPSGW4olH0UpPstpZQxdUtRfhQUZ2P7mHydw3Vnn5DQJg0HZI_hqXw4zbz4K9_dxf1LZwZcWKIVRsIGmtxhCU0ViUr8TPnuMhm4VfgCo2IbE-r_T1QFWHUh8e_y3Cyasop-wpk4tAleZdDp3eB4HrjGA1V9oKYzOlHu3BqdAqT7yElOO0h_yzo0WT_2GlnqYh4lVjlUdVIFLsrI66aFtbi8s3qY6pyi7SZWEvni_IUyo", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ee7d3e5-6c70-498f-9edd-1d805a93034c", "record_id": "flaws_cloudtrail:0000055:7ee7d3e5-6c70-498f-9edd-1d805a93034c", "row_index": 55, "timestamp": "2019-08-21T14:41:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ee7d3e5-6c70-498f-9edd-1d805a93034c", "eventTime": "2019-08-21T14:41:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rywHs-v-GuGR4kZfG_qV_yz4lgM2GNu06XDMauWMFAUM9PW0SL61VRivSe0gusp04SV3IwE4bdrdow-8VhVlWOu9HozlBT3B8rka3TKzu_4ky5WjRFX2cwiR_HnzOagbLl5ZKyEcJ0tOj7CsZ8sy9udRr5eJRTov8TdTTy79PjgN68SK_7YpHI-vakWN1uvWHBejB09yPgHOmfwZogBgyBYhESsOYSCPJcidp_fQVK5CqCBhFgoqIFWOhSyoZBPg2dll3cqVebCCUD5gXg6FyRdaL71Wd3HMbooFCsR9LGfnlglJbGbqOM89E9WLJmLd4qqmcvw17-qqD9C6_LcT0QOqzZBYgPTM_pVx2f58uDi_8JY8e67TJwzH9DffXKkqyeedVOwZT9DTz5IEzlHyEdAbkLN5ovKaPbRYcImVKtsOxWQb5JuMBavCfIz4QLOtreM4VVfO0QFU45CoaD_J17DGEmApu8MRRntxgpMJLaevz6CgzC9-gPe_g0Ddev_0fvXb95m63IoHUjpPD7yoTRBCICDhcVv_M9yAfFflXQ2MyJe7KHH34SyXLZH_sRm3JV1VG9ZSZIWCKW5rc7Vr_m1LvAGlQYQedi5eCwOrcaMb14UrDqy38AWBOTXlDpx4-Vo4Sudg0li_1YLZD_YR5DVc78xAgf9P", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d1c3d3-7153-4725-8ce4-143776fccab66", "record_id": "flaws_cloudtrail:0000056:e2d1c3d3-7153-4725-8ce4-143776fccab66", "row_index": 56, "timestamp": "2019-08-21T14:41:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d1c3d3-7153-4725-8ce4-143776fccab66", "eventTime": "2019-08-21T14:41:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dBWvi2fPm7MODRAZTtapa2I1eIXJBL8M06G5QeJsTto7Wh6aLa15v2BvP9BMuMHp1KF-sXp7iOvjj4nvlx_46-2LG0oAOPOpFk5alVHW6i-PA7_HCUkKxBD3tQ6r54QiDxI4h-XKa1z9Tajy6bmRdyIzKrmyx9v4jDx39_jozcPqYXKrF2odZ8vb4AlEduEhBxA0M3Z_EXaizcBNU3nxG6Qyo8udHEVUIRevd7tKeROWsekRICdMZLohLWYYloCqeU2iE6YTE4E-AVyJZF5au0GHh622GmuEi_G3fVj16Ig5ypRIs3l8QXw_r58Uv8mOCIeEXLRNZYFHHudBScAZNdHj1th9gAevDqhkhqAiAJ8LS08W0pv_OCHdjZKEx9ClfEhKWZ7zjxvSTKv-J-VgYbbzofwQmbec11B0janooQSEQHDC3R6NmPD4Osb_FLb0ZMPyIUPzkKe9sXcC4WESe5g_7Bc8aZUFE43lCi8SqLDCTpCeQ5cVQfW8H1TMZrXvjbpk15zKcBd4-c_3IHyJas0oIS-hHhKS4YUKNLjZJkSmeADu1nNetzeQt9LJXbzpcm6vHOIqJ0ifRiMwZCGBKQ3g8qtlXXkMvR6CZG8Cff7cFGV7TyRjLce98_pBdkDRLNqMHDhv2sivI33sPl2aQIxoC5lthi0o", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ee7d3e5-6c70-498f-9edd-1d805a93034c", "record_id": "flaws_cloudtrail:0000057:7ee7d3e5-6c70-498f-9edd-1d805a93034c", "row_index": 57, "timestamp": "2019-08-21T14:41:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ee7d3e5-6c70-498f-9edd-1d805a93034c", "eventTime": "2019-08-21T14:41:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rywHs-v-GuGR4kZfG_qV_yz4lgM2GNu06XDMauWMFAUM9PW0SL61VRivSe0gusp04SV3IwE4bdrdow-8VhVlWOu9HozlBT3B8rka3TKzu_4ky5WjRFX2cwiR_HnzOagbLl5ZKyEcJ0tOj7CsZ8sy9udRr5eJRTov8TdTTy79PjgN68SK_7YpHI-vakWN1uvWHBejB09yPgHOmfwZogBgyBYhESsOYSCPJcidp_fQVK5CqCBhFgoqIFWOhSyoZBPg2dll3cqVebCCUD5gXg6FyRdaL71Wd3HMbooFCsR9LGfnlglJbGbqOM89E9WLJmLd4qqmcvw17-qqD9C6_LcT0QOqzZBYgPTM_pVx2f58uDi_8JY8e67TJwzH9DffXKkqyeedVOwZT9DTz5IEzlHyEdAbkLN5ovKaPbRYcImVKtsOxWQb5JuMBavCfIz4QLOtreM4VVfO0QFU45CoaD_J17DGEmApu8MRRntxgpMJLaevz6CgzC9-gPe_g0Ddev_0fvXb95m63IoHUjpPD7yoTRBCICDhcVv_M9yAfFflXQ2MyJe7KHH34SyXLZH_sRm3JV1VG9ZSZIWCKW5rc7Vr_m1LvAGlQYQedi5eCwOrcaMb14UrDqy38AWBOTXlDpx4-Vo4Sudg0li_1YLZD_YR5DVc78xAgf9P", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d1c3d3-7153-4725-8ce4-143776fccab66", "record_id": "flaws_cloudtrail:0000058:e2d1c3d3-7153-4725-8ce4-143776fccab66", "row_index": 58, "timestamp": "2019-08-21T14:41:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d1c3d3-7153-4725-8ce4-143776fccab66", "eventTime": "2019-08-21T14:41:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dBWvi2fPm7MODRAZTtapa2I1eIXJBL8M06G5QeJsTto7Wh6aLa15v2BvP9BMuMHp1KF-sXp7iOvjj4nvlx_46-2LG0oAOPOpFk5alVHW6i-PA7_HCUkKxBD3tQ6r54QiDxI4h-XKa1z9Tajy6bmRdyIzKrmyx9v4jDx39_jozcPqYXKrF2odZ8vb4AlEduEhBxA0M3Z_EXaizcBNU3nxG6Qyo8udHEVUIRevd7tKeROWsekRICdMZLohLWYYloCqeU2iE6YTE4E-AVyJZF5au0GHh622GmuEi_G3fVj16Ig5ypRIs3l8QXw_r58Uv8mOCIeEXLRNZYFHHudBScAZNdHj1th9gAevDqhkhqAiAJ8LS08W0pv_OCHdjZKEx9ClfEhKWZ7zjxvSTKv-J-VgYbbzofwQmbec11B0janooQSEQHDC3R6NmPD4Osb_FLb0ZMPyIUPzkKe9sXcC4WESe5g_7Bc8aZUFE43lCi8SqLDCTpCeQ5cVQfW8H1TMZrXvjbpk15zKcBd4-c_3IHyJas0oIS-hHhKS4YUKNLjZJkSmeADu1nNetzeQt9LJXbzpcm6vHOIqJ0ifRiMwZCGBKQ3g8qtlXXkMvR6CZG8Cff7cFGV7TyRjLce98_pBdkDRLNqMHDhv2sivI33sPl2aQIxoC5lthi0o", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52827-20a9-4dbe-bb4d-e54b94221eef", "record_id": "flaws_cloudtrail:0000059:52827-20a9-4dbe-bb4d-e54b94221eef", "row_index": 59, "timestamp": "2019-08-21T14:41:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52827-20a9-4dbe-bb4d-e54b94221eef", "eventTime": "2019-08-21T14:41:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52827-20a9-4dbe-bb4d-e54b94221eef", "record_id": "flaws_cloudtrail:0000060:52827-20a9-4dbe-bb4d-e54b94221eef", "row_index": 60, "timestamp": "2019-08-21T14:41:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52827-20a9-4dbe-bb4d-e54b94221eef", "eventTime": "2019-08-21T14:41:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a629b08e-94a5-4e36-afa5-d45236e1", "record_id": "flaws_cloudtrail:0000061:a629b08e-94a5-4e36-afa5-d45236e1", "row_index": 61, "timestamp": "2019-08-21T14:41:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a629b08e-94a5-4e36-afa5-d45236e1", "eventTime": "2019-08-21T14:41:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zOFAFtDotWDiSvuGQCwLlJJOqWIPVuq0Jt1yBpUvdvW-v-eWraU0SUtT70hGkVQy7pAwzYFIx7v2-iKHQsVMuV95ZmhGxM2lBFnX6GKX-lvb64kcOG301AS89U05NK3w4wtk1v4LZ6feJsRhhq4BMhD6Wgb7qwlQtxvwnuli8a0H7c1_A0Ghp5fsr9yufsBQ7O9SSmnHlsdbOVKXaUIe__cZRbHeGaDBU59I9QLKcP4XCSs23_63185AeveZQhQ5uDcoSwBudwxGp8Z6lWXht7u5BsUoHBdbN6fbZNpM1GFezvZSkGgdJhaLzczB87ycYVspoQCsf56GtEFATYuZCd1V1TbKpZX_A5KaDXbNqSpB3D5ky0xpu0267qXCLnjNbWuOGSSaVcZ5rUVH4bzq3yGjUoSPHax82DkVKM92xhSN_DHnlVE_MYQMAvScGVe-B64-7-tIjurY94pQqbBEAkbPICubxo3z6Ok1JM5eKGQe8_1va7tl5XT8cjHGvEiMnjYY_JH_2Rw1J_GwTMR8HwicnQ60vTRkz5ESMTZwr0X70Tij0fGpz_BwPXXvieBijE8QSiQJWeDogRvBG5HlVBHhLijpd1GMDkXzcWQsU8yGSLOsk5ZZ_6_Z4u9KmgyAmh-QZSZ_29DRezu_Cv81juGu-OZyWw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a629b08e-94a5-4e36-afa5-d45236e1", "record_id": "flaws_cloudtrail:0000062:a629b08e-94a5-4e36-afa5-d45236e1", "row_index": 62, "timestamp": "2019-08-21T14:41:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a629b08e-94a5-4e36-afa5-d45236e1", "eventTime": "2019-08-21T14:41:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zOFAFtDotWDiSvuGQCwLlJJOqWIPVuq0Jt1yBpUvdvW-v-eWraU0SUtT70hGkVQy7pAwzYFIx7v2-iKHQsVMuV95ZmhGxM2lBFnX6GKX-lvb64kcOG301AS89U05NK3w4wtk1v4LZ6feJsRhhq4BMhD6Wgb7qwlQtxvwnuli8a0H7c1_A0Ghp5fsr9yufsBQ7O9SSmnHlsdbOVKXaUIe__cZRbHeGaDBU59I9QLKcP4XCSs23_63185AeveZQhQ5uDcoSwBudwxGp8Z6lWXht7u5BsUoHBdbN6fbZNpM1GFezvZSkGgdJhaLzczB87ycYVspoQCsf56GtEFATYuZCd1V1TbKpZX_A5KaDXbNqSpB3D5ky0xpu0267qXCLnjNbWuOGSSaVcZ5rUVH4bzq3yGjUoSPHax82DkVKM92xhSN_DHnlVE_MYQMAvScGVe-B64-7-tIjurY94pQqbBEAkbPICubxo3z6Ok1JM5eKGQe8_1va7tl5XT8cjHGvEiMnjYY_JH_2Rw1J_GwTMR8HwicnQ60vTRkz5ESMTZwr0X70Tij0fGpz_BwPXXvieBijE8QSiQJWeDogRvBG5HlVBHhLijpd1GMDkXzcWQsU8yGSLOsk5ZZ_6_Z4u9KmgyAmh-QZSZ_29DRezu_Cv81juGu-OZyWw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ee9989-edc6-440c-a86e-dd078e81bc75", "record_id": "flaws_cloudtrail:0000063:b9ee9989-edc6-440c-a86e-dd078e81bc75", "row_index": 63, "timestamp": "2019-08-21T14:41:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ee9989-edc6-440c-a86e-dd078e81bc75", "eventTime": "2019-08-21T14:41:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ee9989-edc6-440c-a86e-dd078e81bc75", "record_id": "flaws_cloudtrail:0000064:b9ee9989-edc6-440c-a86e-dd078e81bc75", "row_index": 64, "timestamp": "2019-08-21T14:41:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ee9989-edc6-440c-a86e-dd078e81bc75", "eventTime": "2019-08-21T14:41:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb243545-65dd-4d5c-92d7-5e495bfd1753", "record_id": "flaws_cloudtrail:0000065:6cb243545-65dd-4d5c-92d7-5e495bfd1753", "row_index": 65, "timestamp": "2019-08-21T14:41:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb243545-65dd-4d5c-92d7-5e495bfd1753", "eventTime": "2019-08-21T14:41:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb243545-65dd-4d5c-92d7-5e495bfd1753", "record_id": "flaws_cloudtrail:0000066:6cb243545-65dd-4d5c-92d7-5e495bfd1753", "row_index": 66, "timestamp": "2019-08-21T14:41:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb243545-65dd-4d5c-92d7-5e495bfd1753", "eventTime": "2019-08-21T14:41:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e34760-7617-432b-ba87-a42f4099e0b2", "record_id": "flaws_cloudtrail:0000067:f3e34760-7617-432b-ba87-a42f4099e0b2", "row_index": 67, "timestamp": "2019-08-21T14:41:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e34760-7617-432b-ba87-a42f4099e0b2", "eventTime": "2019-08-21T14:41:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e34760-7617-432b-ba87-a42f4099e0b2", "record_id": "flaws_cloudtrail:0000068:f3e34760-7617-432b-ba87-a42f4099e0b2", "row_index": 68, "timestamp": "2019-08-21T14:41:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e34760-7617-432b-ba87-a42f4099e0b2", "eventTime": "2019-08-21T14:41:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72ab1361-535d-44ce-95c2-2609c484242b", "record_id": "flaws_cloudtrail:0000069:72ab1361-535d-44ce-95c2-2609c484242b", "row_index": 69, "timestamp": "2019-08-21T14:41:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72ab1361-535d-44ce-95c2-2609c484242b", "eventTime": "2019-08-21T14:41:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72ab1361-535d-44ce-95c2-2609c484242b", "record_id": "flaws_cloudtrail:0000070:72ab1361-535d-44ce-95c2-2609c484242b", "row_index": 70, "timestamp": "2019-08-21T14:41:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72ab1361-535d-44ce-95c2-2609c484242b", "eventTime": "2019-08-21T14:41:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12993e9-81e1-49a7-b60c-63d07c112fff", "record_id": "flaws_cloudtrail:0000071:f12993e9-81e1-49a7-b60c-63d07c112fff", "row_index": 71, "timestamp": "2019-08-21T14:41:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12993e9-81e1-49a7-b60c-63d07c112fff", "eventTime": "2019-08-21T14:41:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12993e9-81e1-49a7-b60c-63d07c112fff", "record_id": "flaws_cloudtrail:0000072:f12993e9-81e1-49a7-b60c-63d07c112fff", "row_index": 72, "timestamp": "2019-08-21T14:41:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12993e9-81e1-49a7-b60c-63d07c112fff", "eventTime": "2019-08-21T14:41:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d663d7e-1897-4e60-a61e-afad9948a208", "record_id": "flaws_cloudtrail:0000073:3d663d7e-1897-4e60-a61e-afad9948a208", "row_index": 73, "timestamp": "2019-08-21T14:41:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d663d7e-1897-4e60-a61e-afad9948a208", "eventTime": "2019-08-21T14:41:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d663d7e-1897-4e60-a61e-afad9948a208", "record_id": "flaws_cloudtrail:0000074:3d663d7e-1897-4e60-a61e-afad9948a208", "row_index": 74, "timestamp": "2019-08-21T14:41:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d663d7e-1897-4e60-a61e-afad9948a208", "eventTime": "2019-08-21T14:41:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e64d37-15e4-4cd6-943e-91199944489c", "record_id": "flaws_cloudtrail:0000075:19e64d37-15e4-4cd6-943e-91199944489c", "row_index": 75, "timestamp": "2019-08-21T14:42:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e64d37-15e4-4cd6-943e-91199944489c", "eventTime": "2019-08-21T14:42:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dpPps-KCjCYp2rcZaSWb2tTtPydRSNI-RoCKm3TuiDqkriBe4wuw5ARuxnXmevuEy4iRbXgXDxIQLAStp48l-ubPD-mh0nHCIwiIuaMqpQDGeIFrF_N4uzpOLTFoxnYfJ3FLmOxNXy2HH2UPzTzaqdcaKZd-2QwTPgu1bCBH9yfFxfwFpLSYtX9au3VCpckVmRO2CyQIY7W_OOmhkCuSaKKqntfal9a_f-R_TSDc1JlSIhtd-TowK5U-gYQ6zZDmLsKs59B7YsZDq2srIYh0upbDDE4_9DMJhl04H_XsL43A2Z4Erk5mxWUPtgMzTuWi9v49giuT6B8CkwB2GFI61zCFFDekGybidrDZnQotNrefxdGdqNp8XdRO9SDosl1EMrhGnzQkQtetKBt3DBDDKe09-bZtaAPQI3E1xbA-lb5tXZfH5Ab_VynCY4k7k_V-1kRME99Ou-fzSQou67s8Tvdbna5bEEsAnaKlESzTQleuyLJSaUquGBJeMa9XEmirxidf2P6Urdto-9_0t2eQHBhBd4nf7QQtkHF8pXwXTt_T-yPJ5dI9mkNrUQdKbYj-428cg6-UGgcmeTD4buBSn6JScZOM9rtBXg8l63ZLWFZPdMfoJkEfkEQ6pK7Wx_LaPB-uomNHST1fqjaK7p3Lm-4eaoRTYw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e64d37-15e4-4cd6-943e-91199944489c", "record_id": "flaws_cloudtrail:0000076:19e64d37-15e4-4cd6-943e-91199944489c", "row_index": 76, "timestamp": "2019-08-21T14:42:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e64d37-15e4-4cd6-943e-91199944489c", "eventTime": "2019-08-21T14:42:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dpPps-KCjCYp2rcZaSWb2tTtPydRSNI-RoCKm3TuiDqkriBe4wuw5ARuxnXmevuEy4iRbXgXDxIQLAStp48l-ubPD-mh0nHCIwiIuaMqpQDGeIFrF_N4uzpOLTFoxnYfJ3FLmOxNXy2HH2UPzTzaqdcaKZd-2QwTPgu1bCBH9yfFxfwFpLSYtX9au3VCpckVmRO2CyQIY7W_OOmhkCuSaKKqntfal9a_f-R_TSDc1JlSIhtd-TowK5U-gYQ6zZDmLsKs59B7YsZDq2srIYh0upbDDE4_9DMJhl04H_XsL43A2Z4Erk5mxWUPtgMzTuWi9v49giuT6B8CkwB2GFI61zCFFDekGybidrDZnQotNrefxdGdqNp8XdRO9SDosl1EMrhGnzQkQtetKBt3DBDDKe09-bZtaAPQI3E1xbA-lb5tXZfH5Ab_VynCY4k7k_V-1kRME99Ou-fzSQou67s8Tvdbna5bEEsAnaKlESzTQleuyLJSaUquGBJeMa9XEmirxidf2P6Urdto-9_0t2eQHBhBd4nf7QQtkHF8pXwXTt_T-yPJ5dI9mkNrUQdKbYj-428cg6-UGgcmeTD4buBSn6JScZOM9rtBXg8l63ZLWFZPdMfoJkEfkEQ6pK7Wx_LaPB-uomNHST1fqjaK7p3Lm-4eaoRTYw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "record_id": "flaws_cloudtrail:0000077:408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "row_index": 77, "timestamp": "2019-08-21T14:42:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "eventTime": "2019-08-21T14:42:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "record_id": "flaws_cloudtrail:0000078:408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "row_index": 78, "timestamp": "2019-08-21T14:42:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "408d8d56-8e99-4b85-8d54-8b66a7dccd0c", "eventTime": "2019-08-21T14:42:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7708a43-7bfd-4765-863e-9e8392259e24", "record_id": "flaws_cloudtrail:0000079:a7708a43-7bfd-4765-863e-9e8392259e24", "row_index": 79, "timestamp": "2019-08-21T14:42:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7708a43-7bfd-4765-863e-9e8392259e24", "eventTime": "2019-08-21T14:42:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7708a43-7bfd-4765-863e-9e8392259e24", "record_id": "flaws_cloudtrail:0000080:a7708a43-7bfd-4765-863e-9e8392259e24", "row_index": 80, "timestamp": "2019-08-21T14:42:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7708a43-7bfd-4765-863e-9e8392259e24", "eventTime": "2019-08-21T14:42:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1063fa-ade9-4acb-95f8-420129c44426", "record_id": "flaws_cloudtrail:0000081:4a1063fa-ade9-4acb-95f8-420129c44426", "row_index": 81, "timestamp": "2019-08-21T14:42:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1063fa-ade9-4acb-95f8-420129c44426", "eventTime": "2019-08-21T14:42:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1063fa-ade9-4acb-95f8-420129c44426", "record_id": "flaws_cloudtrail:0000082:4a1063fa-ade9-4acb-95f8-420129c44426", "row_index": 82, "timestamp": "2019-08-21T14:42:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1063fa-ade9-4acb-95f8-420129c44426", "eventTime": "2019-08-21T14:42:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5951e85b-407c-45d7-9123-f00118c2b61", "record_id": "flaws_cloudtrail:0000083:5951e85b-407c-45d7-9123-f00118c2b61", "row_index": 83, "timestamp": "2019-08-21T14:42:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5951e85b-407c-45d7-9123-f00118c2b61", "eventTime": "2019-08-21T14:42:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA48Y8FD9X83T48Z7W", "expiration": "Aug 22, 2019 2:42:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59484a19-3e3d-4175-8719-7523d11431d", "record_id": "flaws_cloudtrail:0000084:59484a19-3e3d-4175-8719-7523d11431d", "row_index": 84, "timestamp": "2019-08-21T14:42:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA48Y8FD9X83T48Z7W", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "81.245.254.3", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59484a19-3e3d-4175-8719-7523d11431d", "eventTime": "2019-08-21T14:42:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "81.245.254.3", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA48Y8FD9X83T48Z7W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T14:42:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/21/[$LATEST]6cdc8ed504bedff20e97d407e45f7ed4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5951e85b-407c-45d7-9123-f00118c2b61", "record_id": "flaws_cloudtrail:0000085:5951e85b-407c-45d7-9123-f00118c2b61", "row_index": 85, "timestamp": "2019-08-21T14:42:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5951e85b-407c-45d7-9123-f00118c2b61", "eventTime": "2019-08-21T14:42:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA48Y8FD9X83T48Z7W", "expiration": "Aug 22, 2019 2:42:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59484a19-3e3d-4175-8719-7523d11431d", "record_id": "flaws_cloudtrail:0000086:59484a19-3e3d-4175-8719-7523d11431d", "row_index": 86, "timestamp": "2019-08-21T14:42:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA48Y8FD9X83T48Z7W", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "81.245.254.3", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59484a19-3e3d-4175-8719-7523d11431d", "eventTime": "2019-08-21T14:42:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "81.245.254.3", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA48Y8FD9X83T48Z7W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T14:42:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/21/[$LATEST]6cdc8ed504bedff20e97d407e45f7ed4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a038060-3925-415b-938b-4bd6a39e396b", "record_id": "flaws_cloudtrail:0000087:4a038060-3925-415b-938b-4bd6a39e396b", "row_index": 87, "timestamp": "2019-08-21T14:42:18Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 540, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a038060-3925-415b-938b-4bd6a39e396b", "eventTime": "2019-08-21T14:42:18Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "843b00a1-95a0-42e8-bde0-c06104bb", "record_id": "flaws_cloudtrail:0000088:843b00a1-95a0-42e8-bde0-c06104bb", "row_index": 88, "timestamp": "2019-08-21T14:42:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "843b00a1-95a0-42e8-bde0-c06104bb", "eventTime": "2019-08-21T14:42:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: I1moCvX7JyZUbAWtINhi7v1LwETaAgDE2Cl_yXqfbDuzn1LkipW_I3l8CGSGxZYW1QorRL4qYjC_CaJbto_3hAtAEccDvJkJKkW-IuyI-kvDmX8nAP7Q6t6oH-982g7PV1bG70hofahmvZtyPwcBHjmjRqEnwugFZWExfCJIkDMEJ-VXGWm19wgBfyCimE5xJySaTlajV7tw8p9PGnJsiqBM14LH50tOoq5g_cok8BX_FGcnbSkPSWmIiiRti1G5KAWg2-gWktTnDsd9rHN2kU3fc1Rp7M_um_Ii4Jbs6EoWumYfHNBnGBkuNv1ZNwklHEnuyRrYlakgLzBTBKde7RjSbu_Q_dUIQDgSdIoCRZX1uI2dGWXvgj3oP_shVjoddhjJr3_JZc7wMqLVD-ttp2X_bbViZLLvgzSptC_slqK0Hde-_M51ka92z-VV28pXl1QBlQCqtJQ1_qylvHthL5Ule3BEjYGe5nO8Nr-x-mdJejjuAx34ZxDWG8zZDZ4ihz4Oq0nyCLnaMiEcaPWctUr6k7U2wC9g0vOq8QlHnm0pVHdRwtpTb38c9b-qlwW-1QFOd73dJPjz_l-eVt5Vyr_qT4QT3zIrvtht1Gq7Uvy6o8xfX6KH61PKiSJC26Qynn4PXQRtbuVYn0jNzYmr4fmfhVYDFVrd", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "843b00a1-95a0-42e8-bde0-c06104bb", "record_id": "flaws_cloudtrail:0000089:843b00a1-95a0-42e8-bde0-c06104bb", "row_index": 89, "timestamp": "2019-08-21T14:42:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "843b00a1-95a0-42e8-bde0-c06104bb", "eventTime": "2019-08-21T14:42:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: I1moCvX7JyZUbAWtINhi7v1LwETaAgDE2Cl_yXqfbDuzn1LkipW_I3l8CGSGxZYW1QorRL4qYjC_CaJbto_3hAtAEccDvJkJKkW-IuyI-kvDmX8nAP7Q6t6oH-982g7PV1bG70hofahmvZtyPwcBHjmjRqEnwugFZWExfCJIkDMEJ-VXGWm19wgBfyCimE5xJySaTlajV7tw8p9PGnJsiqBM14LH50tOoq5g_cok8BX_FGcnbSkPSWmIiiRti1G5KAWg2-gWktTnDsd9rHN2kU3fc1Rp7M_um_Ii4Jbs6EoWumYfHNBnGBkuNv1ZNwklHEnuyRrYlakgLzBTBKde7RjSbu_Q_dUIQDgSdIoCRZX1uI2dGWXvgj3oP_shVjoddhjJr3_JZc7wMqLVD-ttp2X_bbViZLLvgzSptC_slqK0Hde-_M51ka92z-VV28pXl1QBlQCqtJQ1_qylvHthL5Ule3BEjYGe5nO8Nr-x-mdJejjuAx34ZxDWG8zZDZ4ihz4Oq0nyCLnaMiEcaPWctUr6k7U2wC9g0vOq8QlHnm0pVHdRwtpTb38c9b-qlwW-1QFOd73dJPjz_l-eVt5Vyr_qT4QT3zIrvtht1Gq7Uvy6o8xfX6KH61PKiSJC26Qynn4PXQRtbuVYn0jNzYmr4fmfhVYDFVrd", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b232da53-9a07-46a1-a1c3-fdeccf0506c0", "record_id": "flaws_cloudtrail:0000090:b232da53-9a07-46a1-a1c3-fdeccf0506c0", "row_index": 90, "timestamp": "2019-08-21T14:42:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b232da53-9a07-46a1-a1c3-fdeccf0506c0", "eventTime": "2019-08-21T14:42:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cz-CIPJtlI2qfgrB5UUFLAcRlIOVGMFxzJFR_5lbWmigr46cvZpAfHrweOcWFCFYlGDd5pEJ564Z-rD-aVNEjEygEc3oFwQOYI3MixjyIU6s_1L3i_zn-unmixMS5k9kobYZOcW96D_3shhgI_BY68nsLMbQL5xyHwwSFZFt_9sQw6wXyNS9YFh3WBmn2i9NtGrIRSCJLBOGQRnQB0M_dBFQLaQHL4zn_oRZj2Xzc9DgnTLHx5Qj3h9WiwLufGYVl15C7Zpmm0Eu9X9p2xeWXpD7rPESmTtPwJ_9lE3Nnk6_HcLgVw6RNr_T9efJzStBJz-INCGX3c1xOj6cS53XjcZMUxylXEVgjF7e9P96q8w1QCUsxZ0KSYHPn-XxzcmH45ORLTqIemanxjFIumrXhaDlq5U9eENUyMk8XJZ9e8NjjvLTZPE7vQjIt4r6WRqfFRXL6aKUVeJG9xjsEJUCdIEpjFBYqEdF6EU15STzUyeEK5SRF0prZE_hyf1pjvPnWC4SWmBoD-wxzP-3J7Smy7UXtdFQ0LjmQZXRuDLRItfkG62gTypGAyZL64BP_f1PnlQHJmPziIVM1GcfqfEH2NELZi1o83NpQRgrPNYCAsKmd0Y3M3Ou5hRg36vHZDz0Wtb_vXKBMR8PK7CsSlusRkZIoxJoqzA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b232da53-9a07-46a1-a1c3-fdeccf0506c0", "record_id": "flaws_cloudtrail:0000091:b232da53-9a07-46a1-a1c3-fdeccf0506c0", "row_index": 91, "timestamp": "2019-08-21T14:42:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b232da53-9a07-46a1-a1c3-fdeccf0506c0", "eventTime": "2019-08-21T14:42:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cz-CIPJtlI2qfgrB5UUFLAcRlIOVGMFxzJFR_5lbWmigr46cvZpAfHrweOcWFCFYlGDd5pEJ564Z-rD-aVNEjEygEc3oFwQOYI3MixjyIU6s_1L3i_zn-unmixMS5k9kobYZOcW96D_3shhgI_BY68nsLMbQL5xyHwwSFZFt_9sQw6wXyNS9YFh3WBmn2i9NtGrIRSCJLBOGQRnQB0M_dBFQLaQHL4zn_oRZj2Xzc9DgnTLHx5Qj3h9WiwLufGYVl15C7Zpmm0Eu9X9p2xeWXpD7rPESmTtPwJ_9lE3Nnk6_HcLgVw6RNr_T9efJzStBJz-INCGX3c1xOj6cS53XjcZMUxylXEVgjF7e9P96q8w1QCUsxZ0KSYHPn-XxzcmH45ORLTqIemanxjFIumrXhaDlq5U9eENUyMk8XJZ9e8NjjvLTZPE7vQjIt4r6WRqfFRXL6aKUVeJG9xjsEJUCdIEpjFBYqEdF6EU15STzUyeEK5SRF0prZE_hyf1pjvPnWC4SWmBoD-wxzP-3J7Smy7UXtdFQ0LjmQZXRuDLRItfkG62gTypGAyZL64BP_f1PnlQHJmPziIVM1GcfqfEH2NELZi1o83NpQRgrPNYCAsKmd0Y3M3Ou5hRg36vHZDz0Wtb_vXKBMR8PK7CsSlusRkZIoxJoqzA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098624ee-9dcf-4c0f-94cd-8ec9e7880036", "record_id": "flaws_cloudtrail:0000092:098624ee-9dcf-4c0f-94cd-8ec9e7880036", "row_index": 92, "timestamp": "2019-08-21T14:42:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098624ee-9dcf-4c0f-94cd-8ec9e7880036", "eventTime": "2019-08-21T14:42:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098624ee-9dcf-4c0f-94cd-8ec9e7880036", "record_id": "flaws_cloudtrail:0000093:098624ee-9dcf-4c0f-94cd-8ec9e7880036", "row_index": 93, "timestamp": "2019-08-21T14:42:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098624ee-9dcf-4c0f-94cd-8ec9e7880036", "eventTime": "2019-08-21T14:42:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "record_id": "flaws_cloudtrail:0000094:1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "row_index": 94, "timestamp": "2019-08-21T14:42:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "eventTime": "2019-08-21T14:42:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RcdLHkJnVBP12KXDv-pIF-UQnKpBH4fYquGlzAEZjQ2lQDuqkfnNIyuZjk1w7NGbcMSx8vZnajIk8QcwOpZZNa4C725ml_5xko13dbutBiM7X8o8Qwvb5d2AICFYvPygpUU5pnufjmo6BCF9I5E1jsspGWpigPEohicGveSzlLoEtJ5S6IoAU5pLKj7cuveyXmvOVSISR0LwPGe_PR71bMByKvsBBgspuDjqhb0LydFBjSKUEQ_ndo3mmU9-Obxvq-heOIRDotktcQOVAYQc7Hjs9chNilqglnPfCqdHHyAMarIpM7wSUaGIISIKVp1e93hZRcWkyd6t4ddHP2z4Sy_3wWLsKfOjjMzbvr8MyPFkznAdK5GSWMyCjeXgquY1AOYSTIYFW0Bmf9oI05AdSSIYiNi9Gx8_kD50dvpZgWXfxjlxIzkjbn8S88lLp6-ciaxD4uk743zPdw0aKrK110czoZxymxItB1rhQfgMNZywZnhuKfMAopQDzLko8G3clK587xI0TNUvxJlzhkJGLXCD5KaOThTw0Ifd9JLSOQnHEyUGcpzTAqqQa4s5AYkFI73ofsGbUCeh00NOL2jLHYPq2RVCVBZ4jeHX5Xz2LknjndPyp6JQCIhn2485oHv9vlojM04D3ikecgXfK1hz8QInmyr_ux0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de0d187-07aa-4728-a1b4-f43bca98cccc", "record_id": "flaws_cloudtrail:0000095:8de0d187-07aa-4728-a1b4-f43bca98cccc", "row_index": 95, "timestamp": "2019-08-21T14:42:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de0d187-07aa-4728-a1b4-f43bca98cccc", "eventTime": "2019-08-21T14:42:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "record_id": "flaws_cloudtrail:0000096:1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "row_index": 96, "timestamp": "2019-08-21T14:42:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a3e0446-f8a3-4e9a-92f7-a3e116c01868", "eventTime": "2019-08-21T14:42:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RcdLHkJnVBP12KXDv-pIF-UQnKpBH4fYquGlzAEZjQ2lQDuqkfnNIyuZjk1w7NGbcMSx8vZnajIk8QcwOpZZNa4C725ml_5xko13dbutBiM7X8o8Qwvb5d2AICFYvPygpUU5pnufjmo6BCF9I5E1jsspGWpigPEohicGveSzlLoEtJ5S6IoAU5pLKj7cuveyXmvOVSISR0LwPGe_PR71bMByKvsBBgspuDjqhb0LydFBjSKUEQ_ndo3mmU9-Obxvq-heOIRDotktcQOVAYQc7Hjs9chNilqglnPfCqdHHyAMarIpM7wSUaGIISIKVp1e93hZRcWkyd6t4ddHP2z4Sy_3wWLsKfOjjMzbvr8MyPFkznAdK5GSWMyCjeXgquY1AOYSTIYFW0Bmf9oI05AdSSIYiNi9Gx8_kD50dvpZgWXfxjlxIzkjbn8S88lLp6-ciaxD4uk743zPdw0aKrK110czoZxymxItB1rhQfgMNZywZnhuKfMAopQDzLko8G3clK587xI0TNUvxJlzhkJGLXCD5KaOThTw0Ifd9JLSOQnHEyUGcpzTAqqQa4s5AYkFI73ofsGbUCeh00NOL2jLHYPq2RVCVBZ4jeHX5Xz2LknjndPyp6JQCIhn2485oHv9vlojM04D3ikecgXfK1hz8QInmyr_ux0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de0d187-07aa-4728-a1b4-f43bca98cccc", "record_id": "flaws_cloudtrail:0000097:8de0d187-07aa-4728-a1b4-f43bca98cccc", "row_index": 97, "timestamp": "2019-08-21T14:42:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de0d187-07aa-4728-a1b4-f43bca98cccc", "eventTime": "2019-08-21T14:42:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e15b2ea-c1de-412d-95e1-6602a612506", "record_id": "flaws_cloudtrail:0000098:8e15b2ea-c1de-412d-95e1-6602a612506", "row_index": 98, "timestamp": "2019-08-21T14:42:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e15b2ea-c1de-412d-95e1-6602a612506", "eventTime": "2019-08-21T14:42:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e15b2ea-c1de-412d-95e1-6602a612506", "record_id": "flaws_cloudtrail:0000099:8e15b2ea-c1de-412d-95e1-6602a612506", "row_index": 99, "timestamp": "2019-08-21T14:42:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e15b2ea-c1de-412d-95e1-6602a612506", "eventTime": "2019-08-21T14:42:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f27436b3-ad74-4eba-9e70-2db24c98c039", "record_id": "flaws_cloudtrail:0000100:f27436b3-ad74-4eba-9e70-2db24c98c039", "row_index": 100, "timestamp": "2019-08-21T14:42:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f27436b3-ad74-4eba-9e70-2db24c98c039", "eventTime": "2019-08-21T14:42:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd06f58c-064d-4ac6-a162-45e8797fa007", "record_id": "flaws_cloudtrail:0000101:dd06f58c-064d-4ac6-a162-45e8797fa007", "row_index": 101, "timestamp": "2019-08-21T14:42:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd06f58c-064d-4ac6-a162-45e8797fa007", "eventTime": "2019-08-21T14:42:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wk6FLhJ_ZtRjk4j7s53uvcIRl8jDQum_Aonlq9UVuhNpNZ58g8umwUldmD5iLs2ILPtGaSt7P6tQ0qYOen1eMZkFK11CZJjcA3mi0a9ZRlLbfsq3c3ls-0xb303uuHJEUYi_tmlixRYLXLf7W0ryTh5PwW8TF4geR6CyUZu4hxA2E3s_0kg8vO5WbEbuDrjH1RsT0Pc7V5JZrT8X2mY46ZUxnTbrN6D2rhq0zGdpvsn0eZm9iQBGv-u8EKbVl-ybbEa80JAnJ1nNoYHV6ezVa6En2YGbFBiP7g6itk9WbXx1yJEZrvDELD1siBvILwrmmNApi8l-IobGJtxJZTUwSjB4M1SHLNFOoESanSffc-iOz8a1bfm4o0e0Bg2rB6F3R59wjTsGiadyjhr2O6wuLckR5Ntj62adQMFQd8xYIJmDn_yXJLAPrgfurWzd-qtDpFLOOEqRDeWnDR_lgEng8EMdVpKmxun_1Nn4G-ryv1PsbU-i5uw808wyPb05CgLEatfQdLHccSBADHbAmLjUeQ_SPyNnMymts3bquR9CgoI-livB4pmbfvt6mxOiZrcaAWf2yqzRNHJiIvZSUqIKG8qth81K3YP5XEm7a_Bcux6syqNutOtMGlhbEu75V08Nf8A0i0mSMtJlSjoCIugPBI7jYJrNs_U", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f27436b3-ad74-4eba-9e70-2db24c98c039", "record_id": "flaws_cloudtrail:0000102:f27436b3-ad74-4eba-9e70-2db24c98c039", "row_index": 102, "timestamp": "2019-08-21T14:42:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f27436b3-ad74-4eba-9e70-2db24c98c039", "eventTime": "2019-08-21T14:42:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd06f58c-064d-4ac6-a162-45e8797fa007", "record_id": "flaws_cloudtrail:0000103:dd06f58c-064d-4ac6-a162-45e8797fa007", "row_index": 103, "timestamp": "2019-08-21T14:42:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd06f58c-064d-4ac6-a162-45e8797fa007", "eventTime": "2019-08-21T14:42:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wk6FLhJ_ZtRjk4j7s53uvcIRl8jDQum_Aonlq9UVuhNpNZ58g8umwUldmD5iLs2ILPtGaSt7P6tQ0qYOen1eMZkFK11CZJjcA3mi0a9ZRlLbfsq3c3ls-0xb303uuHJEUYi_tmlixRYLXLf7W0ryTh5PwW8TF4geR6CyUZu4hxA2E3s_0kg8vO5WbEbuDrjH1RsT0Pc7V5JZrT8X2mY46ZUxnTbrN6D2rhq0zGdpvsn0eZm9iQBGv-u8EKbVl-ybbEa80JAnJ1nNoYHV6ezVa6En2YGbFBiP7g6itk9WbXx1yJEZrvDELD1siBvILwrmmNApi8l-IobGJtxJZTUwSjB4M1SHLNFOoESanSffc-iOz8a1bfm4o0e0Bg2rB6F3R59wjTsGiadyjhr2O6wuLckR5Ntj62adQMFQd8xYIJmDn_yXJLAPrgfurWzd-qtDpFLOOEqRDeWnDR_lgEng8EMdVpKmxun_1Nn4G-ryv1PsbU-i5uw808wyPb05CgLEatfQdLHccSBADHbAmLjUeQ_SPyNnMymts3bquR9CgoI-livB4pmbfvt6mxOiZrcaAWf2yqzRNHJiIvZSUqIKG8qth81K3YP5XEm7a_Bcux6syqNutOtMGlhbEu75V08Nf8A0i0mSMtJlSjoCIugPBI7jYJrNs_U", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "record_id": "flaws_cloudtrail:0000104:136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "row_index": 104, "timestamp": "2019-08-21T14:42:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "eventTime": "2019-08-21T14:42:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FPII7k82bfVxJ90HvVHA2ML7QUSvF5WamBTXk8O-nDYdkTqZEs5buRB2cJiyevjzcnoCDt3lKvGkqjETFzGc_PeqXYw8H9cV-umU-UuUSNFdqzyOd9D932O2gmV7-vvVcdpr9atrO__jdLYn9iCtMmrgyDiIDUQUBHyZS6MP-huLIsLXil5sqR9gvbiHnOXncG8bDf4LlLnIUWNiHUHJ97YmXfdr8fLxkzRQAqTMayg_BQuQ9diALNWZdSiYzwsd22J0PoNYvla8KlNZBTLjkyp47oRoZ4c_FXr16RtMtEYaxGeGgf_ByX78RXHoChgPAMB2TQUagayz_IAdG1iSeCGPUhIor1ZWTxl6T4SwfJmdrivwSJvydyqT45uWqNfVYDrYqHfOb4gX7XoN3w29AZufLJZ-I1Q6lBh1tph8OhtwqowlO1BOdBwnuBQytvaaYKi3oi1txwRgIW9Ae1FMnCQSXRCWfQ0t2bKNPVuJTH-HLJXQaiSpFafGNm8h4R0bmRxEilji6bRYMcZbEESMeiJqK1Jo-c-C2cxxDF1HAQTad8l0EekKqD9pn9MZLXrT6q83v9zIMMexyXBqqNZ8MAwUAIDzIS2-h5e_Er4DVXb4KOJXtu2EuJFK3L8JJfsxCee4vyQ1wQnxwDyQS8buRBf-jpnndJlb", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "record_id": "flaws_cloudtrail:0000105:136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "row_index": 105, "timestamp": "2019-08-21T14:42:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "136127fa3-1c5a-4c5e-a237-8cf3c5bc90ed", "eventTime": "2019-08-21T14:42:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FPII7k82bfVxJ90HvVHA2ML7QUSvF5WamBTXk8O-nDYdkTqZEs5buRB2cJiyevjzcnoCDt3lKvGkqjETFzGc_PeqXYw8H9cV-umU-UuUSNFdqzyOd9D932O2gmV7-vvVcdpr9atrO__jdLYn9iCtMmrgyDiIDUQUBHyZS6MP-huLIsLXil5sqR9gvbiHnOXncG8bDf4LlLnIUWNiHUHJ97YmXfdr8fLxkzRQAqTMayg_BQuQ9diALNWZdSiYzwsd22J0PoNYvla8KlNZBTLjkyp47oRoZ4c_FXr16RtMtEYaxGeGgf_ByX78RXHoChgPAMB2TQUagayz_IAdG1iSeCGPUhIor1ZWTxl6T4SwfJmdrivwSJvydyqT45uWqNfVYDrYqHfOb4gX7XoN3w29AZufLJZ-I1Q6lBh1tph8OhtwqowlO1BOdBwnuBQytvaaYKi3oi1txwRgIW9Ae1FMnCQSXRCWfQ0t2bKNPVuJTH-HLJXQaiSpFafGNm8h4R0bmRxEilji6bRYMcZbEESMeiJqK1Jo-c-C2cxxDF1HAQTad8l0EekKqD9pn9MZLXrT6q83v9zIMMexyXBqqNZ8MAwUAIDzIS2-h5e_Er4DVXb4KOJXtu2EuJFK3L8JJfsxCee4vyQ1wQnxwDyQS8buRBf-jpnndJlb", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc78828-8ef1-4c9a-914a-4285968f5967", "record_id": "flaws_cloudtrail:0000106:7bc78828-8ef1-4c9a-914a-4285968f5967", "row_index": 106, "timestamp": "2019-08-21T14:42:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc78828-8ef1-4c9a-914a-4285968f5967", "eventTime": "2019-08-21T14:42:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: R6Qoal1FclRId7LAJBrMB5uJbmYbi-SD1xP5iKB_7EByuejHfAFwVLBDw1-ooc5CVrit2X0WmtbacbwuKERuJ7_v4-JiV_U7Tp7Tbx-yMZuR1RiP4LXIi_BSdzWIJScmLXLhOzx0ShLMnoLu3CwyMCZAzqmttyXN-QCYvFi46KBTKmcu965CNaIwIHJCjdhTwdQ64jPZaqnxPyjrHMPXJyU-ey5Mowia_MWYiza3CzPYwpykV9C6WpYVyaIBjn472Hyk5aBN-kFdxZ9A8bMHPWRJ_1F0qIU1IHHt1V3AJ28CVTEVKc3Qkx5tPzWCpLAaVICRbjEjaT5pHcraHCs3sCjL23Kw8txxvKgixNPjijzCXKyiKp54fb2BpcPW7cZyDUYiqgiDlbAkY5JPyOSW8RfZKeqabapBlq8mdVXlXwTMAID5mGsJrtZhEqOKmZVxRS4UKvdpeLDn_6lN5_5HSABGfLIs_kihy0dAUo9po8KUypWaKH5mEuXsjauVL76jOvRfPKLPkbz9uiw-dZVz8tvgPctQin_xrq6wN-PtJI0ETrGAgH5uvhxxtpKyVo2Wz43wfs2B3sNVuht-qXopFEeHn_qD7jZu6R88copU-a_5E4QgF9bdOUnZNh3kySy9lribe8lQgT5PWjtlIH9LpKLPPRcdGAJ0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc78828-8ef1-4c9a-914a-4285968f5967", "record_id": "flaws_cloudtrail:0000107:7bc78828-8ef1-4c9a-914a-4285968f5967", "row_index": 107, "timestamp": "2019-08-21T14:42:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc78828-8ef1-4c9a-914a-4285968f5967", "eventTime": "2019-08-21T14:42:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: R6Qoal1FclRId7LAJBrMB5uJbmYbi-SD1xP5iKB_7EByuejHfAFwVLBDw1-ooc5CVrit2X0WmtbacbwuKERuJ7_v4-JiV_U7Tp7Tbx-yMZuR1RiP4LXIi_BSdzWIJScmLXLhOzx0ShLMnoLu3CwyMCZAzqmttyXN-QCYvFi46KBTKmcu965CNaIwIHJCjdhTwdQ64jPZaqnxPyjrHMPXJyU-ey5Mowia_MWYiza3CzPYwpykV9C6WpYVyaIBjn472Hyk5aBN-kFdxZ9A8bMHPWRJ_1F0qIU1IHHt1V3AJ28CVTEVKc3Qkx5tPzWCpLAaVICRbjEjaT5pHcraHCs3sCjL23Kw8txxvKgixNPjijzCXKyiKp54fb2BpcPW7cZyDUYiqgiDlbAkY5JPyOSW8RfZKeqabapBlq8mdVXlXwTMAID5mGsJrtZhEqOKmZVxRS4UKvdpeLDn_6lN5_5HSABGfLIs_kihy0dAUo9po8KUypWaKH5mEuXsjauVL76jOvRfPKLPkbz9uiw-dZVz8tvgPctQin_xrq6wN-PtJI0ETrGAgH5uvhxxtpKyVo2Wz43wfs2B3sNVuht-qXopFEeHn_qD7jZu6R88copU-a_5E4QgF9bdOUnZNh3kySy9lribe8lQgT5PWjtlIH9LpKLPPRcdGAJ0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "record_id": "flaws_cloudtrail:0000108:285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "row_index": 108, "timestamp": "2019-08-21T14:42:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "eventTime": "2019-08-21T14:42:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "record_id": "flaws_cloudtrail:0000109:285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "row_index": 109, "timestamp": "2019-08-21T14:42:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285e7879-cf10-4cbd-9d6f-3f9b3b1faccb", "eventTime": "2019-08-21T14:42:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "record_id": "flaws_cloudtrail:0000110:9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "row_index": 110, "timestamp": "2019-08-21T14:42:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "eventTime": "2019-08-21T14:42:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 63opc5qO1FJhwgWiUmP7jONdvzaVKvyIFr2vo184z_LnxvboIZPI3gC6oJCxp7chiwWs9kO8n5KVQp3dFZJCv5scfSYDVDKdANjX7ZJqfs_TKyavwwwGumTNekh_hrMk_6kODClt4wD28KlLZlZzYf4msy8r-Wg2zpGUlbRGyOBN_1JDuoHzGvmPaSs8jSsNaLzXmW8Ea6xf4HAv8quW66My_GDy8UoZSrQnNy_LnedVXz2Jh9qI8qQgKp-XoovAvqJo11nw6ry8H1rlvP159Yms41SE6x4w3fzop-rDyhLsXpjO6RMXdV8aym3_3DCXsOWGH7DirHvjGgsWBpeKJDhsAC-MuyAalhRqg9mTwf7U1a2tTEJUDZ0rCi-NNQrGRRIA3HyvpSGUDfVgqkrf2SVeLerVq05cA_Fp5k2y6FT3i6q_BF1Pz9X2baQWfVXalW43jEzO8DlrJyzWY4NhCDq6EkcuKZ1rVDR5xEPRpFgmLRLAwgsOwBU7b8JYlHP6boOBgsRffArEoD0OBysMaBQqnEO64lPWeYXXhUbMRv7ygaxnvqxAozTqAadEo372dmgO4EL8rqdXu10TT7g2fmnqZs1UQueh-7JEWvzcw5-GKOckCwptECBAyKicsBoIxnj8Pt5GPRxUMWN1Ke3cTTq7WvjNz-M", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "record_id": "flaws_cloudtrail:0000111:9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "row_index": 111, "timestamp": "2019-08-21T14:42:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3bb510-4452-4ea9-acf2-fd0a75aeda4a", "eventTime": "2019-08-21T14:42:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 63opc5qO1FJhwgWiUmP7jONdvzaVKvyIFr2vo184z_LnxvboIZPI3gC6oJCxp7chiwWs9kO8n5KVQp3dFZJCv5scfSYDVDKdANjX7ZJqfs_TKyavwwwGumTNekh_hrMk_6kODClt4wD28KlLZlZzYf4msy8r-Wg2zpGUlbRGyOBN_1JDuoHzGvmPaSs8jSsNaLzXmW8Ea6xf4HAv8quW66My_GDy8UoZSrQnNy_LnedVXz2Jh9qI8qQgKp-XoovAvqJo11nw6ry8H1rlvP159Yms41SE6x4w3fzop-rDyhLsXpjO6RMXdV8aym3_3DCXsOWGH7DirHvjGgsWBpeKJDhsAC-MuyAalhRqg9mTwf7U1a2tTEJUDZ0rCi-NNQrGRRIA3HyvpSGUDfVgqkrf2SVeLerVq05cA_Fp5k2y6FT3i6q_BF1Pz9X2baQWfVXalW43jEzO8DlrJyzWY4NhCDq6EkcuKZ1rVDR5xEPRpFgmLRLAwgsOwBU7b8JYlHP6boOBgsRffArEoD0OBysMaBQqnEO64lPWeYXXhUbMRv7ygaxnvqxAozTqAadEo372dmgO4EL8rqdXu10TT7g2fmnqZs1UQueh-7JEWvzcw5-GKOckCwptECBAyKicsBoIxnj8Pt5GPRxUMWN1Ke3cTTq7WvjNz-M", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f44203-9122-4674-9a68-5f401e88eec2", "record_id": "flaws_cloudtrail:0000112:61f44203-9122-4674-9a68-5f401e88eec2", "row_index": 112, "timestamp": "2019-08-21T14:42:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f44203-9122-4674-9a68-5f401e88eec2", "eventTime": "2019-08-21T14:42:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f44203-9122-4674-9a68-5f401e88eec2", "record_id": "flaws_cloudtrail:0000113:61f44203-9122-4674-9a68-5f401e88eec2", "row_index": 113, "timestamp": "2019-08-21T14:42:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f44203-9122-4674-9a68-5f401e88eec2", "eventTime": "2019-08-21T14:42:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff73eb67-9442-4516-a65d-eaa587b0f152", "record_id": "flaws_cloudtrail:0000114:ff73eb67-9442-4516-a65d-eaa587b0f152", "row_index": 114, "timestamp": "2019-08-21T14:42:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff73eb67-9442-4516-a65d-eaa587b0f152", "eventTime": "2019-08-21T14:42:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff73eb67-9442-4516-a65d-eaa587b0f152", "record_id": "flaws_cloudtrail:0000115:ff73eb67-9442-4516-a65d-eaa587b0f152", "row_index": 115, "timestamp": "2019-08-21T14:42:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff73eb67-9442-4516-a65d-eaa587b0f152", "eventTime": "2019-08-21T14:42:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "record_id": "flaws_cloudtrail:0000116:5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "row_index": 116, "timestamp": "2019-08-21T14:42:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "eventTime": "2019-08-21T14:42:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "record_id": "flaws_cloudtrail:0000117:5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "row_index": 117, "timestamp": "2019-08-21T14:42:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f534e58-5038-4bb6-bc3b-cad9fc5a1526", "eventTime": "2019-08-21T14:42:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "record_id": "flaws_cloudtrail:0000118:f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "row_index": 118, "timestamp": "2019-08-21T14:42:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "eventTime": "2019-08-21T14:42:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: W0xpwRNFtQey6PQYjqwKTzo3lorSsP6vHDeo3ysR7YG74vaCrtC4Bh6QsFqroaISjewsxEi1dSFcU62jdFylBHM_srCoHU3eROd6zB9XwCQkvJ3U0GVer1UoZz0kzONX-KAIeh19jQRo7nXcZZb0MUAwL_t1PIrdsDpThcNPAyvmkbYueZGWal9Ct3vV0kMmZCoP-df4p4XTTTkNQ_PnjUULAYNeZC9029AvCiArhCAZYNyR5eS7ugzV4eb8YKgMc2NPUVTrkqkEPgTECN9sPnd9xizUf9nnZB_3WdFLkSczJuxf32rfXtNtQPZw902vy2soPoQd-pH6ORbw2vNC73nHpliBsE5QIsPvxZuy4dVtsHOUidilIHzHlIgwsBWzlHO6qamJPyQpt6i8E9corxfwz5CYLSh7OyKDL6vnyLVM-WDJwvEk6Jh-3A8fv9KpaHA80IF5PWhCU11ZmGaTJr_4L0gsrbUu0h2zAe2NMxFr4tU1BptzgJ4nktHOPGTRc4JYCNAXpCs5s3jlefL0r8lOGLjBFXrJVG-J95JFKrb8Oe5t7FvH3cSPx-bQNmzTuoHvRrfB6isNUgAE3ymNHoXDy6en3EbFj7b1FMVYWHlkDUivbs0WFekZhorCxMHFSDHLXW7NTkB8t0crqiDNPqnbJyRmKIc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc43c65e-ae3d-4551-842e-144f17ba5db7", "record_id": "flaws_cloudtrail:0000119:bc43c65e-ae3d-4551-842e-144f17ba5db7", "row_index": 119, "timestamp": "2019-08-21T14:42:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc43c65e-ae3d-4551-842e-144f17ba5db7", "eventTime": "2019-08-21T14:42:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C3-TdXksBwoJ2wrModz_I4QgfAkezVZ9biiLkV15mQwl1TejeW9O95dlX_OiFv7QDfQyf8CF1r8fa6yU-LZZhoiCCslcWuw55QOOjfBFBLZWZLaH3Dmuvn2_s7xUe2lUQUYlJghFsDmHZaY9NE6i8i767JbFkWqY-wGxLM_ehWolcq35uVsp85SimlD_n0n_BPCGHSWgJLgI_idfWcqA1EbffubdmiUcGIBs3gD1mSZbkAMhq_R32s_M0uRvgNmqd9wEEkwOQoBRa-fhRC7NbjwnIRWMD3R8QMR_0Yl_c04F_weB9OqFsSCYsFmmi3nC66I4DTTj3WM27JWTvVwxI5mPYsBb63wdEUzr8gedMLfowjor9qjbZxwx4LkDiTT5lMKYpn_516cueFsgHmfQg9YC6HlqLgyMLuXIkCmYOpq_wSzKzCh3l2HnGhI21mevYGuwlhsV8AhGIKEQeBa0xb8G5DFWlQ3ZM3tne9I4MMNyRllT174DxOyoK3-nSNX-ZxULe9WZkU1pT428ZrIdOHl9EPniUpKnnuksW0YpK8_0IpuJ70D4V3wMgVcV1wrg_j9VTWWmcqEvaBM-gspvLEZkIYgnpDqUNtkD5-EtsWgs3czEOlvlHcatRf93BqA1W3a_dOAWWTUnYtqD_M9Me60s3h1sRR1o", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "record_id": "flaws_cloudtrail:0000120:f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "row_index": 120, "timestamp": "2019-08-21T14:42:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9433a82-f491-4ea6-b0f5-ec55ec27beb1", "eventTime": "2019-08-21T14:42:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: W0xpwRNFtQey6PQYjqwKTzo3lorSsP6vHDeo3ysR7YG74vaCrtC4Bh6QsFqroaISjewsxEi1dSFcU62jdFylBHM_srCoHU3eROd6zB9XwCQkvJ3U0GVer1UoZz0kzONX-KAIeh19jQRo7nXcZZb0MUAwL_t1PIrdsDpThcNPAyvmkbYueZGWal9Ct3vV0kMmZCoP-df4p4XTTTkNQ_PnjUULAYNeZC9029AvCiArhCAZYNyR5eS7ugzV4eb8YKgMc2NPUVTrkqkEPgTECN9sPnd9xizUf9nnZB_3WdFLkSczJuxf32rfXtNtQPZw902vy2soPoQd-pH6ORbw2vNC73nHpliBsE5QIsPvxZuy4dVtsHOUidilIHzHlIgwsBWzlHO6qamJPyQpt6i8E9corxfwz5CYLSh7OyKDL6vnyLVM-WDJwvEk6Jh-3A8fv9KpaHA80IF5PWhCU11ZmGaTJr_4L0gsrbUu0h2zAe2NMxFr4tU1BptzgJ4nktHOPGTRc4JYCNAXpCs5s3jlefL0r8lOGLjBFXrJVG-J95JFKrb8Oe5t7FvH3cSPx-bQNmzTuoHvRrfB6isNUgAE3ymNHoXDy6en3EbFj7b1FMVYWHlkDUivbs0WFekZhorCxMHFSDHLXW7NTkB8t0crqiDNPqnbJyRmKIc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc43c65e-ae3d-4551-842e-144f17ba5db7", "record_id": "flaws_cloudtrail:0000121:bc43c65e-ae3d-4551-842e-144f17ba5db7", "row_index": 121, "timestamp": "2019-08-21T14:42:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc43c65e-ae3d-4551-842e-144f17ba5db7", "eventTime": "2019-08-21T14:42:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C3-TdXksBwoJ2wrModz_I4QgfAkezVZ9biiLkV15mQwl1TejeW9O95dlX_OiFv7QDfQyf8CF1r8fa6yU-LZZhoiCCslcWuw55QOOjfBFBLZWZLaH3Dmuvn2_s7xUe2lUQUYlJghFsDmHZaY9NE6i8i767JbFkWqY-wGxLM_ehWolcq35uVsp85SimlD_n0n_BPCGHSWgJLgI_idfWcqA1EbffubdmiUcGIBs3gD1mSZbkAMhq_R32s_M0uRvgNmqd9wEEkwOQoBRa-fhRC7NbjwnIRWMD3R8QMR_0Yl_c04F_weB9OqFsSCYsFmmi3nC66I4DTTj3WM27JWTvVwxI5mPYsBb63wdEUzr8gedMLfowjor9qjbZxwx4LkDiTT5lMKYpn_516cueFsgHmfQg9YC6HlqLgyMLuXIkCmYOpq_wSzKzCh3l2HnGhI21mevYGuwlhsV8AhGIKEQeBa0xb8G5DFWlQ3ZM3tne9I4MMNyRllT174DxOyoK3-nSNX-ZxULe9WZkU1pT428ZrIdOHl9EPniUpKnnuksW0YpK8_0IpuJ70D4V3wMgVcV1wrg_j9VTWWmcqEvaBM-gspvLEZkIYgnpDqUNtkD5-EtsWgs3czEOlvlHcatRf93BqA1W3a_dOAWWTUnYtqD_M9Me60s3h1sRR1o", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "record_id": "flaws_cloudtrail:0000122:4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "row_index": 122, "timestamp": "2019-08-21T14:42:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "eventTime": "2019-08-21T14:42:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ce1293-ef92-4914-a62d-35c9489d8021", "record_id": "flaws_cloudtrail:0000123:86ce1293-ef92-4914-a62d-35c9489d8021", "row_index": 123, "timestamp": "2019-08-21T14:42:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ce1293-ef92-4914-a62d-35c9489d8021", "eventTime": "2019-08-21T14:42:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Mq8hXbvKhrFhvKV3kI_hJKZOZa51eOsa_AnCdt-GRm1rpBcPkIT2gEtjv_0pcfXqBREjN2mQrchvN7tQJxHDP-S66yeFo4LM4fGnH16nGU6-ohV3OOy59yZpEYhPrAS54UPxBba0pUlogKx7YCm1ghQOa_DkUS1XxDb3MMBY4-HzxQCZHXN-fhmtSPg6tQlhOI0mZpC_lMPiVFZrl8gP0ObKQPN0TML6OndV-GLkFPnnDQyaRKxr5xTFp8PteC5Rzbt3wq6uL5FVSv2QjemqzlCUKguF9moCcMzinuB0Ox7JKsNApt8nVlJEA7Z4uLdJu-C9ZMBQVOexfFWD4f4C2K42N8QPYtyRHc8XODHBlW69mIMtEWKyTZxgRorZngH-BFHZTk3l6q-25NveVR6HN11iZ3iM8pehap4a91RrxFC6ssdQBQlRXnt3W5Aj2PBgkrM7DzOgVympJ7hJJX7FBNMfQ9KgfaBYCNyroGhbdA0Ni5CQkFr7y0OKQJ6oeEjReeD3Y4dOALzZL6a66ma_-7_NbJBpjzdX4eRpo2zyqKig9wNFO1TBwy_pAgYizzKFhFvBi3j1PsYmlusTZtjUwqM-aSUSR8771iDfA1ysRiob1tFQgW1Z9PfMwV2EnDJYpOjygMW7WQBFjnVQDW3axAdCI58xB05N", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "record_id": "flaws_cloudtrail:0000124:4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "row_index": 124, "timestamp": "2019-08-21T14:42:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5a4d70-d974-48fc-ab4f-88225bf4ade6", "eventTime": "2019-08-21T14:42:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ce1293-ef92-4914-a62d-35c9489d8021", "record_id": "flaws_cloudtrail:0000125:86ce1293-ef92-4914-a62d-35c9489d8021", "row_index": 125, "timestamp": "2019-08-21T14:42:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ce1293-ef92-4914-a62d-35c9489d8021", "eventTime": "2019-08-21T14:42:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Mq8hXbvKhrFhvKV3kI_hJKZOZa51eOsa_AnCdt-GRm1rpBcPkIT2gEtjv_0pcfXqBREjN2mQrchvN7tQJxHDP-S66yeFo4LM4fGnH16nGU6-ohV3OOy59yZpEYhPrAS54UPxBba0pUlogKx7YCm1ghQOa_DkUS1XxDb3MMBY4-HzxQCZHXN-fhmtSPg6tQlhOI0mZpC_lMPiVFZrl8gP0ObKQPN0TML6OndV-GLkFPnnDQyaRKxr5xTFp8PteC5Rzbt3wq6uL5FVSv2QjemqzlCUKguF9moCcMzinuB0Ox7JKsNApt8nVlJEA7Z4uLdJu-C9ZMBQVOexfFWD4f4C2K42N8QPYtyRHc8XODHBlW69mIMtEWKyTZxgRorZngH-BFHZTk3l6q-25NveVR6HN11iZ3iM8pehap4a91RrxFC6ssdQBQlRXnt3W5Aj2PBgkrM7DzOgVympJ7hJJX7FBNMfQ9KgfaBYCNyroGhbdA0Ni5CQkFr7y0OKQJ6oeEjReeD3Y4dOALzZL6a66ma_-7_NbJBpjzdX4eRpo2zyqKig9wNFO1TBwy_pAgYizzKFhFvBi3j1PsYmlusTZtjUwqM-aSUSR8771iDfA1ysRiob1tFQgW1Z9PfMwV2EnDJYpOjygMW7WQBFjnVQDW3axAdCI58xB05N", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071c1368-94fc-4379-8390-0aead4a4cdf6", "record_id": "flaws_cloudtrail:0000126:071c1368-94fc-4379-8390-0aead4a4cdf6", "row_index": 126, "timestamp": "2019-08-21T14:43:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071c1368-94fc-4379-8390-0aead4a4cdf6", "eventTime": "2019-08-21T14:43:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071c1368-94fc-4379-8390-0aead4a4cdf6", "record_id": "flaws_cloudtrail:0000127:071c1368-94fc-4379-8390-0aead4a4cdf6", "row_index": 127, "timestamp": "2019-08-21T14:43:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071c1368-94fc-4379-8390-0aead4a4cdf6", "eventTime": "2019-08-21T14:43:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39476f29-a1b2-4d4d-98b4-621f6704e64c", "record_id": "flaws_cloudtrail:0000128:39476f29-a1b2-4d4d-98b4-621f6704e64c", "row_index": 128, "timestamp": "2019-08-21T14:43:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39476f29-a1b2-4d4d-98b4-621f6704e64c", "eventTime": "2019-08-21T14:43:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39476f29-a1b2-4d4d-98b4-621f6704e64c", "record_id": "flaws_cloudtrail:0000129:39476f29-a1b2-4d4d-98b4-621f6704e64c", "row_index": 129, "timestamp": "2019-08-21T14:43:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39476f29-a1b2-4d4d-98b4-621f6704e64c", "eventTime": "2019-08-21T14:43:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "record_id": "flaws_cloudtrail:0000130:2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "row_index": 130, "timestamp": "2019-08-21T14:43:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "eventTime": "2019-08-21T14:43:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06d0647-ea07-4e06-9832-1a7d34ebdc67", "record_id": "flaws_cloudtrail:0000131:c06d0647-ea07-4e06-9832-1a7d34ebdc67", "row_index": 131, "timestamp": "2019-08-21T14:43:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06d0647-ea07-4e06-9832-1a7d34ebdc67", "eventTime": "2019-08-21T14:43:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2VtAVX8ufI-AI2NbKFAIgMYLxINo0tC9dpXVwr_b2aZoy-ekRrc2gPHh5gZlJBKU4_QZU35EoAD4hasGjfW3BLOW4kK4q2lHpPn8BbNKH1K_pOW-LT2SnZKAnEoyMcuKGDg9wLXhFQrb8Pcu_qgyrM_B_v70dsGNcW68XyaxCse-LX0YhCe27WkHFfLgcNMDgM7mlRSoMQiY49Dhx9vecogeAG52ZcNY2z7c35shLQMeaFTUKXwBylobrnNwL3rEyQ4wrQK6JxKRzpSPvsXhfTAMNesNH6K92_icjCEkpZLClyNiEjoeiMTTQ9vPgYKkBfZ45P5HoOj58DPazcYZpl2QH4pjUsJuwDQ2JJqNhjaPe2ppjqnuz0YvN4orGxkoYzyQgar8h_Gl0A2IyhAMQ2vl4Wo9xXX2NkCOGSDJC1z8VL8nvPx9Wq-oTjBlkJ4iv6neCYOk0OHuxPb4cFr3zVXU6Ady0AqHsvB5cl1zsmdsliD8hvOvPZ1FzrqnhXNRYinCThI8Ahyr2uhzfMSuhd7ESFrnHJ3hKcqGxIts636ToJsr_LCYiPnTMfkaBhVL5AnOoOjcQh1N2on1tEdWTaoH9O6y0IG0sqLa8UiaPJDkZYkg6RBjAbhoDdG0hiXx31CSchJDQx7-yVqt7x-ta5fcqC5Dv07y", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "record_id": "flaws_cloudtrail:0000132:2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "row_index": 132, "timestamp": "2019-08-21T14:43:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2676e7d6-4c81-46ab-b8e1-1c47d6c06d65", "eventTime": "2019-08-21T14:43:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06d0647-ea07-4e06-9832-1a7d34ebdc67", "record_id": "flaws_cloudtrail:0000133:c06d0647-ea07-4e06-9832-1a7d34ebdc67", "row_index": 133, "timestamp": "2019-08-21T14:43:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06d0647-ea07-4e06-9832-1a7d34ebdc67", "eventTime": "2019-08-21T14:43:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2VtAVX8ufI-AI2NbKFAIgMYLxINo0tC9dpXVwr_b2aZoy-ekRrc2gPHh5gZlJBKU4_QZU35EoAD4hasGjfW3BLOW4kK4q2lHpPn8BbNKH1K_pOW-LT2SnZKAnEoyMcuKGDg9wLXhFQrb8Pcu_qgyrM_B_v70dsGNcW68XyaxCse-LX0YhCe27WkHFfLgcNMDgM7mlRSoMQiY49Dhx9vecogeAG52ZcNY2z7c35shLQMeaFTUKXwBylobrnNwL3rEyQ4wrQK6JxKRzpSPvsXhfTAMNesNH6K92_icjCEkpZLClyNiEjoeiMTTQ9vPgYKkBfZ45P5HoOj58DPazcYZpl2QH4pjUsJuwDQ2JJqNhjaPe2ppjqnuz0YvN4orGxkoYzyQgar8h_Gl0A2IyhAMQ2vl4Wo9xXX2NkCOGSDJC1z8VL8nvPx9Wq-oTjBlkJ4iv6neCYOk0OHuxPb4cFr3zVXU6Ady0AqHsvB5cl1zsmdsliD8hvOvPZ1FzrqnhXNRYinCThI8Ahyr2uhzfMSuhd7ESFrnHJ3hKcqGxIts636ToJsr_LCYiPnTMfkaBhVL5AnOoOjcQh1N2on1tEdWTaoH9O6y0IG0sqLa8UiaPJDkZYkg6RBjAbhoDdG0hiXx31CSchJDQx7-yVqt7x-ta5fcqC5Dv07y", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98debd1a-91b1-4e6c-aec7-9f943ecb632f", "record_id": "flaws_cloudtrail:0000134:98debd1a-91b1-4e6c-aec7-9f943ecb632f", "row_index": 134, "timestamp": "2019-08-21T14:43:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98debd1a-91b1-4e6c-aec7-9f943ecb632f", "eventTime": "2019-08-21T14:43:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98debd1a-91b1-4e6c-aec7-9f943ecb632f", "record_id": "flaws_cloudtrail:0000135:98debd1a-91b1-4e6c-aec7-9f943ecb632f", "row_index": 135, "timestamp": "2019-08-21T14:43:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98debd1a-91b1-4e6c-aec7-9f943ecb632f", "eventTime": "2019-08-21T14:43:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "record_id": "flaws_cloudtrail:0000136:ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "row_index": 136, "timestamp": "2019-08-21T14:43:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "eventTime": "2019-08-21T14:43:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5AfP6jFSpyXl5KvpUSVXmH2dMlsw8hKc5J1F5smp0R2jtz8KD-WkqrK50Qo-3Gnfuj4-kLp2A5MGt2YURktxYzdCixEOA5p-LhkVsbWLm21-aKKLMXqrZ-NGsqzIDYsF-X2mZO_syUb_uOildrwDDjzBacTxio7y2LG7qRLkdyKqvfeCDbQBHNyo0BKrjlUJJsa1maMPPIJUcxb2MWe9o6Nfqy_qVJZ1H-Rw-bQLomulobXJiGxnAFYOEd1fY7j4jEFxWwZiUgulZ_X6oExekkRKTUIelRbMFa-qMp_F7oFMmfJpI5qA4ghSwwiHQPOjoI-DsSdjOpe84SYL_OoxkPOtynVo0KX1wv3NbCO-Qye5XThnh45TbsVeiteKvZQJQmZP4RGXxfLMjQ9SIpvZp2q8Hd8olAhcQh-3XDfzJFnfsjtCjjq0NbedpFmBmkG8vWqgcd88AuPqOlN1jCcvD9Nf4Vx6Sl0n06385TX9pF8-Fi2RmKGEPoikARUvQbNmss7x6cYUTz5JdtZ87LmEuf55qJ89VDfVWOw1spha3_-LZme-1DlLTCnjj-mKwi91DB6WZQFt77Q6pIWC8o0KCxXNKm3YurrBQKu52PGxMkmCGZ6BL1WooT6Dj4w-99aUDLK4zuGrxSTEzHXaECCtZQZYsQhZkwI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c96e3b-3045-4b65-a0e0-a3627d13ae43", "record_id": "flaws_cloudtrail:0000137:67c96e3b-3045-4b65-a0e0-a3627d13ae43", "row_index": 137, "timestamp": "2019-08-21T14:43:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c96e3b-3045-4b65-a0e0-a3627d13ae43", "eventTime": "2019-08-21T14:43:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "record_id": "flaws_cloudtrail:0000138:ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "row_index": 138, "timestamp": "2019-08-21T14:43:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffcd690e-58ac-4e55-8fb4-f5c17ea413390", "eventTime": "2019-08-21T14:43:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5AfP6jFSpyXl5KvpUSVXmH2dMlsw8hKc5J1F5smp0R2jtz8KD-WkqrK50Qo-3Gnfuj4-kLp2A5MGt2YURktxYzdCixEOA5p-LhkVsbWLm21-aKKLMXqrZ-NGsqzIDYsF-X2mZO_syUb_uOildrwDDjzBacTxio7y2LG7qRLkdyKqvfeCDbQBHNyo0BKrjlUJJsa1maMPPIJUcxb2MWe9o6Nfqy_qVJZ1H-Rw-bQLomulobXJiGxnAFYOEd1fY7j4jEFxWwZiUgulZ_X6oExekkRKTUIelRbMFa-qMp_F7oFMmfJpI5qA4ghSwwiHQPOjoI-DsSdjOpe84SYL_OoxkPOtynVo0KX1wv3NbCO-Qye5XThnh45TbsVeiteKvZQJQmZP4RGXxfLMjQ9SIpvZp2q8Hd8olAhcQh-3XDfzJFnfsjtCjjq0NbedpFmBmkG8vWqgcd88AuPqOlN1jCcvD9Nf4Vx6Sl0n06385TX9pF8-Fi2RmKGEPoikARUvQbNmss7x6cYUTz5JdtZ87LmEuf55qJ89VDfVWOw1spha3_-LZme-1DlLTCnjj-mKwi91DB6WZQFt77Q6pIWC8o0KCxXNKm3YurrBQKu52PGxMkmCGZ6BL1WooT6Dj4w-99aUDLK4zuGrxSTEzHXaECCtZQZYsQhZkwI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c96e3b-3045-4b65-a0e0-a3627d13ae43", "record_id": "flaws_cloudtrail:0000139:67c96e3b-3045-4b65-a0e0-a3627d13ae43", "row_index": 139, "timestamp": "2019-08-21T14:43:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c96e3b-3045-4b65-a0e0-a3627d13ae43", "eventTime": "2019-08-21T14:43:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce17e944-f949-484b-aba4-e9dc18da3267", "record_id": "flaws_cloudtrail:0000140:ce17e944-f949-484b-aba4-e9dc18da3267", "row_index": 140, "timestamp": "2019-08-21T14:43:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce17e944-f949-484b-aba4-e9dc18da3267", "eventTime": "2019-08-21T14:43:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce17e944-f949-484b-aba4-e9dc18da3267", "record_id": "flaws_cloudtrail:0000141:ce17e944-f949-484b-aba4-e9dc18da3267", "row_index": 141, "timestamp": "2019-08-21T14:43:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce17e944-f949-484b-aba4-e9dc18da3267", "eventTime": "2019-08-21T14:43:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5d504d-3a4d-465e-b5ad-d847c5832946", "record_id": "flaws_cloudtrail:0000142:2f5d504d-3a4d-465e-b5ad-d847c5832946", "row_index": 142, "timestamp": "2019-08-21T14:43:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5d504d-3a4d-465e-b5ad-d847c5832946", "eventTime": "2019-08-21T14:43:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5d504d-3a4d-465e-b5ad-d847c5832946", "record_id": "flaws_cloudtrail:0000143:2f5d504d-3a4d-465e-b5ad-d847c5832946", "row_index": 143, "timestamp": "2019-08-21T14:43:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5d504d-3a4d-465e-b5ad-d847c5832946", "eventTime": "2019-08-21T14:43:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba17f6a6-fcfb-4f4b-b240-0f05214be3a1", "record_id": "flaws_cloudtrail:0000144:ba17f6a6-fcfb-4f4b-b240-0f05214be3a1", "row_index": 144, "timestamp": "2019-08-21T14:43:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba17f6a6-fcfb-4f4b-b240-0f05214be3a1", "eventTime": "2019-08-21T14:43:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb66c032-032d-4557-802a-4ebb9ef9766d", "record_id": "flaws_cloudtrail:0000145:bb66c032-032d-4557-802a-4ebb9ef9766d", "row_index": 145, "timestamp": "2019-08-21T14:43:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb66c032-032d-4557-802a-4ebb9ef9766d", "eventTime": "2019-08-21T14:43:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb66c032-032d-4557-802a-4ebb9ef9766d", "record_id": "flaws_cloudtrail:0000146:bb66c032-032d-4557-802a-4ebb9ef9766d", "row_index": 146, "timestamp": "2019-08-21T14:43:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb66c032-032d-4557-802a-4ebb9ef9766d", "eventTime": "2019-08-21T14:43:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c70f106-6a5e-419b-87b6-8cc3301eae92", "record_id": "flaws_cloudtrail:0000147:7c70f106-6a5e-419b-87b6-8cc3301eae92", "row_index": 147, "timestamp": "2019-08-21T14:43:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c70f106-6a5e-419b-87b6-8cc3301eae92", "eventTime": "2019-08-21T14:43:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tZ2ftTO47jQeTkjs4gpccbzW53PFsYCP7M--lLnB6k7bbEjR99b8p0qtaWoVORDpt_fSfgjqKTvfNQevVqb7zGmf6JdHzhE6kCPgjI5OHYILIETwnNfFKo0MeQEkGsA9X1zfv8HDat_n3KjBXbrxSH8qSipyloNs1p280u0-24u50Gd7Yt3DFsM-x-hT4uHa1hlO56WZskps8zeN-abCxs9wX1q2Wc_nJi-9lR3YHlwilLaEJ-Ia404DzeCZkbH15kdqidX89gSTTA0Dlo7jKBfKnq6-4xhIrdut63PlfwFVBYqKZTZOgnHG2vGztYXmEc2F9lXMeyIsW8wifnsqnDfTItKJZ897TzPqsqsjNKkglDRgsIniGlvHj95CleIh3Lru73ZW8XM1K_ewKh3gjXgucjoa5Y4LHMcpzdNS78p6RDScwid4ctzaQuypXolN4QOfFwKSlNmH32l6I6H7uH1x8cm3_zz09GuU3EmvX3pGYsvGMJnnHn1Du_jfnK3HGjUoFdGdCvKrVU9OJ7Q3t4Ltjz8er2oD-yW_XSuqAzeN1GQOLcIdgLp34WPT51QeTC-XXlFYUbYK2ZEuEQkCjlG8JsTltrySZeVc7xYomQWLCsg9cLGWNhPWyVH8bR3mkiB35dRg_X-Qqn_1ZBafvvHuCzZVm1g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c70f106-6a5e-419b-87b6-8cc3301eae92", "record_id": "flaws_cloudtrail:0000148:7c70f106-6a5e-419b-87b6-8cc3301eae92", "row_index": 148, "timestamp": "2019-08-21T14:43:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c70f106-6a5e-419b-87b6-8cc3301eae92", "eventTime": "2019-08-21T14:43:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tZ2ftTO47jQeTkjs4gpccbzW53PFsYCP7M--lLnB6k7bbEjR99b8p0qtaWoVORDpt_fSfgjqKTvfNQevVqb7zGmf6JdHzhE6kCPgjI5OHYILIETwnNfFKo0MeQEkGsA9X1zfv8HDat_n3KjBXbrxSH8qSipyloNs1p280u0-24u50Gd7Yt3DFsM-x-hT4uHa1hlO56WZskps8zeN-abCxs9wX1q2Wc_nJi-9lR3YHlwilLaEJ-Ia404DzeCZkbH15kdqidX89gSTTA0Dlo7jKBfKnq6-4xhIrdut63PlfwFVBYqKZTZOgnHG2vGztYXmEc2F9lXMeyIsW8wifnsqnDfTItKJZ897TzPqsqsjNKkglDRgsIniGlvHj95CleIh3Lru73ZW8XM1K_ewKh3gjXgucjoa5Y4LHMcpzdNS78p6RDScwid4ctzaQuypXolN4QOfFwKSlNmH32l6I6H7uH1x8cm3_zz09GuU3EmvX3pGYsvGMJnnHn1Du_jfnK3HGjUoFdGdCvKrVU9OJ7Q3t4Ltjz8er2oD-yW_XSuqAzeN1GQOLcIdgLp34WPT51QeTC-XXlFYUbYK2ZEuEQkCjlG8JsTltrySZeVc7xYomQWLCsg9cLGWNhPWyVH8bR3mkiB35dRg_X-Qqn_1ZBafvvHuCzZVm1g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26f60869-e418-48d8-9640-0d57090f67f8", "record_id": "flaws_cloudtrail:0000149:26f60869-e418-48d8-9640-0d57090f67f8", "row_index": 149, "timestamp": "2019-08-21T14:43:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26f60869-e418-48d8-9640-0d57090f67f8", "eventTime": "2019-08-21T14:43:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26f60869-e418-48d8-9640-0d57090f67f8", "record_id": "flaws_cloudtrail:0000150:26f60869-e418-48d8-9640-0d57090f67f8", "row_index": 150, "timestamp": "2019-08-21T14:43:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26f60869-e418-48d8-9640-0d57090f67f8", "eventTime": "2019-08-21T14:43:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b39697-9413-4fff-8541-40831ed3dfe", "record_id": "flaws_cloudtrail:0000151:36b39697-9413-4fff-8541-40831ed3dfe", "row_index": 151, "timestamp": "2019-08-21T14:43:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b39697-9413-4fff-8541-40831ed3dfe", "eventTime": "2019-08-21T14:43:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HVAptuLzKYkyaq1ES1OvKya-W7FbBwm3H_VcJ4KgpFndGYr8HE3Pw_WE-LkzC9-GwaPQ16YsY3-ETN9kaSSWvOQduD6yB_B1KWZRUuTolMFgeswkB8LxDoSb22AF44x_M9EzFZ0_x8ssZpwMiN2JT-cRuHQUGi0UDGAPOpiLJDPK3Nak4fyEiwtzD25MVmyX8g87HzpFY4J2QlxaCtAACQvBplvJMpq4pcyXchgyJOA_qPIzJegkV4VmDQirL7mtbr_hVuiOsQ7wXs06baw59QbBTH5BtF_j8Pps1mcuLa__HfFf1sTEYC85heih9kLN38kqTy5u149PeevJI_3RAftS8CsSktChOgcJr_5FN8RlCD0ZXTgNOUnhHf9ooAwd2d-V0_djf8fM4pNP5aGt_FHtckd3WT1ZuNvnolRaQ7-ghMw7GJEofUTfpkHmV_nZQDGnKlusY00HAj85YjuRe9zPEuzRCxT0u0p1IhGYl4neUXBYXzMfSx12I0dR26tsKcrCcAQFmUzdFzCtA006djeKINCg20r9oB9FrBAdrnbJ4xQ6Q8ycgrjfAo2Nv2_CumT9QrQuPDDGz-F35mgfvU_m-YP-PuyA3b2j79Htq8RYmUIYeG4pKSPbGPdoNAalLvMuwKjRD07AwJ2WlihsgkMavlwPTg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b39697-9413-4fff-8541-40831ed3dfe", "record_id": "flaws_cloudtrail:0000152:36b39697-9413-4fff-8541-40831ed3dfe", "row_index": 152, "timestamp": "2019-08-21T14:43:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b39697-9413-4fff-8541-40831ed3dfe", "eventTime": "2019-08-21T14:43:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HVAptuLzKYkyaq1ES1OvKya-W7FbBwm3H_VcJ4KgpFndGYr8HE3Pw_WE-LkzC9-GwaPQ16YsY3-ETN9kaSSWvOQduD6yB_B1KWZRUuTolMFgeswkB8LxDoSb22AF44x_M9EzFZ0_x8ssZpwMiN2JT-cRuHQUGi0UDGAPOpiLJDPK3Nak4fyEiwtzD25MVmyX8g87HzpFY4J2QlxaCtAACQvBplvJMpq4pcyXchgyJOA_qPIzJegkV4VmDQirL7mtbr_hVuiOsQ7wXs06baw59QbBTH5BtF_j8Pps1mcuLa__HfFf1sTEYC85heih9kLN38kqTy5u149PeevJI_3RAftS8CsSktChOgcJr_5FN8RlCD0ZXTgNOUnhHf9ooAwd2d-V0_djf8fM4pNP5aGt_FHtckd3WT1ZuNvnolRaQ7-ghMw7GJEofUTfpkHmV_nZQDGnKlusY00HAj85YjuRe9zPEuzRCxT0u0p1IhGYl4neUXBYXzMfSx12I0dR26tsKcrCcAQFmUzdFzCtA006djeKINCg20r9oB9FrBAdrnbJ4xQ6Q8ycgrjfAo2Nv2_CumT9QrQuPDDGz-F35mgfvU_m-YP-PuyA3b2j79Htq8RYmUIYeG4pKSPbGPdoNAalLvMuwKjRD07AwJ2WlihsgkMavlwPTg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600bf512-f956-43b4-acff-73f4b64118ff", "record_id": "flaws_cloudtrail:0000153:600bf512-f956-43b4-acff-73f4b64118ff", "row_index": 153, "timestamp": "2019-08-21T14:43:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1180, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600bf512-f956-43b4-acff-73f4b64118ff", "eventTime": "2019-08-21T14:43:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600bf512-f956-43b4-acff-73f4b64118ff", "record_id": "flaws_cloudtrail:0000154:600bf512-f956-43b4-acff-73f4b64118ff", "row_index": 154, "timestamp": "2019-08-21T14:43:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1180, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600bf512-f956-43b4-acff-73f4b64118ff", "eventTime": "2019-08-21T14:43:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae981bf-2125-48d7-b234-296e2873f7fb", "record_id": "flaws_cloudtrail:0000155:2ae981bf-2125-48d7-b234-296e2873f7fb", "row_index": 155, "timestamp": "2019-08-21T14:43:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae981bf-2125-48d7-b234-296e2873f7fb", "eventTime": "2019-08-21T14:43:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae981bf-2125-48d7-b234-296e2873f7fb", "record_id": "flaws_cloudtrail:0000156:2ae981bf-2125-48d7-b234-296e2873f7fb", "row_index": 156, "timestamp": "2019-08-21T14:43:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae981bf-2125-48d7-b234-296e2873f7fb", "eventTime": "2019-08-21T14:43:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70d2a81a-1b7d-43bb-94de-7d09e1779120", "record_id": "flaws_cloudtrail:0000157:70d2a81a-1b7d-43bb-94de-7d09e1779120", "row_index": 157, "timestamp": "2019-08-21T14:43:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70d2a81a-1b7d-43bb-94de-7d09e1779120", "eventTime": "2019-08-21T14:43:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70d2a81a-1b7d-43bb-94de-7d09e1779120", "record_id": "flaws_cloudtrail:0000158:70d2a81a-1b7d-43bb-94de-7d09e1779120", "row_index": 158, "timestamp": "2019-08-21T14:43:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70d2a81a-1b7d-43bb-94de-7d09e1779120", "eventTime": "2019-08-21T14:43:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb7264-0774-4bb4-b34a-d7b62c31be3c", "record_id": "flaws_cloudtrail:0000159:08fb7264-0774-4bb4-b34a-d7b62c31be3c", "row_index": 159, "timestamp": "2019-08-21T14:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb7264-0774-4bb4-b34a-d7b62c31be3c", "eventTime": "2019-08-21T14:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb7264-0774-4bb4-b34a-d7b62c31be3c", "record_id": "flaws_cloudtrail:0000160:08fb7264-0774-4bb4-b34a-d7b62c31be3c", "row_index": 160, "timestamp": "2019-08-21T14:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb7264-0774-4bb4-b34a-d7b62c31be3c", "eventTime": "2019-08-21T14:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5baf9eb-a50b-4e37-9371-15befe2dc00c", "record_id": "flaws_cloudtrail:0000161:f5baf9eb-a50b-4e37-9371-15befe2dc00c", "row_index": 161, "timestamp": "2019-08-21T14:43:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5baf9eb-a50b-4e37-9371-15befe2dc00c", "eventTime": "2019-08-21T14:43:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5baf9eb-a50b-4e37-9371-15befe2dc00c", "record_id": "flaws_cloudtrail:0000162:f5baf9eb-a50b-4e37-9371-15befe2dc00c", "row_index": 162, "timestamp": "2019-08-21T14:43:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5baf9eb-a50b-4e37-9371-15befe2dc00c", "eventTime": "2019-08-21T14:43:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d442763-1c20-400c-bd94-c3fcb679f208", "record_id": "flaws_cloudtrail:0000163:57d442763-1c20-400c-bd94-c3fcb679f208", "row_index": 163, "timestamp": "2019-08-21T14:43:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d442763-1c20-400c-bd94-c3fcb679f208", "eventTime": "2019-08-21T14:43:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d442763-1c20-400c-bd94-c3fcb679f208", "record_id": "flaws_cloudtrail:0000164:57d442763-1c20-400c-bd94-c3fcb679f208", "row_index": 164, "timestamp": "2019-08-21T14:43:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d442763-1c20-400c-bd94-c3fcb679f208", "eventTime": "2019-08-21T14:43:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42de84a5-0199-4564-a5fe-e5a710a29bd4", "record_id": "flaws_cloudtrail:0000165:42de84a5-0199-4564-a5fe-e5a710a29bd4", "row_index": 165, "timestamp": "2019-08-21T14:43:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42de84a5-0199-4564-a5fe-e5a710a29bd4", "eventTime": "2019-08-21T14:43:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AKR2E93u_XjLZW2OLJwHSINnCRU9QnGac8CgH30CnG14vKoBHf6oPF8ZUVyp_Ida0s3G6WREp4dy5GrkA0n5fi__2shTOgqetyOokOEaBXhPUr4AiDCtzI4F2WiBXQ_lMH_ax1xeX2otyjk4W2sNLyLkjgjJO97OeFkwVy3pXk1R5Z64Th3-uNCR1MQLhAqh_ijEflxAFiPzy8um7n5F548Uze4-5WKeOLHdsjZWfDlh8nWuQ2DVlnACloT8Sj_A_HmmjGlnD6-bqAfVnvOtnSxj3OV0NvXD23RtbcwYDL0aTJseZnNBd31nQ2qtaQ60G7QUpoe8lDvHG_MZTLBnKlPj8yIOnTuVNrfXh2lD-bxQBxpeB87ntqhGclGckJ2XBJvLks0u2Et9uES8qwfFdZNy3Tp91cZAUb0jm9oAC_XQ_ux4AVFpVDBefuJvpPnAviBBTgQ8uWwx8GW3gutDTOi1spmMyCbI7Gxvz-zg7cz9gQgR-yQLngviqbrT8wZGDAIMDgWHKJg4OKs3cNI9hrCLLsevis7RffISiRbBCI2DrLTPJBZavHLL0dZVMJF1-gvn1BrdmoBd_wVxH36nzJg9jR6TLz-IWPknWoUFG2qSYm85PN-5Tnnu2lcVa1fpTGT5Nkoxac9Hkc5YrRBodk01feIazg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42de84a5-0199-4564-a5fe-e5a710a29bd4", "record_id": "flaws_cloudtrail:0000166:42de84a5-0199-4564-a5fe-e5a710a29bd4", "row_index": 166, "timestamp": "2019-08-21T14:43:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42de84a5-0199-4564-a5fe-e5a710a29bd4", "eventTime": "2019-08-21T14:43:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AKR2E93u_XjLZW2OLJwHSINnCRU9QnGac8CgH30CnG14vKoBHf6oPF8ZUVyp_Ida0s3G6WREp4dy5GrkA0n5fi__2shTOgqetyOokOEaBXhPUr4AiDCtzI4F2WiBXQ_lMH_ax1xeX2otyjk4W2sNLyLkjgjJO97OeFkwVy3pXk1R5Z64Th3-uNCR1MQLhAqh_ijEflxAFiPzy8um7n5F548Uze4-5WKeOLHdsjZWfDlh8nWuQ2DVlnACloT8Sj_A_HmmjGlnD6-bqAfVnvOtnSxj3OV0NvXD23RtbcwYDL0aTJseZnNBd31nQ2qtaQ60G7QUpoe8lDvHG_MZTLBnKlPj8yIOnTuVNrfXh2lD-bxQBxpeB87ntqhGclGckJ2XBJvLks0u2Et9uES8qwfFdZNy3Tp91cZAUb0jm9oAC_XQ_ux4AVFpVDBefuJvpPnAviBBTgQ8uWwx8GW3gutDTOi1spmMyCbI7Gxvz-zg7cz9gQgR-yQLngviqbrT8wZGDAIMDgWHKJg4OKs3cNI9hrCLLsevis7RffISiRbBCI2DrLTPJBZavHLL0dZVMJF1-gvn1BrdmoBd_wVxH36nzJg9jR6TLz-IWPknWoUFG2qSYm85PN-5Tnnu2lcVa1fpTGT5Nkoxac9Hkc5YrRBodk01feIazg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c154851-d3c0-466c-aee8-1ce03f6b221a", "record_id": "flaws_cloudtrail:0000167:25c154851-d3c0-466c-aee8-1ce03f6b221a", "row_index": 167, "timestamp": "2019-08-21T14:43:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c154851-d3c0-466c-aee8-1ce03f6b221a", "eventTime": "2019-08-21T14:43:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c154851-d3c0-466c-aee8-1ce03f6b221a", "record_id": "flaws_cloudtrail:0000168:25c154851-d3c0-466c-aee8-1ce03f6b221a", "row_index": 168, "timestamp": "2019-08-21T14:43:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c154851-d3c0-466c-aee8-1ce03f6b221a", "eventTime": "2019-08-21T14:43:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "record_id": "flaws_cloudtrail:0000169:a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "row_index": 169, "timestamp": "2019-08-21T14:43:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "eventTime": "2019-08-21T14:43:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "record_id": "flaws_cloudtrail:0000170:a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "row_index": 170, "timestamp": "2019-08-21T14:43:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67cf61c-af42-4bef-be8a-1bc6e3641cf7", "eventTime": "2019-08-21T14:43:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "449f52e1-d14c-4b53-a188-10599c4ca9", "record_id": "flaws_cloudtrail:0000171:449f52e1-d14c-4b53-a188-10599c4ca9", "row_index": 171, "timestamp": "2019-08-21T14:43:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "449f52e1-d14c-4b53-a188-10599c4ca9", "eventTime": "2019-08-21T14:43:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "449f52e1-d14c-4b53-a188-10599c4ca9", "record_id": "flaws_cloudtrail:0000172:449f52e1-d14c-4b53-a188-10599c4ca9", "row_index": 172, "timestamp": "2019-08-21T14:43:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "449f52e1-d14c-4b53-a188-10599c4ca9", "eventTime": "2019-08-21T14:43:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87bc021c-e0b5-45b1-af02-c1001e1a874c", "record_id": "flaws_cloudtrail:0000173:87bc021c-e0b5-45b1-af02-c1001e1a874c", "row_index": 173, "timestamp": "2019-08-21T14:43:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87bc021c-e0b5-45b1-af02-c1001e1a874c", "eventTime": "2019-08-21T14:43:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87bc021c-e0b5-45b1-af02-c1001e1a874c", "record_id": "flaws_cloudtrail:0000174:87bc021c-e0b5-45b1-af02-c1001e1a874c", "row_index": 174, "timestamp": "2019-08-21T14:43:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87bc021c-e0b5-45b1-af02-c1001e1a874c", "eventTime": "2019-08-21T14:43:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7fc83d-cd96-466a-ad79-0d37d73538a4", "record_id": "flaws_cloudtrail:0000175:4a7fc83d-cd96-466a-ad79-0d37d73538a4", "row_index": 175, "timestamp": "2019-08-21T14:43:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7fc83d-cd96-466a-ad79-0d37d73538a4", "eventTime": "2019-08-21T14:43:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7fc83d-cd96-466a-ad79-0d37d73538a4", "record_id": "flaws_cloudtrail:0000176:4a7fc83d-cd96-466a-ad79-0d37d73538a4", "row_index": 176, "timestamp": "2019-08-21T14:43:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7fc83d-cd96-466a-ad79-0d37d73538a4", "eventTime": "2019-08-21T14:43:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0839528-f82b-4855-a348-614bbe5746e2", "record_id": "flaws_cloudtrail:0000177:e0839528-f82b-4855-a348-614bbe5746e2", "row_index": 177, "timestamp": "2019-08-21T14:43:53Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 541, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0839528-f82b-4855-a348-614bbe5746e2", "eventTime": "2019-08-21T14:43:53Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "record_id": "flaws_cloudtrail:0000178:4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "row_index": 178, "timestamp": "2019-08-21T14:43:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "eventTime": "2019-08-21T14:43:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "record_id": "flaws_cloudtrail:0000179:4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "row_index": 179, "timestamp": "2019-08-21T14:43:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce4d86d-ebb4-4555-bb13-5bf35b44befa", "eventTime": "2019-08-21T14:43:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063bb98a-7b8d-4707-8c32-7d1f57c7751d", "record_id": "flaws_cloudtrail:0000180:063bb98a-7b8d-4707-8c32-7d1f57c7751d", "row_index": 180, "timestamp": "2019-08-21T14:43:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063bb98a-7b8d-4707-8c32-7d1f57c7751d", "eventTime": "2019-08-21T14:43:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063bb98a-7b8d-4707-8c32-7d1f57c7751d", "record_id": "flaws_cloudtrail:0000181:063bb98a-7b8d-4707-8c32-7d1f57c7751d", "row_index": 181, "timestamp": "2019-08-21T14:43:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063bb98a-7b8d-4707-8c32-7d1f57c7751d", "eventTime": "2019-08-21T14:43:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d18a069-230b-427f-958b-cb8f1c071029", "record_id": "flaws_cloudtrail:0000182:9d18a069-230b-427f-958b-cb8f1c071029", "row_index": 182, "timestamp": "2019-08-21T14:43:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d18a069-230b-427f-958b-cb8f1c071029", "eventTime": "2019-08-21T14:43:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d18a069-230b-427f-958b-cb8f1c071029", "record_id": "flaws_cloudtrail:0000183:9d18a069-230b-427f-958b-cb8f1c071029", "row_index": 183, "timestamp": "2019-08-21T14:43:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d18a069-230b-427f-958b-cb8f1c071029", "eventTime": "2019-08-21T14:43:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb05e6-dda4-4353-ab42-8cc13adb58d6", "record_id": "flaws_cloudtrail:0000184:08fb05e6-dda4-4353-ab42-8cc13adb58d6", "row_index": 184, "timestamp": "2019-08-21T14:44:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb05e6-dda4-4353-ab42-8cc13adb58d6", "eventTime": "2019-08-21T14:44:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb05e6-dda4-4353-ab42-8cc13adb58d6", "record_id": "flaws_cloudtrail:0000185:08fb05e6-dda4-4353-ab42-8cc13adb58d6", "row_index": 185, "timestamp": "2019-08-21T14:44:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb05e6-dda4-4353-ab42-8cc13adb58d6", "eventTime": "2019-08-21T14:44:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb17be5e-f8af-4572-ad68-04c282478a6", "record_id": "flaws_cloudtrail:0000186:fb17be5e-f8af-4572-ad68-04c282478a6", "row_index": 186, "timestamp": "2019-08-21T14:44:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb17be5e-f8af-4572-ad68-04c282478a6", "eventTime": "2019-08-21T14:44:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CoFrNPGFjO-CcesrhX066wU5wlNEwiE1sRB7afTF16SNZZGRuIR8n-li_os_MunrrS30fRXOVSrj4lI0JvWfPqvLc2BOBqbBk88hWf_7G1njko7UGf33PfFq-vvqXQHwq4GvSwBXKdi4IK_4wn0ocXeFBTiIzfh15lyR-7Ai2nlsfdOk1Kuhglcko5x8bxf5sbAh5nkxisxa_UU3IuE1RfUhtvfCfXGuVl4db1DeMhPBrZF9eRZ4iAdtkDE9g0V9PZdjErcd-Y6IJD6zMJiF5H1B6rgqc2GiLitId_CG9Y13k0Wt-UzeqbNLE2WhmOVr_3cloG5IKEh5HWXuQoxcmU0tcsAoMhmm7qhI2BJ95h2iU0ovIQn6GsR5OZj6v8_hczJEEoFTzBitwrUqajICuOBFiO0cgACOlxCOvlU8DdNp7o6zit_8WChhWqU1idg75uhx-eavL-LePOoA4EFyh7sYrXiHxb-_oBJ11bkgpdeFEdv1F6z9He5T5hIr-6Qgw8efb4ulUIZ2mp5YXXHnmGrQsZbX4j82d4bbinKRRvJh59X3iOVQ-nHT3TmbOWfoZ_M45WjZ5VOxX8P_o4-yWewUdJlwqDtj6TZ6ch0sDCcfhiHkwMMFw7gWtACukd93N_U8Cm475039gy1kddFqFfWK1cv6bq_t", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "record_id": "flaws_cloudtrail:0000187:0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "row_index": 187, "timestamp": "2019-08-21T14:44:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "eventTime": "2019-08-21T14:44:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb17be5e-f8af-4572-ad68-04c282478a6", "record_id": "flaws_cloudtrail:0000188:fb17be5e-f8af-4572-ad68-04c282478a6", "row_index": 188, "timestamp": "2019-08-21T14:44:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb17be5e-f8af-4572-ad68-04c282478a6", "eventTime": "2019-08-21T14:44:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CoFrNPGFjO-CcesrhX066wU5wlNEwiE1sRB7afTF16SNZZGRuIR8n-li_os_MunrrS30fRXOVSrj4lI0JvWfPqvLc2BOBqbBk88hWf_7G1njko7UGf33PfFq-vvqXQHwq4GvSwBXKdi4IK_4wn0ocXeFBTiIzfh15lyR-7Ai2nlsfdOk1Kuhglcko5x8bxf5sbAh5nkxisxa_UU3IuE1RfUhtvfCfXGuVl4db1DeMhPBrZF9eRZ4iAdtkDE9g0V9PZdjErcd-Y6IJD6zMJiF5H1B6rgqc2GiLitId_CG9Y13k0Wt-UzeqbNLE2WhmOVr_3cloG5IKEh5HWXuQoxcmU0tcsAoMhmm7qhI2BJ95h2iU0ovIQn6GsR5OZj6v8_hczJEEoFTzBitwrUqajICuOBFiO0cgACOlxCOvlU8DdNp7o6zit_8WChhWqU1idg75uhx-eavL-LePOoA4EFyh7sYrXiHxb-_oBJ11bkgpdeFEdv1F6z9He5T5hIr-6Qgw8efb4ulUIZ2mp5YXXHnmGrQsZbX4j82d4bbinKRRvJh59X3iOVQ-nHT3TmbOWfoZ_M45WjZ5VOxX8P_o4-yWewUdJlwqDtj6TZ6ch0sDCcfhiHkwMMFw7gWtACukd93N_U8Cm475039gy1kddFqFfWK1cv6bq_t", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "record_id": "flaws_cloudtrail:0000189:0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "row_index": 189, "timestamp": "2019-08-21T14:44:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bbaeb47-267e-455e-bfb7-d4001b8ab7df", "eventTime": "2019-08-21T14:44:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae26bb29-5598-4580-8993-0161bc8ac85f", "record_id": "flaws_cloudtrail:0000190:ae26bb29-5598-4580-8993-0161bc8ac85f", "row_index": 190, "timestamp": "2019-08-21T14:44:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae26bb29-5598-4580-8993-0161bc8ac85f", "eventTime": "2019-08-21T14:44:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae26bb29-5598-4580-8993-0161bc8ac85f", "record_id": "flaws_cloudtrail:0000191:ae26bb29-5598-4580-8993-0161bc8ac85f", "row_index": 191, "timestamp": "2019-08-21T14:44:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae26bb29-5598-4580-8993-0161bc8ac85f", "eventTime": "2019-08-21T14:44:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b290072e-7fc1-434e-b82e-32eadb64a1bf", "record_id": "flaws_cloudtrail:0000192:b290072e-7fc1-434e-b82e-32eadb64a1bf", "row_index": 192, "timestamp": "2019-08-21T14:44:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b290072e-7fc1-434e-b82e-32eadb64a1bf", "eventTime": "2019-08-21T14:44:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b290072e-7fc1-434e-b82e-32eadb64a1bf", "record_id": "flaws_cloudtrail:0000193:b290072e-7fc1-434e-b82e-32eadb64a1bf", "row_index": 193, "timestamp": "2019-08-21T14:44:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b290072e-7fc1-434e-b82e-32eadb64a1bf", "eventTime": "2019-08-21T14:44:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55848c9d-af55-4779-9fb8-04e9af60fa7d", "record_id": "flaws_cloudtrail:0000194:55848c9d-af55-4779-9fb8-04e9af60fa7d", "row_index": 194, "timestamp": "2019-08-21T14:44:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55848c9d-af55-4779-9fb8-04e9af60fa7d", "eventTime": "2019-08-21T14:44:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55848c9d-af55-4779-9fb8-04e9af60fa7d", "record_id": "flaws_cloudtrail:0000195:55848c9d-af55-4779-9fb8-04e9af60fa7d", "row_index": 195, "timestamp": "2019-08-21T14:44:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55848c9d-af55-4779-9fb8-04e9af60fa7d", "eventTime": "2019-08-21T14:44:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e891175a-7475-4544-aae8-9510c3efb981", "record_id": "flaws_cloudtrail:0000196:e891175a-7475-4544-aae8-9510c3efb981", "row_index": 196, "timestamp": "2019-08-21T14:44:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e891175a-7475-4544-aae8-9510c3efb981", "eventTime": "2019-08-21T14:44:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _JxYiVEIbRcpzk191BFpJSZjiFw1NfjF7qMLpH02mArnYvFnM-XaliaN5knFRFw8uvPRpix1Kl1mMRg4cwgz8nXcQR5320FDdANrcHAUdO3-66XFCJSKXc4gPU2gmdbIXbyZfNnj34y2nWmt-slppvEqQuc1Aa7QYoeOdNBM7Hl_RJj9elnf2HOu-iq63Ux2U48qcv6GMrPIr5JP7mKr32TkduAA1hx6JxhUFbTY4dy4XK6DU_7oNd-kjExE8OWgGo9NWgtxCC2w8zdIjC9UGdL1AG9O6qH3D5doKqJh6qciInIYvpn_EkhS0MHSo4xt744rlOdeiOtC5PvU7m8_n-GuIhniJZO1RrpbHN5aMOWNuQ7zo4XM9PePhj7AR1kUCDQaqKtRszFIoYKzHlY46yCIBt6M7soS71mbB6LFzaUaUOcazl5e6uT-WRLarSw0To35YpWT0pnopMEYehHTdfJbRXgvUe4K7XBZgBacK_lLr9dZ2FiyG8oDH5b737f5vrtUtue-O_wkP88vW1oVyLRu4MUNJeDFmFlXNNBKbfpqggnJpR_2ryr-Xyp5qzTlMrZDCxIBwgwfU3gwGjFcFEbSQMrg9IxIQ4JBSZuid1oXoMr1QVSskCJenlLtrInm8o2GX2jCV6r3sEk-KKfGVo9YZFD8T6w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e891175a-7475-4544-aae8-9510c3efb981", "record_id": "flaws_cloudtrail:0000197:e891175a-7475-4544-aae8-9510c3efb981", "row_index": 197, "timestamp": "2019-08-21T14:44:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e891175a-7475-4544-aae8-9510c3efb981", "eventTime": "2019-08-21T14:44:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _JxYiVEIbRcpzk191BFpJSZjiFw1NfjF7qMLpH02mArnYvFnM-XaliaN5knFRFw8uvPRpix1Kl1mMRg4cwgz8nXcQR5320FDdANrcHAUdO3-66XFCJSKXc4gPU2gmdbIXbyZfNnj34y2nWmt-slppvEqQuc1Aa7QYoeOdNBM7Hl_RJj9elnf2HOu-iq63Ux2U48qcv6GMrPIr5JP7mKr32TkduAA1hx6JxhUFbTY4dy4XK6DU_7oNd-kjExE8OWgGo9NWgtxCC2w8zdIjC9UGdL1AG9O6qH3D5doKqJh6qciInIYvpn_EkhS0MHSo4xt744rlOdeiOtC5PvU7m8_n-GuIhniJZO1RrpbHN5aMOWNuQ7zo4XM9PePhj7AR1kUCDQaqKtRszFIoYKzHlY46yCIBt6M7soS71mbB6LFzaUaUOcazl5e6uT-WRLarSw0To35YpWT0pnopMEYehHTdfJbRXgvUe4K7XBZgBacK_lLr9dZ2FiyG8oDH5b737f5vrtUtue-O_wkP88vW1oVyLRu4MUNJeDFmFlXNNBKbfpqggnJpR_2ryr-Xyp5qzTlMrZDCxIBwgwfU3gwGjFcFEbSQMrg9IxIQ4JBSZuid1oXoMr1QVSskCJenlLtrInm8o2GX2jCV6r3sEk-KKfGVo9YZFD8T6w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "record_id": "flaws_cloudtrail:0000198:c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "row_index": 198, "timestamp": "2019-08-21T14:44:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "eventTime": "2019-08-21T14:44:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "record_id": "flaws_cloudtrail:0000199:e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "row_index": 199, "timestamp": "2019-08-21T14:44:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "eventTime": "2019-08-21T14:44:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1Vugnp9e7toGc7RfafbwtYKDv5WKZ5GdGIqbrOxnFI5OFHe-iM47zRrV6ZN3RAIWEeD9tEsOSKqPHKJDmRtVPEWbCV6mBxCYgKhw-wzqZN9VP6QA4rwFnRryWctB_K67ReqTIl6VL63R6WtjG5Rg7MjP9Dobcm1Q8fR48kqn_8fSIXUyA_bzZR16oRT8GUuPfRGIxZNcTTWJhI6Q3qhPmleHz_FXU0ujaiKpHYIdssm6h_ZBqe2_A8da23CXbyGwOrtMxTeic5oBcoquqaV63XlfcWINeAkQK59AN_vFi3aIEyzrEJu65rLTG0xpY_HQU0Ja6Td46rLiJazJFBIC1rhyu3Ly_3Ph0LuoR7Gu5wVoOfx0V5cFDaeM2T2a_3BmoOfyGDnjlsa-yXvM6wv_e-L65A7mTnHfg6D0qzHyTxUdwSENp5t6KJ8jztR0AaAu0tb9l0GnY6NFvL-boCA2YD9K2m0dVc3m4kgTFYce1AsLwN0psXyne4I6xBFCSuBP3fKpjlJ28YcZEf9me09DwspbCJcOp5m8HjpuqFePqICWAsMbXcHjHFR1pjdz4yNDEJ6sEu-yQUT5QBT5TpN-Gc1PGeYNc9P1IRStSEDFQr1giGQD7FnvYa60qN1oUPoSgNanR8WUa9OdpYbla79SmkSHi8zWQhs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "record_id": "flaws_cloudtrail:0000200:c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "row_index": 200, "timestamp": "2019-08-21T14:44:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c91bd6d0-7ae0-4c30-9ab5-516b949f5fac", "eventTime": "2019-08-21T14:44:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "record_id": "flaws_cloudtrail:0000201:e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "row_index": 201, "timestamp": "2019-08-21T14:44:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1720a91-68d4-4b77-b626-8ea29a2b2f8c", "eventTime": "2019-08-21T14:44:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1Vugnp9e7toGc7RfafbwtYKDv5WKZ5GdGIqbrOxnFI5OFHe-iM47zRrV6ZN3RAIWEeD9tEsOSKqPHKJDmRtVPEWbCV6mBxCYgKhw-wzqZN9VP6QA4rwFnRryWctB_K67ReqTIl6VL63R6WtjG5Rg7MjP9Dobcm1Q8fR48kqn_8fSIXUyA_bzZR16oRT8GUuPfRGIxZNcTTWJhI6Q3qhPmleHz_FXU0ujaiKpHYIdssm6h_ZBqe2_A8da23CXbyGwOrtMxTeic5oBcoquqaV63XlfcWINeAkQK59AN_vFi3aIEyzrEJu65rLTG0xpY_HQU0Ja6Td46rLiJazJFBIC1rhyu3Ly_3Ph0LuoR7Gu5wVoOfx0V5cFDaeM2T2a_3BmoOfyGDnjlsa-yXvM6wv_e-L65A7mTnHfg6D0qzHyTxUdwSENp5t6KJ8jztR0AaAu0tb9l0GnY6NFvL-boCA2YD9K2m0dVc3m4kgTFYce1AsLwN0psXyne4I6xBFCSuBP3fKpjlJ28YcZEf9me09DwspbCJcOp5m8HjpuqFePqICWAsMbXcHjHFR1pjdz4yNDEJ6sEu-yQUT5QBT5TpN-Gc1PGeYNc9P1IRStSEDFQr1giGQD7FnvYa60qN1oUPoSgNanR8WUa9OdpYbla79SmkSHi8zWQhs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f31c396-a31b-4087-a3b2-d24453e60a", "record_id": "flaws_cloudtrail:0000202:2f31c396-a31b-4087-a3b2-d24453e60a", "row_index": 202, "timestamp": "2019-08-21T14:44:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f31c396-a31b-4087-a3b2-d24453e60a", "eventTime": "2019-08-21T14:44:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f31c396-a31b-4087-a3b2-d24453e60a", "record_id": "flaws_cloudtrail:0000203:2f31c396-a31b-4087-a3b2-d24453e60a", "row_index": 203, "timestamp": "2019-08-21T14:44:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f31c396-a31b-4087-a3b2-d24453e60a", "eventTime": "2019-08-21T14:44:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "record_id": "flaws_cloudtrail:0000204:daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "row_index": 204, "timestamp": "2019-08-21T14:44:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "eventTime": "2019-08-21T14:44:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: BRXOIEVQ0_E1mZGrIEQgRkJvJjxxcx7Ot7Yn1629dR1kDXf2kyiuB5hLun7KqyOJXn79auCzSaV7tHXZrbq_JiROJsq4-_k48xRmqb1G-GDktMfjIDD3BY85b4Dm0wvrMCf-b09o59SpdvW5dTxIVLgBjnlJaCY5I_1sEHdSlCnnIPSvpGBk4QCNIWN1OpBbGJfRZxSMk6ZMvayIQxtVaezAdfs21uBJ_2XtzkAvSVionejKcKcwoDmk2nkaZvsVPUAjHkIHgzLCQc-LIwGFT5AdMvlS___TJN3muC1xMg2e6ERTazs-eS8mfaAmwBmRhvcsuFoFSU6e73es9Ge_TvU92X8MNhzymPY0lwCHkC4xGVO_Po7ikLoMBAvNSSkvsORZf_y-pNJ9xehPtNb5YRu-cHlHGr0AiKAGbIR-6t210rMJerkFXcJS3jVM0WVQbRkDESSHSigkyXhovYeqVT5nMcouKNhL6gRpfyP1YqkhZWVd6BtLwNho4AAhceeKuf1Ln0s3XSvxI54UjZILPyMe7vAODQcwTNa0Hkz6YZtbzyeftPlVZeqXS7TGqcWFcHn6Fhce3Ihxt_7MfUzvaz7Kp4zSbhASVo_6crusx6dkx8259-ZU91NDuvFBOAgO6hxnQWVR4Xl6uapYNFHNnpEiLJcesII", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "record_id": "flaws_cloudtrail:0000205:55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "row_index": 205, "timestamp": "2019-08-21T14:44:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "eventTime": "2019-08-21T14:44:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "record_id": "flaws_cloudtrail:0000206:daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "row_index": 206, "timestamp": "2019-08-21T14:44:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa2c9eb-cefd-49b6-af97-2a1d9ca9d927", "eventTime": "2019-08-21T14:44:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: BRXOIEVQ0_E1mZGrIEQgRkJvJjxxcx7Ot7Yn1629dR1kDXf2kyiuB5hLun7KqyOJXn79auCzSaV7tHXZrbq_JiROJsq4-_k48xRmqb1G-GDktMfjIDD3BY85b4Dm0wvrMCf-b09o59SpdvW5dTxIVLgBjnlJaCY5I_1sEHdSlCnnIPSvpGBk4QCNIWN1OpBbGJfRZxSMk6ZMvayIQxtVaezAdfs21uBJ_2XtzkAvSVionejKcKcwoDmk2nkaZvsVPUAjHkIHgzLCQc-LIwGFT5AdMvlS___TJN3muC1xMg2e6ERTazs-eS8mfaAmwBmRhvcsuFoFSU6e73es9Ge_TvU92X8MNhzymPY0lwCHkC4xGVO_Po7ikLoMBAvNSSkvsORZf_y-pNJ9xehPtNb5YRu-cHlHGr0AiKAGbIR-6t210rMJerkFXcJS3jVM0WVQbRkDESSHSigkyXhovYeqVT5nMcouKNhL6gRpfyP1YqkhZWVd6BtLwNho4AAhceeKuf1Ln0s3XSvxI54UjZILPyMe7vAODQcwTNa0Hkz6YZtbzyeftPlVZeqXS7TGqcWFcHn6Fhce3Ihxt_7MfUzvaz7Kp4zSbhASVo_6crusx6dkx8259-ZU91NDuvFBOAgO6hxnQWVR4Xl6uapYNFHNnpEiLJcesII", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "record_id": "flaws_cloudtrail:0000207:55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "row_index": 207, "timestamp": "2019-08-21T14:44:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a02d7f-18b0-469a-bc1a-0ba95b6867e5", "eventTime": "2019-08-21T14:44:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe996aa-e204-4f92-a114-35b2c27320f1", "record_id": "flaws_cloudtrail:0000208:2fe996aa-e204-4f92-a114-35b2c27320f1", "row_index": 208, "timestamp": "2019-08-21T14:44:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe996aa-e204-4f92-a114-35b2c27320f1", "eventTime": "2019-08-21T14:44:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WjoNmnCho8riUMYatD0_HYITX5qfETSnSvCTcleZWGy_Ls1mgGbz1Vpwo7BUs-GKZh8zQ0I7iKuBFRRlAmsHj7FbhfT_TapZmKSzNXXQ_l77IJXVotPv2VrWL8MKeMyI4sR3xfQRFL9cpWp2zS-rnzTevwUi6eDmqntRvCqtqVQNUXlXqfJtxDhrIrwfGPWZtp6bFnBHqLn8pwGdN85EbkZnG86OgtqG5OKUcgit14JLiML1FpkM0hsM8yK0viMZfaHozkH0loszRaf-xMzhcN0ZuA5cKPGvxI3dOpa0OyfYbgX-RV06rreEcQA9Fg72b32DNY9huSFZbeN4802byKzFzdzKoROu4JEjHAv1NE0x9m_C07O1aqXsuhQuKHkXvAGqS-tmvHRZAsFRRbcKy27xz3B4C71wN3yHCn8BQsSEFlM4qNa5MNVEOZk3zUFoGH4VdRZbn8lYoUa_NMso4BxApApdfcxR9D1HSNUB31Dtftcp0EMBy_a1hdYd3G2ShWhG-VYDDngdvzvLiHlwln5U6fnXohBnx8eygzEXu7k5RsYwKpjb9d6iMDN9GKGe4VRhQ2plmJcdT-7noxfpIBitspCJkHGQIObDxqNXbnfKOlj2FkGBub6Bd9kvby-U_TnAyVMa_xC1TUlChvtjhOQNx-5zaA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe996aa-e204-4f92-a114-35b2c27320f1", "record_id": "flaws_cloudtrail:0000209:2fe996aa-e204-4f92-a114-35b2c27320f1", "row_index": 209, "timestamp": "2019-08-21T14:44:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe996aa-e204-4f92-a114-35b2c27320f1", "eventTime": "2019-08-21T14:44:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WjoNmnCho8riUMYatD0_HYITX5qfETSnSvCTcleZWGy_Ls1mgGbz1Vpwo7BUs-GKZh8zQ0I7iKuBFRRlAmsHj7FbhfT_TapZmKSzNXXQ_l77IJXVotPv2VrWL8MKeMyI4sR3xfQRFL9cpWp2zS-rnzTevwUi6eDmqntRvCqtqVQNUXlXqfJtxDhrIrwfGPWZtp6bFnBHqLn8pwGdN85EbkZnG86OgtqG5OKUcgit14JLiML1FpkM0hsM8yK0viMZfaHozkH0loszRaf-xMzhcN0ZuA5cKPGvxI3dOpa0OyfYbgX-RV06rreEcQA9Fg72b32DNY9huSFZbeN4802byKzFzdzKoROu4JEjHAv1NE0x9m_C07O1aqXsuhQuKHkXvAGqS-tmvHRZAsFRRbcKy27xz3B4C71wN3yHCn8BQsSEFlM4qNa5MNVEOZk3zUFoGH4VdRZbn8lYoUa_NMso4BxApApdfcxR9D1HSNUB31Dtftcp0EMBy_a1hdYd3G2ShWhG-VYDDngdvzvLiHlwln5U6fnXohBnx8eygzEXu7k5RsYwKpjb9d6iMDN9GKGe4VRhQ2plmJcdT-7noxfpIBitspCJkHGQIObDxqNXbnfKOlj2FkGBub6Bd9kvby-U_TnAyVMa_xC1TUlChvtjhOQNx-5zaA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeda92b2-54ab-4457-95d1-609dad2f293d", "record_id": "flaws_cloudtrail:0000210:eeda92b2-54ab-4457-95d1-609dad2f293d", "row_index": 210, "timestamp": "2019-08-21T14:44:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeda92b2-54ab-4457-95d1-609dad2f293d", "eventTime": "2019-08-21T14:44:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeda92b2-54ab-4457-95d1-609dad2f293d", "record_id": "flaws_cloudtrail:0000211:eeda92b2-54ab-4457-95d1-609dad2f293d", "row_index": 211, "timestamp": "2019-08-21T14:44:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeda92b2-54ab-4457-95d1-609dad2f293d", "eventTime": "2019-08-21T14:44:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "record_id": "flaws_cloudtrail:0000212:5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "row_index": 212, "timestamp": "2019-08-21T14:44:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "eventTime": "2019-08-21T14:44:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "record_id": "flaws_cloudtrail:0000213:5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "row_index": 213, "timestamp": "2019-08-21T14:44:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b385ebf-f34f-4f9d-8bb6-0db4c8d82f14", "eventTime": "2019-08-21T14:44:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4ffe207-a453-4cb3-a116-c373f038326", "record_id": "flaws_cloudtrail:0000214:e4ffe207-a453-4cb3-a116-c373f038326", "row_index": 214, "timestamp": "2019-08-21T14:44:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4ffe207-a453-4cb3-a116-c373f038326", "eventTime": "2019-08-21T14:44:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4ffe207-a453-4cb3-a116-c373f038326", "record_id": "flaws_cloudtrail:0000215:e4ffe207-a453-4cb3-a116-c373f038326", "row_index": 215, "timestamp": "2019-08-21T14:44:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4ffe207-a453-4cb3-a116-c373f038326", "eventTime": "2019-08-21T14:44:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405cdb5b-f89d-4bfa-8105-1561c88220e4", "record_id": "flaws_cloudtrail:0000216:405cdb5b-f89d-4bfa-8105-1561c88220e4", "row_index": 216, "timestamp": "2019-08-21T14:44:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405cdb5b-f89d-4bfa-8105-1561c88220e4", "eventTime": "2019-08-21T14:44:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f740c7b-0793-46b2-98d2-356c60ba0413", "record_id": "flaws_cloudtrail:0000217:5f740c7b-0793-46b2-98d2-356c60ba0413", "row_index": 217, "timestamp": "2019-08-21T14:44:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f740c7b-0793-46b2-98d2-356c60ba0413", "eventTime": "2019-08-21T14:44:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EiUOKeTH4O5jZFznOuilTFEGNiKJyvNtcsjW37pfd6ZPV8_ptWKvkSr00baOpgiy00CcsviAqxcyX-1j8UMCbiyhJ3JBBFPWsi-xPjGApe4Tcgn4X69oAD_K-_IIchxTCjYfkNz9fqtQxrvi11c6mbTz-SBaLlsZAf572aAJQnrPjNMvdXXuv7e1mat7e5HQAnHHKKeJYHJF8qICNqRr-iIQDCDiDk2Tb8J1DsfWkAb8XABcu6dXdaljI1X49RohyLXY9a9Qnmu3jvnCCAMqMy9gkxw2IIvMVVdaijqpAv_gRZY2xL3ldDVB5nwlyzi0OyvT0EHMgNruG_0NnJt_xd_LVVDoiW2pWMlwDXkBPqsKsbdhNBHb48kIhe23cw64IjMrhDV2y8pjueaJxuCpv4aS-lB5Sj6wX2IhCZODqZlJ8mPdGAQy_4wqzhshFOM6LTmYgP3Hq5yYEfun2PWhiylhJwRDzLgoAe-FUkAjyP1kYnUA0y-KMpcFLQnwso5ZzTyPJKkm6rGIIZ4oGghxD69B6v1PQSBcKnQJMSPSB2NhCIejSvgr6pigRAT4_hx0QugkEFUJkdf53kaYl-texQOBBdVAmtCgXXfs-Hem2polVrYpzbwgaf9-odhjOcuvI7FyQn6-GE2AAA6McjOojC88gRczRg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405cdb5b-f89d-4bfa-8105-1561c88220e4", "record_id": "flaws_cloudtrail:0000218:405cdb5b-f89d-4bfa-8105-1561c88220e4", "row_index": 218, "timestamp": "2019-08-21T14:44:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405cdb5b-f89d-4bfa-8105-1561c88220e4", "eventTime": "2019-08-21T14:44:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f740c7b-0793-46b2-98d2-356c60ba0413", "record_id": "flaws_cloudtrail:0000219:5f740c7b-0793-46b2-98d2-356c60ba0413", "row_index": 219, "timestamp": "2019-08-21T14:44:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f740c7b-0793-46b2-98d2-356c60ba0413", "eventTime": "2019-08-21T14:44:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EiUOKeTH4O5jZFznOuilTFEGNiKJyvNtcsjW37pfd6ZPV8_ptWKvkSr00baOpgiy00CcsviAqxcyX-1j8UMCbiyhJ3JBBFPWsi-xPjGApe4Tcgn4X69oAD_K-_IIchxTCjYfkNz9fqtQxrvi11c6mbTz-SBaLlsZAf572aAJQnrPjNMvdXXuv7e1mat7e5HQAnHHKKeJYHJF8qICNqRr-iIQDCDiDk2Tb8J1DsfWkAb8XABcu6dXdaljI1X49RohyLXY9a9Qnmu3jvnCCAMqMy9gkxw2IIvMVVdaijqpAv_gRZY2xL3ldDVB5nwlyzi0OyvT0EHMgNruG_0NnJt_xd_LVVDoiW2pWMlwDXkBPqsKsbdhNBHb48kIhe23cw64IjMrhDV2y8pjueaJxuCpv4aS-lB5Sj6wX2IhCZODqZlJ8mPdGAQy_4wqzhshFOM6LTmYgP3Hq5yYEfun2PWhiylhJwRDzLgoAe-FUkAjyP1kYnUA0y-KMpcFLQnwso5ZzTyPJKkm6rGIIZ4oGghxD69B6v1PQSBcKnQJMSPSB2NhCIejSvgr6pigRAT4_hx0QugkEFUJkdf53kaYl-texQOBBdVAmtCgXXfs-Hem2polVrYpzbwgaf9-odhjOcuvI7FyQn6-GE2AAA6McjOojC88gRczRg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45bcee82-1803-479f-9a94-3c3291f1aa1a", "record_id": "flaws_cloudtrail:0000220:45bcee82-1803-479f-9a94-3c3291f1aa1a", "row_index": 220, "timestamp": "2019-08-21T14:44:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45bcee82-1803-479f-9a94-3c3291f1aa1a", "eventTime": "2019-08-21T14:44:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: m-1ecgIf0csp239hrCIBEigOy1jGmPs36Dp_7ZP15211Spon5iNAvUOlBjh5l34xzI_VCPsT6TIsnhXKRAIG6gApbnjhgtJ2LzOJNthSIswQhl_SpkuUQMXp53bSlF1Lg-glPOmzpSuAxdemi75B2zffmc9i5KVCHhhMkFYXfijg3atLxPqShJxjTiDkpW_ZEOe6ZhR0bCfpLux5zzK2pW3fb4KTEwWv7qoJtHHeS5FwlZbTpEWidHSv7k3T2DPpAyp6-LW9I1SpvNS6bNHa3v2xJwyW2y1XZ_z48Gd6Cae_BIeP5F3yO013JmZqh-uR_qCFQ9So6MIsUUyQJLgVlIYTNprfen3bEwjNoUrdyJ-AkRsd0ZsHkeXK4G8GTdbMHRszO3PT5Ucl2DX-ys44KRetEPH8U1aDHHA8-VIt7WGNSjlD_UNLtw18meanGzmnWA-eZjOq_7uT7F7fRX0qTd0be1JODS67B0k0vcMC93-i5Jb-gMbEHrlTkAvQqfYAd9r8VUIEo_FozuEnrN41BlJ1jF0QNgM0xxEkm9DreFc6zFIPJtO_HuDmr3vDKHU3X8dO-UUJYWD_Zo1ohO5jV_4uEZWPuTlaT0gRDGxKfmDSZDAoZ1IrgrEUV5waoPVb4nqkmQDIcEU4Le1e7Y_TKmpVgBRkoE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45bcee82-1803-479f-9a94-3c3291f1aa1a", "record_id": "flaws_cloudtrail:0000221:45bcee82-1803-479f-9a94-3c3291f1aa1a", "row_index": 221, "timestamp": "2019-08-21T14:44:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45bcee82-1803-479f-9a94-3c3291f1aa1a", "eventTime": "2019-08-21T14:44:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: m-1ecgIf0csp239hrCIBEigOy1jGmPs36Dp_7ZP15211Spon5iNAvUOlBjh5l34xzI_VCPsT6TIsnhXKRAIG6gApbnjhgtJ2LzOJNthSIswQhl_SpkuUQMXp53bSlF1Lg-glPOmzpSuAxdemi75B2zffmc9i5KVCHhhMkFYXfijg3atLxPqShJxjTiDkpW_ZEOe6ZhR0bCfpLux5zzK2pW3fb4KTEwWv7qoJtHHeS5FwlZbTpEWidHSv7k3T2DPpAyp6-LW9I1SpvNS6bNHa3v2xJwyW2y1XZ_z48Gd6Cae_BIeP5F3yO013JmZqh-uR_qCFQ9So6MIsUUyQJLgVlIYTNprfen3bEwjNoUrdyJ-AkRsd0ZsHkeXK4G8GTdbMHRszO3PT5Ucl2DX-ys44KRetEPH8U1aDHHA8-VIt7WGNSjlD_UNLtw18meanGzmnWA-eZjOq_7uT7F7fRX0qTd0be1JODS67B0k0vcMC93-i5Jb-gMbEHrlTkAvQqfYAd9r8VUIEo_FozuEnrN41BlJ1jF0QNgM0xxEkm9DreFc6zFIPJtO_HuDmr3vDKHU3X8dO-UUJYWD_Zo1ohO5jV_4uEZWPuTlaT0gRDGxKfmDSZDAoZ1IrgrEUV5waoPVb4nqkmQDIcEU4Le1e7Y_TKmpVgBRkoE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0b3aa2-ffe5-4068-bcc0-cf11c8e26f0a", "record_id": "flaws_cloudtrail:0000222:ec0b3aa2-ffe5-4068-bcc0-cf11c8e26f0a", "row_index": 222, "timestamp": "2019-08-21T14:44:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0b3aa2-ffe5-4068-bcc0-cf11c8e26f0a", "eventTime": "2019-08-21T14:44:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5248b531-f572-4874-b17e-42bb4d1dabb3", "record_id": "flaws_cloudtrail:0000223:5248b531-f572-4874-b17e-42bb4d1dabb3", "row_index": 223, "timestamp": "2019-08-21T14:44:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5248b531-f572-4874-b17e-42bb4d1dabb3", "eventTime": "2019-08-21T14:44:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5248b531-f572-4874-b17e-42bb4d1dabb3", "record_id": "flaws_cloudtrail:0000224:5248b531-f572-4874-b17e-42bb4d1dabb3", "row_index": 224, "timestamp": "2019-08-21T14:44:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5248b531-f572-4874-b17e-42bb4d1dabb3", "eventTime": "2019-08-21T14:44:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c33219-4951-45d1-8377-3f49ffcaa5fd", "record_id": "flaws_cloudtrail:0000225:d2c33219-4951-45d1-8377-3f49ffcaa5fd", "row_index": 225, "timestamp": "2019-08-21T14:44:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c33219-4951-45d1-8377-3f49ffcaa5fd", "eventTime": "2019-08-21T14:44:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: yxefC78gC0pouyH9twIeXNaUgRSa0zd-8AbfiWY41sW8mz2guciuLmN2oDt3zErVR--O3IUdTJYGrfcjkLqqK7VnLZXpZpv_354SgzVkFGzoX0Zu6Hmtf6pqesbvTRm_ui_H8AygP6F1XXTw3hpCbdFjcsgwRC0uJvQTw3zC9JyaxzS1im0e708aqlB4vSg7WJfZQEOfE7dLoWbNvyUZ4OYpmc_TmqXQGpMNGsC6he9YU70YpYy-Lj0c8fQa3Ri3UjOP_A_fWwu5OOA4eu-6_QzOh98EBNMQO9F8IV1tdNc20P1y-ThwLO2EA2oknxJTShmmKn3AG3pET7AA-t6rB2upvRUiwVizyWwVNA9mPdKv2MxuvsZtUYZLoVI0vN2hDik5-IqrxCy7gFUQ4MhWpSSJbUZa2tPtwA2l9h-FFl5kJmWhEinDoWz5Z7DQIF2_6rNLCHTQ0HD0SMCFBW9FiKpqF185zi05Gg2REYX_8-uajecIM5-bsqvlDuUHTIoH0LoiI6DahUJXFf4Kp3n5ShnYMAHX8gbqFPivhFtCtapwHkuuxlyraon6B4UHmIPbVLBdGnBbGGAMve25tkjt7-Ua8XgP80M7qC1Kx0pLoiW-uh5gz_hTvi8KBymp0y8cMinj_K4jeN_d0Q1Acfn90WnpR7EY7Ppp", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c33219-4951-45d1-8377-3f49ffcaa5fd", "record_id": "flaws_cloudtrail:0000226:d2c33219-4951-45d1-8377-3f49ffcaa5fd", "row_index": 226, "timestamp": "2019-08-21T14:44:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c33219-4951-45d1-8377-3f49ffcaa5fd", "eventTime": "2019-08-21T14:44:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: yxefC78gC0pouyH9twIeXNaUgRSa0zd-8AbfiWY41sW8mz2guciuLmN2oDt3zErVR--O3IUdTJYGrfcjkLqqK7VnLZXpZpv_354SgzVkFGzoX0Zu6Hmtf6pqesbvTRm_ui_H8AygP6F1XXTw3hpCbdFjcsgwRC0uJvQTw3zC9JyaxzS1im0e708aqlB4vSg7WJfZQEOfE7dLoWbNvyUZ4OYpmc_TmqXQGpMNGsC6he9YU70YpYy-Lj0c8fQa3Ri3UjOP_A_fWwu5OOA4eu-6_QzOh98EBNMQO9F8IV1tdNc20P1y-ThwLO2EA2oknxJTShmmKn3AG3pET7AA-t6rB2upvRUiwVizyWwVNA9mPdKv2MxuvsZtUYZLoVI0vN2hDik5-IqrxCy7gFUQ4MhWpSSJbUZa2tPtwA2l9h-FFl5kJmWhEinDoWz5Z7DQIF2_6rNLCHTQ0HD0SMCFBW9FiKpqF185zi05Gg2REYX_8-uajecIM5-bsqvlDuUHTIoH0LoiI6DahUJXFf4Kp3n5ShnYMAHX8gbqFPivhFtCtapwHkuuxlyraon6B4UHmIPbVLBdGnBbGGAMve25tkjt7-Ua8XgP80M7qC1Kx0pLoiW-uh5gz_hTvi8KBymp0y8cMinj_K4jeN_d0Q1Acfn90WnpR7EY7Ppp", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca582e88-d9ac-4365-9972-87bf2ff4ea15", "record_id": "flaws_cloudtrail:0000227:ca582e88-d9ac-4365-9972-87bf2ff4ea15", "row_index": 227, "timestamp": "2019-08-21T14:44:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca582e88-d9ac-4365-9972-87bf2ff4ea15", "eventTime": "2019-08-21T14:44:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bHUoADnvKAJODX8ZeLxIttPw_38r0Iq8IeCADIpb2DjEPbKqgp1mqw-fVQFieRfgsP3Ku1L1nAx5G0wXOEpce6qbae2YATB3SFiHnhd7AdqoWSC7t0wZtmBMKgk2y9ZQNpJYcseRyDRgDqOvECre2MljbBFmsURrhAV-R4CY508ZQFsAbJQ-42hzMCPYr49BXa_UnFruIDSX18EPpEEBBH8spmhliD3GALhJNpQEP3UVvHdih6FLFzVbkxnJzZllgQSGSUmXkSkb9jMsfVfodD_OyLZEnWTawuaTJk2NvgM-iVHYWvN933XfH-_zhMWMLRUKI0ZpjpSUYp93PvBYfnI1Qvcpa6hxRMbASDSoHoMA9jrGkmIzzjxOjeWUwI1N2BIEhQMFoeuPBteQ2lCn1ftDRLRXXh01qCNRo7meft9fzaEylXs3PjtUzm-50_o48fJHomA4dWL8RiLDfiNZ8h9zWqe5JEJp60ErU0BJcLeVQL0exNeEznE2ZQCvQTPENTAeaMd5We6yzBJU9seoyEp4dFhEEM_ZBljRzVIClhQXFyRyFBxuV3Dvermf_bY5JjX1HfMXxIkZFnP1nkUFUsrO94321vEyDf-OeKqByvE6eAclFDS-DU9NGL9FJzHxwdq1meekV9iNXiCQaoekPic53aijSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca582e88-d9ac-4365-9972-87bf2ff4ea15", "record_id": "flaws_cloudtrail:0000228:ca582e88-d9ac-4365-9972-87bf2ff4ea15", "row_index": 228, "timestamp": "2019-08-21T14:44:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca582e88-d9ac-4365-9972-87bf2ff4ea15", "eventTime": "2019-08-21T14:44:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bHUoADnvKAJODX8ZeLxIttPw_38r0Iq8IeCADIpb2DjEPbKqgp1mqw-fVQFieRfgsP3Ku1L1nAx5G0wXOEpce6qbae2YATB3SFiHnhd7AdqoWSC7t0wZtmBMKgk2y9ZQNpJYcseRyDRgDqOvECre2MljbBFmsURrhAV-R4CY508ZQFsAbJQ-42hzMCPYr49BXa_UnFruIDSX18EPpEEBBH8spmhliD3GALhJNpQEP3UVvHdih6FLFzVbkxnJzZllgQSGSUmXkSkb9jMsfVfodD_OyLZEnWTawuaTJk2NvgM-iVHYWvN933XfH-_zhMWMLRUKI0ZpjpSUYp93PvBYfnI1Qvcpa6hxRMbASDSoHoMA9jrGkmIzzjxOjeWUwI1N2BIEhQMFoeuPBteQ2lCn1ftDRLRXXh01qCNRo7meft9fzaEylXs3PjtUzm-50_o48fJHomA4dWL8RiLDfiNZ8h9zWqe5JEJp60ErU0BJcLeVQL0exNeEznE2ZQCvQTPENTAeaMd5We6yzBJU9seoyEp4dFhEEM_ZBljRzVIClhQXFyRyFBxuV3Dvermf_bY5JjX1HfMXxIkZFnP1nkUFUsrO94321vEyDf-OeKqByvE6eAclFDS-DU9NGL9FJzHxwdq1meekV9iNXiCQaoekPic53aijSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2aaef03-3976-4f9e-8fb5-14378f29467", "record_id": "flaws_cloudtrail:0000229:d2aaef03-3976-4f9e-8fb5-14378f29467", "row_index": 229, "timestamp": "2019-08-21T14:44:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2aaef03-3976-4f9e-8fb5-14378f29467", "eventTime": "2019-08-21T14:44:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2aaef03-3976-4f9e-8fb5-14378f29467", "record_id": "flaws_cloudtrail:0000230:d2aaef03-3976-4f9e-8fb5-14378f29467", "row_index": 230, "timestamp": "2019-08-21T14:44:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2aaef03-3976-4f9e-8fb5-14378f29467", "eventTime": "2019-08-21T14:44:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0b1edc-5c53-4296-bb3b-759014368613", "record_id": "flaws_cloudtrail:0000231:8e0b1edc-5c53-4296-bb3b-759014368613", "row_index": 231, "timestamp": "2019-08-21T14:44:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0b1edc-5c53-4296-bb3b-759014368613", "eventTime": "2019-08-21T14:44:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0b1edc-5c53-4296-bb3b-759014368613", "record_id": "flaws_cloudtrail:0000232:8e0b1edc-5c53-4296-bb3b-759014368613", "row_index": 232, "timestamp": "2019-08-21T14:44:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0b1edc-5c53-4296-bb3b-759014368613", "eventTime": "2019-08-21T14:44:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "record_id": "flaws_cloudtrail:0000233:4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "row_index": 233, "timestamp": "2019-08-21T14:44:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "eventTime": "2019-08-21T14:44:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "record_id": "flaws_cloudtrail:0000234:4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "row_index": 234, "timestamp": "2019-08-21T14:44:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4902d5be-0d7c-464c-ad84-c0ea4cfd25bb", "eventTime": "2019-08-21T14:44:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "record_id": "flaws_cloudtrail:0000235:5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "row_index": 235, "timestamp": "2019-08-21T14:44:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "eventTime": "2019-08-21T14:44:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "record_id": "flaws_cloudtrail:0000236:5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "row_index": 236, "timestamp": "2019-08-21T14:44:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5866ee44-72a7-4b0b-ae9b-1ed3f61a26d6", "eventTime": "2019-08-21T14:44:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602776-a899-4e7a-b6b1-cfdb2287ff1b", "record_id": "flaws_cloudtrail:0000237:602776-a899-4e7a-b6b1-cfdb2287ff1b", "row_index": 237, "timestamp": "2019-08-21T14:44:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602776-a899-4e7a-b6b1-cfdb2287ff1b", "eventTime": "2019-08-21T14:44:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602776-a899-4e7a-b6b1-cfdb2287ff1b", "record_id": "flaws_cloudtrail:0000238:602776-a899-4e7a-b6b1-cfdb2287ff1b", "row_index": 238, "timestamp": "2019-08-21T14:44:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602776-a899-4e7a-b6b1-cfdb2287ff1b", "eventTime": "2019-08-21T14:44:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fba9641-9150-4942-8a0f-18c1f0023f73", "record_id": "flaws_cloudtrail:0000239:6fba9641-9150-4942-8a0f-18c1f0023f73", "row_index": 239, "timestamp": "2019-08-21T14:44:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fba9641-9150-4942-8a0f-18c1f0023f73", "eventTime": "2019-08-21T14:44:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d926227-8e8c-4b28-a48a-db59fa7c3363", "record_id": "flaws_cloudtrail:0000240:44d926227-8e8c-4b28-a48a-db59fa7c3363", "row_index": 240, "timestamp": "2019-08-21T14:44:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d926227-8e8c-4b28-a48a-db59fa7c3363", "eventTime": "2019-08-21T14:44:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6lfuK6nN5vRTlrlmOQpyZxPwGUFoQTiN3TE-l9IPWkyMXtkiwT3qT5BrV14l4wLO9BLGSLK0hBatBYaECUAQKZrDJEmc9BYxiRUciDpdAGyryWBk7QcDgQ9tN7qQ2nXKUvuF5lufEQiT_BwfYuNo6Tf3ve0fwNvoH8iLUCxZyJ_wezQRfDgMP_tLOpAhZLRnXo-xs3VpfTTsRDfziUS-7slYsTv4m2cqGDOs2NxVxPLXFnXgBXdwFgaycG6njZfrrq46Gt4fnW1iOADqk99u9ydP7z5C_BlQ7OKo4H03IadkkDkqhq53jcxXn52N72He5pljDDbI6ZgaB98MPC77EVJWOjeuIahpsECBdaGNuau7Ke21GTWF8Mghu_XH4UoS7vi3QBmjUuOcXI3lQJQu4BNRMrTiwmijq5EpJDAyjd4FSa_5AUqFRwgJuvmZ4m73l9KwbwV4dGyLgz1n91S66ROhaFpFT95CEyQZpv9hRp_d3obEJ5sWNq5UbPETDeeI_bOuOr7ZrR_T4xYAr4A3emRtfBnjC9dPWoZZBkAB4kI3mJD9R2grzJt0ad8hFiolzTJkFL_XJMMWvnYe3VJ69Tx_UeZZKCZs6ej5fao62d5IRt2ehOeJjzNDPPM21YCCV9o5Nzy2OjCVeahZZNbqeblk5nV4lw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fba9641-9150-4942-8a0f-18c1f0023f73", "record_id": "flaws_cloudtrail:0000241:6fba9641-9150-4942-8a0f-18c1f0023f73", "row_index": 241, "timestamp": "2019-08-21T14:44:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fba9641-9150-4942-8a0f-18c1f0023f73", "eventTime": "2019-08-21T14:44:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d926227-8e8c-4b28-a48a-db59fa7c3363", "record_id": "flaws_cloudtrail:0000242:44d926227-8e8c-4b28-a48a-db59fa7c3363", "row_index": 242, "timestamp": "2019-08-21T14:44:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d926227-8e8c-4b28-a48a-db59fa7c3363", "eventTime": "2019-08-21T14:44:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6lfuK6nN5vRTlrlmOQpyZxPwGUFoQTiN3TE-l9IPWkyMXtkiwT3qT5BrV14l4wLO9BLGSLK0hBatBYaECUAQKZrDJEmc9BYxiRUciDpdAGyryWBk7QcDgQ9tN7qQ2nXKUvuF5lufEQiT_BwfYuNo6Tf3ve0fwNvoH8iLUCxZyJ_wezQRfDgMP_tLOpAhZLRnXo-xs3VpfTTsRDfziUS-7slYsTv4m2cqGDOs2NxVxPLXFnXgBXdwFgaycG6njZfrrq46Gt4fnW1iOADqk99u9ydP7z5C_BlQ7OKo4H03IadkkDkqhq53jcxXn52N72He5pljDDbI6ZgaB98MPC77EVJWOjeuIahpsECBdaGNuau7Ke21GTWF8Mghu_XH4UoS7vi3QBmjUuOcXI3lQJQu4BNRMrTiwmijq5EpJDAyjd4FSa_5AUqFRwgJuvmZ4m73l9KwbwV4dGyLgz1n91S66ROhaFpFT95CEyQZpv9hRp_d3obEJ5sWNq5UbPETDeeI_bOuOr7ZrR_T4xYAr4A3emRtfBnjC9dPWoZZBkAB4kI3mJD9R2grzJt0ad8hFiolzTJkFL_XJMMWvnYe3VJ69Tx_UeZZKCZs6ej5fao62d5IRt2ehOeJjzNDPPM21YCCV9o5Nzy2OjCVeahZZNbqeblk5nV4lw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9251a249-1fd6-4806-a460-912c478804f", "record_id": "flaws_cloudtrail:0000243:9251a249-1fd6-4806-a460-912c478804f", "row_index": 243, "timestamp": "2019-08-21T14:45:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9251a249-1fd6-4806-a460-912c478804f", "eventTime": "2019-08-21T14:45:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9251a249-1fd6-4806-a460-912c478804f", "record_id": "flaws_cloudtrail:0000244:9251a249-1fd6-4806-a460-912c478804f", "row_index": 244, "timestamp": "2019-08-21T14:45:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9251a249-1fd6-4806-a460-912c478804f", "eventTime": "2019-08-21T14:45:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd834395-6fa4-4469-ac3c-029d98f17fd9", "record_id": "flaws_cloudtrail:0000245:4dd834395-6fa4-4469-ac3c-029d98f17fd9", "row_index": 245, "timestamp": "2019-08-21T14:45:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd834395-6fa4-4469-ac3c-029d98f17fd9", "eventTime": "2019-08-21T14:45:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd834395-6fa4-4469-ac3c-029d98f17fd9", "record_id": "flaws_cloudtrail:0000246:4dd834395-6fa4-4469-ac3c-029d98f17fd9", "row_index": 246, "timestamp": "2019-08-21T14:45:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd834395-6fa4-4469-ac3c-029d98f17fd9", "eventTime": "2019-08-21T14:45:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "record_id": "flaws_cloudtrail:0000247:2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "row_index": 247, "timestamp": "2019-08-21T14:45:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "eventTime": "2019-08-21T14:45:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "record_id": "flaws_cloudtrail:0000248:2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "row_index": 248, "timestamp": "2019-08-21T14:45:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e09a2d1-99ae-42ff-b171-0d6cd85f5160", "eventTime": "2019-08-21T14:45:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "441219ba-5abd-49d2-8fec-9a084fe58463", "record_id": "flaws_cloudtrail:0000249:441219ba-5abd-49d2-8fec-9a084fe58463", "row_index": 249, "timestamp": "2019-08-21T14:45:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "441219ba-5abd-49d2-8fec-9a084fe58463", "eventTime": "2019-08-21T14:45:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nAL28wuZwd6LVjjpNk6cyptgEg8kk_P94nJhUWtXYM-vdOVgWkriGjPChXK3Y6PJh7LElW9I_Zq3_UGmJP4d2IlkHifnP-9bo4BgnvxKDgyXrlHUZATEXmxh7G0UPIzB2rD9vVeqsBbNfWo16Zpm4TSPZUKIT6oqnCJZUThwGgGeCGMQW8snNke-EA2mIbvIuG7yTUO_R5d6Tje8zcOUCppLkfZkvSVYmGIvQgfFRwp4Bf5kv7Kb-6SV6mAl08epp1h3zBknLa3EiiGYbAMV3Yudcg_yf9Zk2IIl0y72yNuoO5XN3pP7QZxCOKR5SNbeoVzfoUhyW3tU5vTyyHIyOQsJwolNZyiPCO5KT89tTkeVsW4jXb1AXzwSWbGUC9Js4RC00ADoU2beTrwNYuk2OgxiXhO518IMRYClwSZz6srHRbcGL0Lu3MhnC1ePxRri_lCi8nucMOk0SPFxuGWQNAv0c7fyAHmsdWMjy0b3nclGVE90Crh7V1aoQRYzyX5xGOgDDEvUHzNBUK9o1jlvWq5A6Asv9wpdeww_7PtDFCWRZwjRlpB2QU7f4aohYTbVrAziKfKYfqXrGEzT68aMi-fbI_snWKPMOiCJlusbO2ZfdIUgenI402iKHL-_VtftMY_ur7ywNdpMYZi7n9jN_YG8cR8YtA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "441219ba-5abd-49d2-8fec-9a084fe58463", "record_id": "flaws_cloudtrail:0000250:441219ba-5abd-49d2-8fec-9a084fe58463", "row_index": 250, "timestamp": "2019-08-21T14:45:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "441219ba-5abd-49d2-8fec-9a084fe58463", "eventTime": "2019-08-21T14:45:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nAL28wuZwd6LVjjpNk6cyptgEg8kk_P94nJhUWtXYM-vdOVgWkriGjPChXK3Y6PJh7LElW9I_Zq3_UGmJP4d2IlkHifnP-9bo4BgnvxKDgyXrlHUZATEXmxh7G0UPIzB2rD9vVeqsBbNfWo16Zpm4TSPZUKIT6oqnCJZUThwGgGeCGMQW8snNke-EA2mIbvIuG7yTUO_R5d6Tje8zcOUCppLkfZkvSVYmGIvQgfFRwp4Bf5kv7Kb-6SV6mAl08epp1h3zBknLa3EiiGYbAMV3Yudcg_yf9Zk2IIl0y72yNuoO5XN3pP7QZxCOKR5SNbeoVzfoUhyW3tU5vTyyHIyOQsJwolNZyiPCO5KT89tTkeVsW4jXb1AXzwSWbGUC9Js4RC00ADoU2beTrwNYuk2OgxiXhO518IMRYClwSZz6srHRbcGL0Lu3MhnC1ePxRri_lCi8nucMOk0SPFxuGWQNAv0c7fyAHmsdWMjy0b3nclGVE90Crh7V1aoQRYzyX5xGOgDDEvUHzNBUK9o1jlvWq5A6Asv9wpdeww_7PtDFCWRZwjRlpB2QU7f4aohYTbVrAziKfKYfqXrGEzT68aMi-fbI_snWKPMOiCJlusbO2ZfdIUgenI402iKHL-_VtftMY_ur7ywNdpMYZi7n9jN_YG8cR8YtA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032c9d4f-f376-4553-8d44-761674c09b9b9", "record_id": "flaws_cloudtrail:0000251:032c9d4f-f376-4553-8d44-761674c09b9b9", "row_index": 251, "timestamp": "2019-08-21T14:45:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032c9d4f-f376-4553-8d44-761674c09b9b9", "eventTime": "2019-08-21T14:45:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032c9d4f-f376-4553-8d44-761674c09b9b9", "record_id": "flaws_cloudtrail:0000252:032c9d4f-f376-4553-8d44-761674c09b9b9", "row_index": 252, "timestamp": "2019-08-21T14:45:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032c9d4f-f376-4553-8d44-761674c09b9b9", "eventTime": "2019-08-21T14:45:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a393e9-14d8-466e-ad61-27968d84c82", "record_id": "flaws_cloudtrail:0000253:e5a393e9-14d8-466e-ad61-27968d84c82", "row_index": 253, "timestamp": "2019-08-21T14:45:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a393e9-14d8-466e-ad61-27968d84c82", "eventTime": "2019-08-21T14:45:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a393e9-14d8-466e-ad61-27968d84c82", "record_id": "flaws_cloudtrail:0000254:e5a393e9-14d8-466e-ad61-27968d84c82", "row_index": 254, "timestamp": "2019-08-21T14:45:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a393e9-14d8-466e-ad61-27968d84c82", "eventTime": "2019-08-21T14:45:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e33f38-5cf5-4f38-9390-77108c817f2a", "record_id": "flaws_cloudtrail:0000255:a6e33f38-5cf5-4f38-9390-77108c817f2a", "row_index": 255, "timestamp": "2019-08-21T14:45:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e33f38-5cf5-4f38-9390-77108c817f2a", "eventTime": "2019-08-21T14:45:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e33f38-5cf5-4f38-9390-77108c817f2a", "record_id": "flaws_cloudtrail:0000256:a6e33f38-5cf5-4f38-9390-77108c817f2a", "row_index": 256, "timestamp": "2019-08-21T14:45:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e33f38-5cf5-4f38-9390-77108c817f2a", "eventTime": "2019-08-21T14:45:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "record_id": "flaws_cloudtrail:0000257:6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "row_index": 257, "timestamp": "2019-08-21T14:45:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "eventTime": "2019-08-21T14:45:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: f2cWqOupmNjvuv2go5SiIKTJs6lGp5XfOhjKt3Xcu7-SzMSL7OWZGXQQvhXrxbM1sAuaWdzrqhhY5lc0V_XYFJ1v9C5i267TTNEXWRLyA4kVdEZ-mD1yP_jSFQEzyYdvCZoxUKeoIVA78XjARryVpfXdvgCVvDcPkRTosz7FpoAiWrzzwvaPJzi52WqXYFKgH9JWhDKB1dJDq-k3v2GssiCH1Eg_85CJ5FWhTw2EpMGzJEBAwNVoYpGe5sqVdke7xxUkNYkg-Z_HHC8MPA31flQ5Iyp3j2Qv4RmpY8Ad2YDWPLml49oRuIDoIVrGij-E5qNhaNDIPATysxnEPIA3rV7VracPmJSuyA2JF7ehcPKPIlv00jM-Tg8KafUQYYw1SSzP4pn4qBqNTWWKFOHM8EqYvslYENTAcP4RYKzNF6i0t85vzl68kkmyu0YmK6lrrwLfyUoAWpy8fZ8wMtBgEhTgn1G22dcNdFegY4vfBX17ietADF5wtjuWRW7k2ccrLcJOWMeGZ-MPAd5GbxHlYbQszJtAuZinzuJpbDVnOMuuuII1gnpKMyTlhvzh7jg1O6KU0j7q9DJJpIyjLwt9KG_74UgwToLatVWSOmw65jZNPGuaB-wgUgZMxsi-iiMKbkiLkXz1_XLVf2dn92tMmzf4owLnesc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "record_id": "flaws_cloudtrail:0000258:6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "row_index": 258, "timestamp": "2019-08-21T14:45:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b01cc80-f4bb-4dd1-b4db-6928c5c55f8a", "eventTime": "2019-08-21T14:45:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: f2cWqOupmNjvuv2go5SiIKTJs6lGp5XfOhjKt3Xcu7-SzMSL7OWZGXQQvhXrxbM1sAuaWdzrqhhY5lc0V_XYFJ1v9C5i267TTNEXWRLyA4kVdEZ-mD1yP_jSFQEzyYdvCZoxUKeoIVA78XjARryVpfXdvgCVvDcPkRTosz7FpoAiWrzzwvaPJzi52WqXYFKgH9JWhDKB1dJDq-k3v2GssiCH1Eg_85CJ5FWhTw2EpMGzJEBAwNVoYpGe5sqVdke7xxUkNYkg-Z_HHC8MPA31flQ5Iyp3j2Qv4RmpY8Ad2YDWPLml49oRuIDoIVrGij-E5qNhaNDIPATysxnEPIA3rV7VracPmJSuyA2JF7ehcPKPIlv00jM-Tg8KafUQYYw1SSzP4pn4qBqNTWWKFOHM8EqYvslYENTAcP4RYKzNF6i0t85vzl68kkmyu0YmK6lrrwLfyUoAWpy8fZ8wMtBgEhTgn1G22dcNdFegY4vfBX17ietADF5wtjuWRW7k2ccrLcJOWMeGZ-MPAd5GbxHlYbQszJtAuZinzuJpbDVnOMuuuII1gnpKMyTlhvzh7jg1O6KU0j7q9DJJpIyjLwt9KG_74UgwToLatVWSOmw65jZNPGuaB-wgUgZMxsi-iiMKbkiLkXz1_XLVf2dn92tMmzf4owLnesc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "record_id": "flaws_cloudtrail:0000259:494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "row_index": 259, "timestamp": "2019-08-21T14:45:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "eventTime": "2019-08-21T14:45:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "record_id": "flaws_cloudtrail:0000260:494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "row_index": 260, "timestamp": "2019-08-21T14:45:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "494ec448-fa8a-4367-854a-bc2bdcdd5ff2", "eventTime": "2019-08-21T14:45:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f064183f-0446-4adf-96d2-9480cbdf840f", "record_id": "flaws_cloudtrail:0000261:f064183f-0446-4adf-96d2-9480cbdf840f", "row_index": 261, "timestamp": "2019-08-21T14:45:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f064183f-0446-4adf-96d2-9480cbdf840f", "eventTime": "2019-08-21T14:45:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f064183f-0446-4adf-96d2-9480cbdf840f", "record_id": "flaws_cloudtrail:0000262:f064183f-0446-4adf-96d2-9480cbdf840f", "row_index": 262, "timestamp": "2019-08-21T14:45:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f064183f-0446-4adf-96d2-9480cbdf840f", "eventTime": "2019-08-21T14:45:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "record_id": "flaws_cloudtrail:0000263:dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "row_index": 263, "timestamp": "2019-08-21T14:45:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "eventTime": "2019-08-21T14:45:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "record_id": "flaws_cloudtrail:0000264:dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "row_index": 264, "timestamp": "2019-08-21T14:45:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbc4339f-2b92-465c-a05f-cc5abda7eb5b", "eventTime": "2019-08-21T14:45:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e7cde27-f40c-45a8-b4e3-703746878922", "record_id": "flaws_cloudtrail:0000265:9e7cde27-f40c-45a8-b4e3-703746878922", "row_index": 265, "timestamp": "2019-08-21T14:45:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e7cde27-f40c-45a8-b4e3-703746878922", "eventTime": "2019-08-21T14:45:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: B5iBqicNMamOCUcWhmTpPY-uGBR0Glz9xrNtqIl1eMiAcTAhK-4J7KZfXW6-0iWwYXnluhqdmXVHwzWjSR18bdG3vqbBJU2ROONR1HZCkx-2jFMdt2feOiLLNTnbBH6EPBwzOaWqKMvWCDj9NFDX4pW8GtiPKOwt73sxMtexsLzz8dY9H7O0cdCamuwvilHazVXBwoNnz-bhhGbGS665PVE6Tyrv4Nkd0_HpIOYq1DX6CI1eMnmkGNh3lEIrKGXbA8njL34PWI7B5Bp1llxFG4XOT0HaMAAocqPw8Mi7edJEGtn7t1J3DOp_tP2HoWwmjxxhpm3KIsVUPttIpBUMTXCCCKKEH6KxxVyQI--EqIwpdHAPMg0MgmD1zaSVDwb02BTEtWQJCbo8ROVbsl2Q87DM1Kte9h9aCIq0VTmpUuLbhxtBgd6P6Sl5YT2csevu-PIIHW-zhIdSNMImMwsGGZJ7T5aq4q9umrQ6BX4iosjpro9DPVOjpoFQb5RgVzAmmU0pg3VoS-xjJz9OFopB7qlcDEfvyffpXtbdjI5ylC4hqqWe3lrBmbOXP5G5gnNyTELcMiFzI8PSyBvimA8S_YC64MWu0uKOIQbEYMcqGXS-qYYJHVTq7oGBctg21JMYGF3gi0GmPYS8zEnq00cAyCJRd1g-", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fa82116-b57a-417d-a4bf-845af2d84626", "record_id": "flaws_cloudtrail:0000266:2fa82116-b57a-417d-a4bf-845af2d84626", "row_index": 266, "timestamp": "2019-08-21T14:45:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fa82116-b57a-417d-a4bf-845af2d84626", "eventTime": "2019-08-21T14:45:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e7cde27-f40c-45a8-b4e3-703746878922", "record_id": "flaws_cloudtrail:0000267:9e7cde27-f40c-45a8-b4e3-703746878922", "row_index": 267, "timestamp": "2019-08-21T14:45:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e7cde27-f40c-45a8-b4e3-703746878922", "eventTime": "2019-08-21T14:45:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: B5iBqicNMamOCUcWhmTpPY-uGBR0Glz9xrNtqIl1eMiAcTAhK-4J7KZfXW6-0iWwYXnluhqdmXVHwzWjSR18bdG3vqbBJU2ROONR1HZCkx-2jFMdt2feOiLLNTnbBH6EPBwzOaWqKMvWCDj9NFDX4pW8GtiPKOwt73sxMtexsLzz8dY9H7O0cdCamuwvilHazVXBwoNnz-bhhGbGS665PVE6Tyrv4Nkd0_HpIOYq1DX6CI1eMnmkGNh3lEIrKGXbA8njL34PWI7B5Bp1llxFG4XOT0HaMAAocqPw8Mi7edJEGtn7t1J3DOp_tP2HoWwmjxxhpm3KIsVUPttIpBUMTXCCCKKEH6KxxVyQI--EqIwpdHAPMg0MgmD1zaSVDwb02BTEtWQJCbo8ROVbsl2Q87DM1Kte9h9aCIq0VTmpUuLbhxtBgd6P6Sl5YT2csevu-PIIHW-zhIdSNMImMwsGGZJ7T5aq4q9umrQ6BX4iosjpro9DPVOjpoFQb5RgVzAmmU0pg3VoS-xjJz9OFopB7qlcDEfvyffpXtbdjI5ylC4hqqWe3lrBmbOXP5G5gnNyTELcMiFzI8PSyBvimA8S_YC64MWu0uKOIQbEYMcqGXS-qYYJHVTq7oGBctg21JMYGF3gi0GmPYS8zEnq00cAyCJRd1g-", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fa82116-b57a-417d-a4bf-845af2d84626", "record_id": "flaws_cloudtrail:0000268:2fa82116-b57a-417d-a4bf-845af2d84626", "row_index": 268, "timestamp": "2019-08-21T14:45:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fa82116-b57a-417d-a4bf-845af2d84626", "eventTime": "2019-08-21T14:45:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a949029-9a75-49a7-80ea-c50a21fffb8e", "record_id": "flaws_cloudtrail:0000269:3a949029-9a75-49a7-80ea-c50a21fffb8e", "row_index": 269, "timestamp": "2019-08-21T14:45:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 506, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a949029-9a75-49a7-80ea-c50a21fffb8e", "eventTime": "2019-08-21T14:45:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996587b9-3448-418a-b8ae-8f9e4db5ac80", "record_id": "flaws_cloudtrail:0000270:996587b9-3448-418a-b8ae-8f9e4db5ac80", "row_index": 270, "timestamp": "2019-08-21T14:45:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996587b9-3448-418a-b8ae-8f9e4db5ac80", "eventTime": "2019-08-21T14:45:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996587b9-3448-418a-b8ae-8f9e4db5ac80", "record_id": "flaws_cloudtrail:0000271:996587b9-3448-418a-b8ae-8f9e4db5ac80", "row_index": 271, "timestamp": "2019-08-21T14:45:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996587b9-3448-418a-b8ae-8f9e4db5ac80", "eventTime": "2019-08-21T14:45:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "record_id": "flaws_cloudtrail:0000272:ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "row_index": 272, "timestamp": "2019-08-21T14:45:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "eventTime": "2019-08-21T14:45:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "record_id": "flaws_cloudtrail:0000273:ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "row_index": 273, "timestamp": "2019-08-21T14:45:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce11e503-4a6e-4f3d-91bf-01b208dbbe74", "eventTime": "2019-08-21T14:45:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "record_id": "flaws_cloudtrail:0000274:541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "row_index": 274, "timestamp": "2019-08-21T14:45:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "eventTime": "2019-08-21T14:45:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "record_id": "flaws_cloudtrail:0000275:541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "row_index": 275, "timestamp": "2019-08-21T14:45:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541ffa4b-2c4a-41eb-b9dd-b20a42c5acf6", "eventTime": "2019-08-21T14:45:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7f5df3-3634-4cce-a804-2c14f41aac14", "record_id": "flaws_cloudtrail:0000276:3c7f5df3-3634-4cce-a804-2c14f41aac14", "row_index": 276, "timestamp": "2019-08-21T14:45:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7f5df3-3634-4cce-a804-2c14f41aac14", "eventTime": "2019-08-21T14:45:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7f5df3-3634-4cce-a804-2c14f41aac14", "record_id": "flaws_cloudtrail:0000277:3c7f5df3-3634-4cce-a804-2c14f41aac14", "row_index": 277, "timestamp": "2019-08-21T14:45:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7f5df3-3634-4cce-a804-2c14f41aac14", "eventTime": "2019-08-21T14:45:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8416ff9-d0e1-415f-bf50-5d0197e23f80", "record_id": "flaws_cloudtrail:0000278:d8416ff9-d0e1-415f-bf50-5d0197e23f80", "row_index": 278, "timestamp": "2019-08-21T14:45:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8416ff9-d0e1-415f-bf50-5d0197e23f80", "eventTime": "2019-08-21T14:45:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8416ff9-d0e1-415f-bf50-5d0197e23f80", "record_id": "flaws_cloudtrail:0000279:d8416ff9-d0e1-415f-bf50-5d0197e23f80", "row_index": 279, "timestamp": "2019-08-21T14:45:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8416ff9-d0e1-415f-bf50-5d0197e23f80", "eventTime": "2019-08-21T14:45:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0b0f84-d28f-4709-b45c-90f7c38713d6", "record_id": "flaws_cloudtrail:0000280:fa0b0f84-d28f-4709-b45c-90f7c38713d6", "row_index": 280, "timestamp": "2019-08-21T14:45:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0b0f84-d28f-4709-b45c-90f7c38713d6", "eventTime": "2019-08-21T14:45:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 99VhBmgooxUCgLD_YwNutsIQe-cM9xR4ETffZ-bXYxdOpLEIEAOrnxbz6SwoAR7EJTlRnVtAGK8WENHxhjkIPwvda8WXpUwPp3DXD4jAxP5-2ikO1UuDEDzhVQ0XY_FCZHqA3TjE5kkPEtI-7TRcSmUWQg_z89dZZRV4h9c6b8KaIVwJUHA0hYk35iTo-uzybMViDRXoRegMe8CO7ll-DxvkXa_r2oJx88YxhWGIAdObT_KvlS2kbqihOt08_iBg_XCtniKnAUqqAfcW5KE7uhNLFBMq59hIu-z4ZY3hJJz41R4-Dueo8k2yPn0vEY0JnxPniBLRXGbE5y_n97SeNljwV9l7hUcRViD8UH4I65G9Ya6kDR9yrfq2MsGhY2mthlLQwkOR_JmI1QvIZwKvUlM1TiOvxhttfq6fKvoICABLZB94Mlo2oLrR5zClSdkDZCz5xkgDCybQY88pVRgijfV6RzKxwEPUDmTpOl2O2fxYQWdL2adpVpb5xo8lG2UCB49sycUHDBM7DA5gCMOxlizM8iyiysLO6MaZ_LhZlF-MwRROVwSt5Mnq0ibrhZXckBkVbaI2yUQuU-okHXykGjvLgBzOV0MCBUk7RcInr3jQwzahLBGM8U4ypLt9Wj7S8WXO4UtFjUNQhsFbaJ6PhdaArKx_", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "record_id": "flaws_cloudtrail:0000281:f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "row_index": 281, "timestamp": "2019-08-21T14:45:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "eventTime": "2019-08-21T14:45:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0b0f84-d28f-4709-b45c-90f7c38713d6", "record_id": "flaws_cloudtrail:0000282:fa0b0f84-d28f-4709-b45c-90f7c38713d6", "row_index": 282, "timestamp": "2019-08-21T14:45:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0b0f84-d28f-4709-b45c-90f7c38713d6", "eventTime": "2019-08-21T14:45:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 99VhBmgooxUCgLD_YwNutsIQe-cM9xR4ETffZ-bXYxdOpLEIEAOrnxbz6SwoAR7EJTlRnVtAGK8WENHxhjkIPwvda8WXpUwPp3DXD4jAxP5-2ikO1UuDEDzhVQ0XY_FCZHqA3TjE5kkPEtI-7TRcSmUWQg_z89dZZRV4h9c6b8KaIVwJUHA0hYk35iTo-uzybMViDRXoRegMe8CO7ll-DxvkXa_r2oJx88YxhWGIAdObT_KvlS2kbqihOt08_iBg_XCtniKnAUqqAfcW5KE7uhNLFBMq59hIu-z4ZY3hJJz41R4-Dueo8k2yPn0vEY0JnxPniBLRXGbE5y_n97SeNljwV9l7hUcRViD8UH4I65G9Ya6kDR9yrfq2MsGhY2mthlLQwkOR_JmI1QvIZwKvUlM1TiOvxhttfq6fKvoICABLZB94Mlo2oLrR5zClSdkDZCz5xkgDCybQY88pVRgijfV6RzKxwEPUDmTpOl2O2fxYQWdL2adpVpb5xo8lG2UCB49sycUHDBM7DA5gCMOxlizM8iyiysLO6MaZ_LhZlF-MwRROVwSt5Mnq0ibrhZXckBkVbaI2yUQuU-okHXykGjvLgBzOV0MCBUk7RcInr3jQwzahLBGM8U4ypLt9Wj7S8WXO4UtFjUNQhsFbaJ6PhdaArKx_", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "record_id": "flaws_cloudtrail:0000283:f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "row_index": 283, "timestamp": "2019-08-21T14:45:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f59b6ffd-238b-4f03-aa5b-326bb01e99dc", "eventTime": "2019-08-21T14:45:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c43307f-ea75-4076-a915-b2feefa584c7", "record_id": "flaws_cloudtrail:0000284:4c43307f-ea75-4076-a915-b2feefa584c7", "row_index": 284, "timestamp": "2019-08-21T14:45:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c43307f-ea75-4076-a915-b2feefa584c7", "eventTime": "2019-08-21T14:45:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G8pkLhRW9oTSpZT2eG1M-H7l6a8lrJRY0X8qqcK5IV7tomMxgf-qsayDETvvXMFqiNdS3ZBIdFs8qMPrfEmy16tlVCr1mqMZflMPXBkVuT1_khyB2t82JhVxeWuPGAE6XIV9mj6e6TLdWHnxdkjWoUasi2M6jwu3r0Y71pmcCjiAMKQuw74EXsb7OE6gZrA5cdiTTMQQk-UjfoM8iuzAC5kK0kckgmWOEYgzqyXrQQg9PMth3HusWXriYE88pTFcgVZQJeK4hxFcUVW4Ze0ay9WHTW-v3K_VHXqcQl1YY4DvfHvOmCmcPDP3vh2u2_gH9WZe-jSUoZ4FyLCNosERGrTpLuGoMexd24N8BpIUY1GxRiKb2Kp4G3OjvRmg4q1BwrrI4AYLs47xr9Jt27LfFlD96rxwQWEPFBkc8zkIsIbckc-R9Apr_KjyKLE8fe-MYMe3OujBG9rL4j_BhITxLnBvKrM8k84sFDpWiu9CVyR-BtnBMD-_oNzjUMPB44YSe9sVufF8gQzuz7eMxW4P8Wz7njY6kAP1Qqb4SZ17R7-AfcTMdycXzVonB-h9049C8lxxAKk0vht58AqY8u9ZOWDN5KGUlnSBB45H8GCdMzTlNv8kWCQqzBpVXwdOKpHsIDr9DkVIsrERQ2TPRlrc5V0ukVfPkQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c43307f-ea75-4076-a915-b2feefa584c7", "record_id": "flaws_cloudtrail:0000285:4c43307f-ea75-4076-a915-b2feefa584c7", "row_index": 285, "timestamp": "2019-08-21T14:45:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c43307f-ea75-4076-a915-b2feefa584c7", "eventTime": "2019-08-21T14:45:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G8pkLhRW9oTSpZT2eG1M-H7l6a8lrJRY0X8qqcK5IV7tomMxgf-qsayDETvvXMFqiNdS3ZBIdFs8qMPrfEmy16tlVCr1mqMZflMPXBkVuT1_khyB2t82JhVxeWuPGAE6XIV9mj6e6TLdWHnxdkjWoUasi2M6jwu3r0Y71pmcCjiAMKQuw74EXsb7OE6gZrA5cdiTTMQQk-UjfoM8iuzAC5kK0kckgmWOEYgzqyXrQQg9PMth3HusWXriYE88pTFcgVZQJeK4hxFcUVW4Ze0ay9WHTW-v3K_VHXqcQl1YY4DvfHvOmCmcPDP3vh2u2_gH9WZe-jSUoZ4FyLCNosERGrTpLuGoMexd24N8BpIUY1GxRiKb2Kp4G3OjvRmg4q1BwrrI4AYLs47xr9Jt27LfFlD96rxwQWEPFBkc8zkIsIbckc-R9Apr_KjyKLE8fe-MYMe3OujBG9rL4j_BhITxLnBvKrM8k84sFDpWiu9CVyR-BtnBMD-_oNzjUMPB44YSe9sVufF8gQzuz7eMxW4P8Wz7njY6kAP1Qqb4SZ17R7-AfcTMdycXzVonB-h9049C8lxxAKk0vht58AqY8u9ZOWDN5KGUlnSBB45H8GCdMzTlNv8kWCQqzBpVXwdOKpHsIDr9DkVIsrERQ2TPRlrc5V0ukVfPkQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba245684-a840-49c2-898a-3ec96acc2dfd", "record_id": "flaws_cloudtrail:0000286:ba245684-a840-49c2-898a-3ec96acc2dfd", "row_index": 286, "timestamp": "2019-08-21T14:45:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba245684-a840-49c2-898a-3ec96acc2dfd", "eventTime": "2019-08-21T14:45:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba245684-a840-49c2-898a-3ec96acc2dfd", "record_id": "flaws_cloudtrail:0000287:ba245684-a840-49c2-898a-3ec96acc2dfd", "row_index": 287, "timestamp": "2019-08-21T14:45:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba245684-a840-49c2-898a-3ec96acc2dfd", "eventTime": "2019-08-21T14:45:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "829e311d-83a0-489f-a370-7e4f37445c", "record_id": "flaws_cloudtrail:0000288:829e311d-83a0-489f-a370-7e4f37445c", "row_index": 288, "timestamp": "2019-08-21T14:45:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "829e311d-83a0-489f-a370-7e4f37445c", "eventTime": "2019-08-21T14:45:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "829e311d-83a0-489f-a370-7e4f37445c", "record_id": "flaws_cloudtrail:0000289:829e311d-83a0-489f-a370-7e4f37445c", "row_index": 289, "timestamp": "2019-08-21T14:45:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "829e311d-83a0-489f-a370-7e4f37445c", "eventTime": "2019-08-21T14:45:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "record_id": "flaws_cloudtrail:0000290:1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "row_index": 290, "timestamp": "2019-08-21T14:45:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "eventTime": "2019-08-21T14:45:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: i5Ak-M3aNoYxnmfroYYH4jJajUoVhXm6DI7MwLOEqVcHfjHFUuV154dNhWQYBBNSZR2JdRBWEmkPc7bHvxXIAnQwCgxLZM9GcFWNaOAt_jk1i-FpHP8uiFH1Yesda9fnyQytPBZwOeAPfq-JLAQdbl8sog6tfVJDDDEoShwW4GpFgmf0UrBzaft29DAYAW80cVOg3YzbqGRPoMu3hV2F2Z1W_5TDEUTiSm3q58ABVLzHC1biWEt4pLX5Bdtmk07dz41tNK2CeVRTDaUQavIdS3Y4p2tjrMDWoetdvHovC-2HKwRQzvNVUqjde-NGstG1VSa9X4pyggvhRz2ijEnzc6vmxqy94YesMlJzOnw3-q7juryUsPsClrbpD1ZM0dbGkHe0Kobb4bxVhu9R35W64_whLfJ5dascYJo3nhi5tAn_I4_oVsJdUENfeglZrKKQLQdrNLDG6wwq0pq9SyZzjezWthAjF3AoiSf8TFKan3VNYAn8_ynYuZfMXgCW8DTjxqSP1bUGoTTaQyKEmDxA09vRh_4eSGEvCapZQVu6Hx83HZBea8VwJgmpsoPwsDPyEdmpEIRsVx6lVS9L7kNrKqWPje4sepBbnUNKXrc3Ytoiyl2Uw9es0PssvdmppjPKLj30_RbOi7d3ackQZCaepV0fY9JsOA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "record_id": "flaws_cloudtrail:0000291:1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "row_index": 291, "timestamp": "2019-08-21T14:45:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a9044dc-ecf7-43f1-a91c-b7669973f2c5", "eventTime": "2019-08-21T14:45:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: i5Ak-M3aNoYxnmfroYYH4jJajUoVhXm6DI7MwLOEqVcHfjHFUuV154dNhWQYBBNSZR2JdRBWEmkPc7bHvxXIAnQwCgxLZM9GcFWNaOAt_jk1i-FpHP8uiFH1Yesda9fnyQytPBZwOeAPfq-JLAQdbl8sog6tfVJDDDEoShwW4GpFgmf0UrBzaft29DAYAW80cVOg3YzbqGRPoMu3hV2F2Z1W_5TDEUTiSm3q58ABVLzHC1biWEt4pLX5Bdtmk07dz41tNK2CeVRTDaUQavIdS3Y4p2tjrMDWoetdvHovC-2HKwRQzvNVUqjde-NGstG1VSa9X4pyggvhRz2ijEnzc6vmxqy94YesMlJzOnw3-q7juryUsPsClrbpD1ZM0dbGkHe0Kobb4bxVhu9R35W64_whLfJ5dascYJo3nhi5tAn_I4_oVsJdUENfeglZrKKQLQdrNLDG6wwq0pq9SyZzjezWthAjF3AoiSf8TFKan3VNYAn8_ynYuZfMXgCW8DTjxqSP1bUGoTTaQyKEmDxA09vRh_4eSGEvCapZQVu6Hx83HZBea8VwJgmpsoPwsDPyEdmpEIRsVx6lVS9L7kNrKqWPje4sepBbnUNKXrc3Ytoiyl2Uw9es0PssvdmppjPKLj30_RbOi7d3ackQZCaepV0fY9JsOA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d471b87-c6b7-4126-abbe-c48bb997c22f", "record_id": "flaws_cloudtrail:0000292:3d471b87-c6b7-4126-abbe-c48bb997c22f", "row_index": 292, "timestamp": "2019-08-21T14:45:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1831, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d471b87-c6b7-4126-abbe-c48bb997c22f", "eventTime": "2019-08-21T14:45:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WyXY6aviCgdsFSPd-_p2mcYSZ6Ei9LmzpvuFKsz3EGL5q6capZWVoc-rgQA_OzhT-xk_bY2bi7EOZwOJoUu_mteU4xM9E_eqC9XGJsDT_Mdv2I9_EDeHK9zIrGieZ7032HOcEeA6wLdFKwZH5u0m_mfY6vPkPQoCd2smGPBFvaVCIvEzX73c5BhuAWy2FFDBP4L1xOmiLjjIVPGUWxG3UnE3Gi8CFNpkHL6uFrzUQ-uEjfxnmrfJuIppzwPRAdnDvKkgZs-q3mRxiUSyILHaxdvt-99AGAjKLjTeCbN-X4b7PWXVt7upNSi3WbRTtmI6mERnJxwwWwBP_OaISVSUzgTNsQ4FvR8Ws8KmJAGT8VsbchEaZXU6O4IIAsK6d1LZddPnQh2PnSG6v4oMzjp9lGvnAWG1Mx3JCHWefPAYGeie78XdrozRWgk87l0_HxEJXE7zPsbbB2vDU5EQeM4gIS3fucTai_Dranane0xrFCJJwZutYMosTfZFpldeoeDQvQV__83gxijBdS833MNa5gw71z8ztI7mu4MgKgCPT1gb1ObqxikpKNgBzDwiGF7H1OJx-F_a_2yIEggMPbk0TLq3zDC8Klc_WbClkpFQQTXR0cKxqIYidXhT_pRSbUwWVtE0svQnJyEiIOcu65DQ02kaKfJW", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d471b87-c6b7-4126-abbe-c48bb997c22f", "record_id": "flaws_cloudtrail:0000293:3d471b87-c6b7-4126-abbe-c48bb997c22f", "row_index": 293, "timestamp": "2019-08-21T14:45:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1831, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d471b87-c6b7-4126-abbe-c48bb997c22f", "eventTime": "2019-08-21T14:45:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WyXY6aviCgdsFSPd-_p2mcYSZ6Ei9LmzpvuFKsz3EGL5q6capZWVoc-rgQA_OzhT-xk_bY2bi7EOZwOJoUu_mteU4xM9E_eqC9XGJsDT_Mdv2I9_EDeHK9zIrGieZ7032HOcEeA6wLdFKwZH5u0m_mfY6vPkPQoCd2smGPBFvaVCIvEzX73c5BhuAWy2FFDBP4L1xOmiLjjIVPGUWxG3UnE3Gi8CFNpkHL6uFrzUQ-uEjfxnmrfJuIppzwPRAdnDvKkgZs-q3mRxiUSyILHaxdvt-99AGAjKLjTeCbN-X4b7PWXVt7upNSi3WbRTtmI6mERnJxwwWwBP_OaISVSUzgTNsQ4FvR8Ws8KmJAGT8VsbchEaZXU6O4IIAsK6d1LZddPnQh2PnSG6v4oMzjp9lGvnAWG1Mx3JCHWefPAYGeie78XdrozRWgk87l0_HxEJXE7zPsbbB2vDU5EQeM4gIS3fucTai_Dranane0xrFCJJwZutYMosTfZFpldeoeDQvQV__83gxijBdS833MNa5gw71z8ztI7mu4MgKgCPT1gb1ObqxikpKNgBzDwiGF7H1OJx-F_a_2yIEggMPbk0TLq3zDC8Klc_WbClkpFQQTXR0cKxqIYidXhT_pRSbUwWVtE0svQnJyEiIOcu65DQ02kaKfJW", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "record_id": "flaws_cloudtrail:0000294:02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "row_index": 294, "timestamp": "2019-08-21T14:45:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "eventTime": "2019-08-21T14:45:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "record_id": "flaws_cloudtrail:0000295:02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "row_index": 295, "timestamp": "2019-08-21T14:45:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a45b7d-ed7b-42c3-8efa-2ad5130703eb", "eventTime": "2019-08-21T14:45:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc2b706-e9ae-4f25-815e-373f5a48870e", "record_id": "flaws_cloudtrail:0000296:5dc2b706-e9ae-4f25-815e-373f5a48870e", "row_index": 296, "timestamp": "2019-08-21T14:45:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc2b706-e9ae-4f25-815e-373f5a48870e", "eventTime": "2019-08-21T14:45:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -1HMi3mae_VZiZnMF821mJhyJsUEFI3nXthCdyVb6yZHM9UDsqDhBtnnXAStytJ2qZ6LgE4ynWa8u3gK7xDgvTliR1Z1IS76b0CPXuXd43IYMHV5ZbtG2LbnyRlg2JuLfIm14cI9YJf1pFMsU0Y2jIOsLwTkPb29mEEHzdXM2c7BSL6WO1g8FL8Wj7I47JQsoXtqtDTKZDMNzaRBuvj-t10i-ICq3n2qJIiwPN6Y2hwd_3P9JQRcagNzcxGBizpZOAd1kTrh4eNNAbdLL0WUaiIp6-vQY3b3d9r_97jRrB7dupyzY3vbOBpD0jlX8n6nO81eVMxmnAY1jRsNJ0X65enml54PPjETd6BMJQg9gjie5piGdMALWlGsfLDACyDxNwIM4aAPTAWpLn2tT9cCEI64wi646IqmGklVcqOXTUNu8n8C1Nz3bAZarEsojAxGNKxhZzcEozma3YJNE8J7fC9_29Au7tOP5Ek9w3tUT__b9GOXFAVpGRnvhv8lLnWyWFgTVrtas_TK2n8QuW_aIBTyqDBGWFT0vBeTma7cERSohELJo4eArEJoRiSTcPIpT1vjg48aNMGoWoomlyxNXErYxqE_ueG3pbrCh-fK8YitkvX4yapDroBTjeSMRrqXjxPt3Vrk3caYzYxzOhN6lXXp1FwcGw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc2b706-e9ae-4f25-815e-373f5a48870e", "record_id": "flaws_cloudtrail:0000297:5dc2b706-e9ae-4f25-815e-373f5a48870e", "row_index": 297, "timestamp": "2019-08-21T14:45:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc2b706-e9ae-4f25-815e-373f5a48870e", "eventTime": "2019-08-21T14:45:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -1HMi3mae_VZiZnMF821mJhyJsUEFI3nXthCdyVb6yZHM9UDsqDhBtnnXAStytJ2qZ6LgE4ynWa8u3gK7xDgvTliR1Z1IS76b0CPXuXd43IYMHV5ZbtG2LbnyRlg2JuLfIm14cI9YJf1pFMsU0Y2jIOsLwTkPb29mEEHzdXM2c7BSL6WO1g8FL8Wj7I47JQsoXtqtDTKZDMNzaRBuvj-t10i-ICq3n2qJIiwPN6Y2hwd_3P9JQRcagNzcxGBizpZOAd1kTrh4eNNAbdLL0WUaiIp6-vQY3b3d9r_97jRrB7dupyzY3vbOBpD0jlX8n6nO81eVMxmnAY1jRsNJ0X65enml54PPjETd6BMJQg9gjie5piGdMALWlGsfLDACyDxNwIM4aAPTAWpLn2tT9cCEI64wi646IqmGklVcqOXTUNu8n8C1Nz3bAZarEsojAxGNKxhZzcEozma3YJNE8J7fC9_29Au7tOP5Ek9w3tUT__b9GOXFAVpGRnvhv8lLnWyWFgTVrtas_TK2n8QuW_aIBTyqDBGWFT0vBeTma7cERSohELJo4eArEJoRiSTcPIpT1vjg48aNMGoWoomlyxNXErYxqE_ueG3pbrCh-fK8YitkvX4yapDroBTjeSMRrqXjxPt3Vrk3caYzYxzOhN6lXXp1FwcGw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1038f39e-61c1-49b7-a277-1b501b7aba1d", "record_id": "flaws_cloudtrail:0000298:1038f39e-61c1-49b7-a277-1b501b7aba1d", "row_index": 298, "timestamp": "2019-08-21T14:45:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1038f39e-61c1-49b7-a277-1b501b7aba1d", "eventTime": "2019-08-21T14:45:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1038f39e-61c1-49b7-a277-1b501b7aba1d", "record_id": "flaws_cloudtrail:0000299:1038f39e-61c1-49b7-a277-1b501b7aba1d", "row_index": 299, "timestamp": "2019-08-21T14:45:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1038f39e-61c1-49b7-a277-1b501b7aba1d", "eventTime": "2019-08-21T14:45:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "record_id": "flaws_cloudtrail:0000300:3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "row_index": 300, "timestamp": "2019-08-21T14:46:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "eventTime": "2019-08-21T14:46:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dpDag4nYH5Iw8rPIl4mCAs95ajvgNjx2hxUqsqPQoxKCFWA2aQXn37z9ztXKdD8oolzep81zDsSWVjaAyfFM653SpktAQkVGG8EGXj3QNfRWAtEB2Erc5SwgbnM38PVFOAuxiv8Us55B3sAN3H-ofLn1WeboePcauT5cwIP77UcwgVigoINkdq3Rq0As_IqpD8gULUn1F-OrQIgbtKU2bSgnVi6menEs47pgHRKZ2iasBL-ngv5MkfArf-D_pAhpXRc8fcGu3hIPKXSyZa-BloGBFz0x40NXP9CvUT1BUtuQsZvZstjknxzaFm9iu2oYtCjGyyhlJvEa8bdlLbEmSeNipeUzWhPIZNnfBva3ioDZVbgc6dmbhSeHn23aEVtdD3S1NCypfhgcahsgjNnvgLFHgwKNwsZjsBV5w5JjHvJv_uiC4zTByOPADGdO2UHmiZuPZJSne0-iw_FVoPh4gR5LnhkfAC-UqCpLDpJ_tgcu-PD6zgAAEiBJ-kh6azcMtGOFCdvR0i4UzN_hEgiNiVBbbZdzlli-mmQyH6Zo0FASi6NByAg7cvDAlfD3LsmD55I-C1UmNMPbz6Uqhb6zbF_-pDyzSPS8IBRQ51ds1cnhGGRwyACTMPGV0sPBpXC37DcAir7JbU3Nkg0G9tP4ptpgoFBtOw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81e3e5d0-e8fb-4676-9238-c12bd46681a", "record_id": "flaws_cloudtrail:0000301:81e3e5d0-e8fb-4676-9238-c12bd46681a", "row_index": 301, "timestamp": "2019-08-21T14:46:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81e3e5d0-e8fb-4676-9238-c12bd46681a", "eventTime": "2019-08-21T14:46:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "record_id": "flaws_cloudtrail:0000302:3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "row_index": 302, "timestamp": "2019-08-21T14:46:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3928d26b-44bc-4469-8c80-fbb2a5c4e1cb", "eventTime": "2019-08-21T14:46:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dpDag4nYH5Iw8rPIl4mCAs95ajvgNjx2hxUqsqPQoxKCFWA2aQXn37z9ztXKdD8oolzep81zDsSWVjaAyfFM653SpktAQkVGG8EGXj3QNfRWAtEB2Erc5SwgbnM38PVFOAuxiv8Us55B3sAN3H-ofLn1WeboePcauT5cwIP77UcwgVigoINkdq3Rq0As_IqpD8gULUn1F-OrQIgbtKU2bSgnVi6menEs47pgHRKZ2iasBL-ngv5MkfArf-D_pAhpXRc8fcGu3hIPKXSyZa-BloGBFz0x40NXP9CvUT1BUtuQsZvZstjknxzaFm9iu2oYtCjGyyhlJvEa8bdlLbEmSeNipeUzWhPIZNnfBva3ioDZVbgc6dmbhSeHn23aEVtdD3S1NCypfhgcahsgjNnvgLFHgwKNwsZjsBV5w5JjHvJv_uiC4zTByOPADGdO2UHmiZuPZJSne0-iw_FVoPh4gR5LnhkfAC-UqCpLDpJ_tgcu-PD6zgAAEiBJ-kh6azcMtGOFCdvR0i4UzN_hEgiNiVBbbZdzlli-mmQyH6Zo0FASi6NByAg7cvDAlfD3LsmD55I-C1UmNMPbz6Uqhb6zbF_-pDyzSPS8IBRQ51ds1cnhGGRwyACTMPGV0sPBpXC37DcAir7JbU3Nkg0G9tP4ptpgoFBtOw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81e3e5d0-e8fb-4676-9238-c12bd46681a", "record_id": "flaws_cloudtrail:0000303:81e3e5d0-e8fb-4676-9238-c12bd46681a", "row_index": 303, "timestamp": "2019-08-21T14:46:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81e3e5d0-e8fb-4676-9238-c12bd46681a", "eventTime": "2019-08-21T14:46:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "record_id": "flaws_cloudtrail:0000304:b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "row_index": 304, "timestamp": "2019-08-21T14:46:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "eventTime": "2019-08-21T14:46:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "record_id": "flaws_cloudtrail:0000305:b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "row_index": 305, "timestamp": "2019-08-21T14:46:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35b5b7f-5ec1-4189-b32e-e0aac9b68dde", "eventTime": "2019-08-21T14:46:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af47a5f6-e7f7-4194-a447-f009cfbf5656", "record_id": "flaws_cloudtrail:0000306:af47a5f6-e7f7-4194-a447-f009cfbf5656", "row_index": 306, "timestamp": "2019-08-21T14:46:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af47a5f6-e7f7-4194-a447-f009cfbf5656", "eventTime": "2019-08-21T14:46:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Pm4g7wzyTBMCo762M1edmm1A73nl0Hc25ZqjTWT6HeEwG9g53aR4aA_psdsWXmAZAgzB0RDS35EwrUWaUbiM4BWMmVM_lFGQmFPhCjC3J_Gn2FraGvTMgjcKeQyOCue6gK0vuok0o4wz80bupMsI42iO4ETf0qQ_r2UVCQMowkiNYjFApK2p3Eswn1TSv7TmnhtVCgBMLY2jU3XOmT8hs1xtP84r9p8M6uBTc1lvZEsUXsCaUY0iel0ZcpSskMFRCMegsd9YaXPe5aswFOnP-GKjgn5LSCJBMT75Adxw2e2NWIjSBDM3RymPxF4Vh8RLwbes7ZrEPERTetLC-mvsCZ-4Xb6XxyPF0zeXBAOKakK-1i5RuMokb6ZRM56oTiAgFk143NYCnf8jHi0wODJPUDRmbRPKy--WH8MNk1Ca6rth4yeAYhEKCumj6Hsi4XT4twGNiXUqfdKgIVvDk7z_lMIe6VtnM76N3McO3ik9rSQXmywtzi5SL0I9_h5xmpwgZcj2MgnRHmsXZUC_qMkgMt9AHp6B1aYipXops121FkgU9DY_7tLRk8d3obSQEQzNHnWx4BdAUk5iMPVXZIbmJB0USyMyJHUArr4KEMYgT_UwOeXX4RYkta7U2lXera-0tHqI-MsE-Xr5wXhKmfRh36YaPp5u", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af47a5f6-e7f7-4194-a447-f009cfbf5656", "record_id": "flaws_cloudtrail:0000307:af47a5f6-e7f7-4194-a447-f009cfbf5656", "row_index": 307, "timestamp": "2019-08-21T14:46:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af47a5f6-e7f7-4194-a447-f009cfbf5656", "eventTime": "2019-08-21T14:46:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Pm4g7wzyTBMCo762M1edmm1A73nl0Hc25ZqjTWT6HeEwG9g53aR4aA_psdsWXmAZAgzB0RDS35EwrUWaUbiM4BWMmVM_lFGQmFPhCjC3J_Gn2FraGvTMgjcKeQyOCue6gK0vuok0o4wz80bupMsI42iO4ETf0qQ_r2UVCQMowkiNYjFApK2p3Eswn1TSv7TmnhtVCgBMLY2jU3XOmT8hs1xtP84r9p8M6uBTc1lvZEsUXsCaUY0iel0ZcpSskMFRCMegsd9YaXPe5aswFOnP-GKjgn5LSCJBMT75Adxw2e2NWIjSBDM3RymPxF4Vh8RLwbes7ZrEPERTetLC-mvsCZ-4Xb6XxyPF0zeXBAOKakK-1i5RuMokb6ZRM56oTiAgFk143NYCnf8jHi0wODJPUDRmbRPKy--WH8MNk1Ca6rth4yeAYhEKCumj6Hsi4XT4twGNiXUqfdKgIVvDk7z_lMIe6VtnM76N3McO3ik9rSQXmywtzi5SL0I9_h5xmpwgZcj2MgnRHmsXZUC_qMkgMt9AHp6B1aYipXops121FkgU9DY_7tLRk8d3obSQEQzNHnWx4BdAUk5iMPVXZIbmJB0USyMyJHUArr4KEMYgT_UwOeXX4RYkta7U2lXera-0tHqI-MsE-Xr5wXhKmfRh36YaPp5u", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "record_id": "flaws_cloudtrail:0000308:ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "row_index": 308, "timestamp": "2019-08-21T14:46:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "eventTime": "2019-08-21T14:46:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "record_id": "flaws_cloudtrail:0000309:ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "row_index": 309, "timestamp": "2019-08-21T14:46:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed524df4-89ce-482d-8c86-0a3e7dcbaaf0", "eventTime": "2019-08-21T14:46:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc20085-5d40-45a2-b560-14f76fb277e3", "record_id": "flaws_cloudtrail:0000310:5fc20085-5d40-45a2-b560-14f76fb277e3", "row_index": 310, "timestamp": "2019-08-21T14:46:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc20085-5d40-45a2-b560-14f76fb277e3", "eventTime": "2019-08-21T14:46:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc20085-5d40-45a2-b560-14f76fb277e3", "record_id": "flaws_cloudtrail:0000311:5fc20085-5d40-45a2-b560-14f76fb277e3", "row_index": 311, "timestamp": "2019-08-21T14:46:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc20085-5d40-45a2-b560-14f76fb277e3", "eventTime": "2019-08-21T14:46:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15f89981-a278-4bf4-bde7-ee92f6292e5e", "record_id": "flaws_cloudtrail:0000312:15f89981-a278-4bf4-bde7-ee92f6292e5e", "row_index": 312, "timestamp": "2019-08-21T14:46:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15f89981-a278-4bf4-bde7-ee92f6292e5e", "eventTime": "2019-08-21T14:46:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15f89981-a278-4bf4-bde7-ee92f6292e5e", "record_id": "flaws_cloudtrail:0000313:15f89981-a278-4bf4-bde7-ee92f6292e5e", "row_index": 313, "timestamp": "2019-08-21T14:46:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15f89981-a278-4bf4-bde7-ee92f6292e5e", "eventTime": "2019-08-21T14:46:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a393059f-7a80-4faf-bd14-61a18fc241ea", "record_id": "flaws_cloudtrail:0000314:2a393059f-7a80-4faf-bd14-61a18fc241ea", "row_index": 314, "timestamp": "2019-08-21T14:46:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a393059f-7a80-4faf-bd14-61a18fc241ea", "eventTime": "2019-08-21T14:46:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a393059f-7a80-4faf-bd14-61a18fc241ea", "record_id": "flaws_cloudtrail:0000315:2a393059f-7a80-4faf-bd14-61a18fc241ea", "row_index": 315, "timestamp": "2019-08-21T14:46:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a393059f-7a80-4faf-bd14-61a18fc241ea", "eventTime": "2019-08-21T14:46:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ad68af2-495d-40e9-aa36-3767cbe15786", "record_id": "flaws_cloudtrail:0000316:7ad68af2-495d-40e9-aa36-3767cbe15786", "row_index": 316, "timestamp": "2019-08-21T14:46:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ad68af2-495d-40e9-aa36-3767cbe15786", "eventTime": "2019-08-21T14:46:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ad68af2-495d-40e9-aa36-3767cbe15786", "record_id": "flaws_cloudtrail:0000317:7ad68af2-495d-40e9-aa36-3767cbe15786", "row_index": 317, "timestamp": "2019-08-21T14:46:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ad68af2-495d-40e9-aa36-3767cbe15786", "eventTime": "2019-08-21T14:46:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640c6943-6bcb-4a3a-9017-3a766a5c6c68", "record_id": "flaws_cloudtrail:0000318:640c6943-6bcb-4a3a-9017-3a766a5c6c68", "row_index": 318, "timestamp": "2019-08-21T14:46:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640c6943-6bcb-4a3a-9017-3a766a5c6c68", "eventTime": "2019-08-21T14:46:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vl_kt0lbiKyqqHPdUwiZljQwbhT_3UhElFoQ3Ey8cUjEHvvJIMnXpeD4fwQ7ogKtTlQAGMB1upPAMwtWXGEUlk4PU98rhQOexJ7jvkJ4spy9yX6hZ7dJsOd5bwqYhKOmyJDcl5mvqS-6U9aLkX3pDMM-NYvbNyE8-l3Og0KWSvkRizuiyP_qax36uPVu4Dq_TPXeaC3ud-NA1kZaz6cJt__78wSDO_pFdhchZgPUTxlU3EirSCoI3Ps2cE_uKQEMXv8Qi12ImkhDEq7sPOw4Pvcv9nIrxV95c1DI9QdG9JoS9vUeVdgsxiqB5ySNvPeAorJO5GjisICChQlTTLylPy-gW-KuyzpCDxOdDLAt_Ap6T2mLL0L8ALg6JnGtYyjtRiRKRrn38v-V6mzyjix-5_8_p9zjKq65UPwkKYvZ7KKoIZ8cwxUZLL_wZSbvmu0xsTbSOc5vcEjdGVUxVbxxoirpUlTwVvDj72yWLrHulfLPZuUKvOrsX4vJUKBrT3oLqMmVr5zCU1H4Thcee5nXl29q2DbOB6GVZl9mN4r17ZHIjZlUgMqqY4eN_jXyzjjtwNgSRum892bPzueKbbIAjr9WUWoQuJEQd75BSxN-PMvEzctobKU-VbAiu2tPERDPF9kXvMoS0tQPW6RV6G477c7InQcv", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640c6943-6bcb-4a3a-9017-3a766a5c6c68", "record_id": "flaws_cloudtrail:0000319:640c6943-6bcb-4a3a-9017-3a766a5c6c68", "row_index": 319, "timestamp": "2019-08-21T14:46:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640c6943-6bcb-4a3a-9017-3a766a5c6c68", "eventTime": "2019-08-21T14:46:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vl_kt0lbiKyqqHPdUwiZljQwbhT_3UhElFoQ3Ey8cUjEHvvJIMnXpeD4fwQ7ogKtTlQAGMB1upPAMwtWXGEUlk4PU98rhQOexJ7jvkJ4spy9yX6hZ7dJsOd5bwqYhKOmyJDcl5mvqS-6U9aLkX3pDMM-NYvbNyE8-l3Og0KWSvkRizuiyP_qax36uPVu4Dq_TPXeaC3ud-NA1kZaz6cJt__78wSDO_pFdhchZgPUTxlU3EirSCoI3Ps2cE_uKQEMXv8Qi12ImkhDEq7sPOw4Pvcv9nIrxV95c1DI9QdG9JoS9vUeVdgsxiqB5ySNvPeAorJO5GjisICChQlTTLylPy-gW-KuyzpCDxOdDLAt_Ap6T2mLL0L8ALg6JnGtYyjtRiRKRrn38v-V6mzyjix-5_8_p9zjKq65UPwkKYvZ7KKoIZ8cwxUZLL_wZSbvmu0xsTbSOc5vcEjdGVUxVbxxoirpUlTwVvDj72yWLrHulfLPZuUKvOrsX4vJUKBrT3oLqMmVr5zCU1H4Thcee5nXl29q2DbOB6GVZl9mN4r17ZHIjZlUgMqqY4eN_jXyzjjtwNgSRum892bPzueKbbIAjr9WUWoQuJEQd75BSxN-PMvEzctobKU-VbAiu2tPERDPF9kXvMoS0tQPW6RV6G477c7InQcv", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9afef61d-3609-4f4d-814a-7a86e6d01d43", "record_id": "flaws_cloudtrail:0000320:9afef61d-3609-4f4d-814a-7a86e6d01d43", "row_index": 320, "timestamp": "2019-08-21T14:46:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9afef61d-3609-4f4d-814a-7a86e6d01d43", "eventTime": "2019-08-21T14:46:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6ko2Q6F9Ps8l9mYBjHV1zxdKdGyIHh3bn819xNJOuATFTvBXnaf7Ngkxgbl7IRYE2smRJA5Jj68GwnwKrStgYHyC1IFZphnrYqGFHteDklEajsyNMNEFf460p3G5-UGHYJWn2IEkZgOwcWtFRFtwq27S5QPM3b105VauEhq5Dw-XMh7lW3xkMXxjHRwn7yeZrrYf19LQJzK4TIYYliFCiRVtDKt81BIuh-nqhvKe3-aqLqFnr6_C7HxdL_hNjeuWxZsvLRXGAKHEKp29ge7_m96SlJfZC7Jd-v7jBRcMUXD-625llIw9imgkOLVKMcgD5K-hZsew6bMGzfGEeldv7XN0I4mmr67Im5cT_oxvPLthVL68w_AduAz7dPxtkV2TZ1mKDDPed-Cjp79bozHiW2-A3zuSTx4_znyp4Aoly8Zb4sjpTRFCmqtsqcjKXkVKlv0Fn6Px1AObTCN3-RiBlzV2BkU9K1FTW32L2vHtTXSfTbsoZIT8nYeDxiI9wLc4iOQxxyQrreNgb8_-9w_PARRNVvuBYFY2BXZAXP06kY7pILVnxnpFL6u6ZvkYXnmBFFFtwqFA0V7GngOiyWp984fIqQ0H5L2MPXxuKdaSLrkqgJP-KB0hQLixAVdda5mLXZAqqAhNsl4AxwqKJveoxJQpQQZgzQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067747d84-84c1-4c27-91c5-cce0af206d18", "record_id": "flaws_cloudtrail:0000321:067747d84-84c1-4c27-91c5-cce0af206d18", "row_index": 321, "timestamp": "2019-08-21T14:46:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067747d84-84c1-4c27-91c5-cce0af206d18", "eventTime": "2019-08-21T14:46:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9afef61d-3609-4f4d-814a-7a86e6d01d43", "record_id": "flaws_cloudtrail:0000322:9afef61d-3609-4f4d-814a-7a86e6d01d43", "row_index": 322, "timestamp": "2019-08-21T14:46:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9afef61d-3609-4f4d-814a-7a86e6d01d43", "eventTime": "2019-08-21T14:46:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6ko2Q6F9Ps8l9mYBjHV1zxdKdGyIHh3bn819xNJOuATFTvBXnaf7Ngkxgbl7IRYE2smRJA5Jj68GwnwKrStgYHyC1IFZphnrYqGFHteDklEajsyNMNEFf460p3G5-UGHYJWn2IEkZgOwcWtFRFtwq27S5QPM3b105VauEhq5Dw-XMh7lW3xkMXxjHRwn7yeZrrYf19LQJzK4TIYYliFCiRVtDKt81BIuh-nqhvKe3-aqLqFnr6_C7HxdL_hNjeuWxZsvLRXGAKHEKp29ge7_m96SlJfZC7Jd-v7jBRcMUXD-625llIw9imgkOLVKMcgD5K-hZsew6bMGzfGEeldv7XN0I4mmr67Im5cT_oxvPLthVL68w_AduAz7dPxtkV2TZ1mKDDPed-Cjp79bozHiW2-A3zuSTx4_znyp4Aoly8Zb4sjpTRFCmqtsqcjKXkVKlv0Fn6Px1AObTCN3-RiBlzV2BkU9K1FTW32L2vHtTXSfTbsoZIT8nYeDxiI9wLc4iOQxxyQrreNgb8_-9w_PARRNVvuBYFY2BXZAXP06kY7pILVnxnpFL6u6ZvkYXnmBFFFtwqFA0V7GngOiyWp984fIqQ0H5L2MPXxuKdaSLrkqgJP-KB0hQLixAVdda5mLXZAqqAhNsl4AxwqKJveoxJQpQQZgzQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067747d84-84c1-4c27-91c5-cce0af206d18", "record_id": "flaws_cloudtrail:0000323:067747d84-84c1-4c27-91c5-cce0af206d18", "row_index": 323, "timestamp": "2019-08-21T14:46:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067747d84-84c1-4c27-91c5-cce0af206d18", "eventTime": "2019-08-21T14:46:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d3c1f3b-c0a8-409d-bc37-1728a804f622", "record_id": "flaws_cloudtrail:0000324:1d3c1f3b-c0a8-409d-bc37-1728a804f622", "row_index": 324, "timestamp": "2019-08-21T14:46:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 516, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d3c1f3b-c0a8-409d-bc37-1728a804f622", "eventTime": "2019-08-21T14:46:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "record_id": "flaws_cloudtrail:0000325:9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "row_index": 325, "timestamp": "2019-08-21T14:46:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "eventTime": "2019-08-21T14:46:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "record_id": "flaws_cloudtrail:0000326:9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "row_index": 326, "timestamp": "2019-08-21T14:46:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c0156cb-95a3-4fff-a1cb-cde3b61f152a", "eventTime": "2019-08-21T14:46:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd77067-347e-4843-8817-489f20e181826", "record_id": "flaws_cloudtrail:0000327:9bd77067-347e-4843-8817-489f20e181826", "row_index": 327, "timestamp": "2019-08-21T14:46:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd77067-347e-4843-8817-489f20e181826", "eventTime": "2019-08-21T14:46:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd77067-347e-4843-8817-489f20e181826", "record_id": "flaws_cloudtrail:0000328:9bd77067-347e-4843-8817-489f20e181826", "row_index": 328, "timestamp": "2019-08-21T14:46:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd77067-347e-4843-8817-489f20e181826", "eventTime": "2019-08-21T14:46:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92aabefc-6a66-4d59-a8c8-1d89147acd3f", "record_id": "flaws_cloudtrail:0000329:92aabefc-6a66-4d59-a8c8-1d89147acd3f", "row_index": 329, "timestamp": "2019-08-21T14:46:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92aabefc-6a66-4d59-a8c8-1d89147acd3f", "eventTime": "2019-08-21T14:46:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WlrQGjk6fLo0f8M6eG5uvrpLsUloUQwZYLlOJzxgEWLBiSphQveVCaq7y2XAtPyFvOfTBEYioLJaPNMvgOPQYpuf8asnhV96LwMbcw-nMPO15v9LmfH2OyDgILCYVsRWA5oYb4GYCRMJw6cBqViv4k6XUgeSe8w3m0BIROvYAhamf_cpdd1_iWQaUAhOu2Vomg3GNPGj0QMWmaPmil5_D4LBL-ZQS6oik7KSj-qmbqkg-FBCaVqFmgkpXCjlRJJsXMzM4jFtku7s-WNBpmNqbBZuEiJTv05IJv-7AbKsVHZthxdBhZOfEmQ5tU7Mjio_xtJuvDqv9rmyKoFPaWeFeuzRDH4oLt0RXN6zY8Qp9EDVqgtoNHMfg0iI4mg8LNEO79BSgMOZuXehPDjCAqyStEI6N6sTMSyxZQ54pnBrQNkvwrXsupAtZIn3nmj2365DrEIszpKesWdupTRLGhY3g8lldKxie8CuJBx_Du7D4dlX6qkKMScJ8TvGLq153wnO-zgdhPsbEuvWdJ5b3uAELD7F6LLVlLLoL3SIR6W5KUP8WTvPkn0lc6lYGjPTEkrmTVGQ5Q4ooO1v777qMW9vt5TDARsGkvHOQg2YYTTWsqF_N6xoYMpUTC5Qj0K13n-_lRL1aaDsHCZq-IpknKm6UBiqAtmEcA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92aabefc-6a66-4d59-a8c8-1d89147acd3f", "record_id": "flaws_cloudtrail:0000330:92aabefc-6a66-4d59-a8c8-1d89147acd3f", "row_index": 330, "timestamp": "2019-08-21T14:46:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92aabefc-6a66-4d59-a8c8-1d89147acd3f", "eventTime": "2019-08-21T14:46:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WlrQGjk6fLo0f8M6eG5uvrpLsUloUQwZYLlOJzxgEWLBiSphQveVCaq7y2XAtPyFvOfTBEYioLJaPNMvgOPQYpuf8asnhV96LwMbcw-nMPO15v9LmfH2OyDgILCYVsRWA5oYb4GYCRMJw6cBqViv4k6XUgeSe8w3m0BIROvYAhamf_cpdd1_iWQaUAhOu2Vomg3GNPGj0QMWmaPmil5_D4LBL-ZQS6oik7KSj-qmbqkg-FBCaVqFmgkpXCjlRJJsXMzM4jFtku7s-WNBpmNqbBZuEiJTv05IJv-7AbKsVHZthxdBhZOfEmQ5tU7Mjio_xtJuvDqv9rmyKoFPaWeFeuzRDH4oLt0RXN6zY8Qp9EDVqgtoNHMfg0iI4mg8LNEO79BSgMOZuXehPDjCAqyStEI6N6sTMSyxZQ54pnBrQNkvwrXsupAtZIn3nmj2365DrEIszpKesWdupTRLGhY3g8lldKxie8CuJBx_Du7D4dlX6qkKMScJ8TvGLq153wnO-zgdhPsbEuvWdJ5b3uAELD7F6LLVlLLoL3SIR6W5KUP8WTvPkn0lc6lYGjPTEkrmTVGQ5Q4ooO1v777qMW9vt5TDARsGkvHOQg2YYTTWsqF_N6xoYMpUTC5Qj0K13n-_lRL1aaDsHCZq-IpknKm6UBiqAtmEcA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36962d49-0124-4476-a334-588ceda3f031", "record_id": "flaws_cloudtrail:0000331:36962d49-0124-4476-a334-588ceda3f031", "row_index": 331, "timestamp": "2019-08-21T14:46:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36962d49-0124-4476-a334-588ceda3f031", "eventTime": "2019-08-21T14:46:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36962d49-0124-4476-a334-588ceda3f031", "record_id": "flaws_cloudtrail:0000332:36962d49-0124-4476-a334-588ceda3f031", "row_index": 332, "timestamp": "2019-08-21T14:46:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36962d49-0124-4476-a334-588ceda3f031", "eventTime": "2019-08-21T14:46:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "record_id": "flaws_cloudtrail:0000333:f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "row_index": 333, "timestamp": "2019-08-21T14:46:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "eventTime": "2019-08-21T14:46:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "record_id": "flaws_cloudtrail:0000334:f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "row_index": 334, "timestamp": "2019-08-21T14:46:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71e8d0a-b808-48d6-be36-3cc96a5c1fc3", "eventTime": "2019-08-21T14:46:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf63d1e6-b124-4317-9eeb-1bb685b323cf", "record_id": "flaws_cloudtrail:0000335:bf63d1e6-b124-4317-9eeb-1bb685b323cf", "row_index": 335, "timestamp": "2019-08-21T14:46:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf63d1e6-b124-4317-9eeb-1bb685b323cf", "eventTime": "2019-08-21T14:46:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf63d1e6-b124-4317-9eeb-1bb685b323cf", "record_id": "flaws_cloudtrail:0000336:bf63d1e6-b124-4317-9eeb-1bb685b323cf", "row_index": 336, "timestamp": "2019-08-21T14:46:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf63d1e6-b124-4317-9eeb-1bb685b323cf", "eventTime": "2019-08-21T14:46:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "record_id": "flaws_cloudtrail:0000337:0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "row_index": 337, "timestamp": "2019-08-21T14:46:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "eventTime": "2019-08-21T14:46:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "record_id": "flaws_cloudtrail:0000338:0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "row_index": 338, "timestamp": "2019-08-21T14:46:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0cec1b-a61d-4a9a-bf31-ec55892ea74c", "eventTime": "2019-08-21T14:46:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974cd183-2d9f-4f59-8464-574a115865", "record_id": "flaws_cloudtrail:0000339:974cd183-2d9f-4f59-8464-574a115865", "row_index": 339, "timestamp": "2019-08-21T14:46:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974cd183-2d9f-4f59-8464-574a115865", "eventTime": "2019-08-21T14:46:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974cd183-2d9f-4f59-8464-574a115865", "record_id": "flaws_cloudtrail:0000340:974cd183-2d9f-4f59-8464-574a115865", "row_index": 340, "timestamp": "2019-08-21T14:46:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974cd183-2d9f-4f59-8464-574a115865", "eventTime": "2019-08-21T14:46:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8d5e254-3dfa-4eb5-b324-564bb0833f46", "record_id": "flaws_cloudtrail:0000341:c8d5e254-3dfa-4eb5-b324-564bb0833f46", "row_index": 341, "timestamp": "2019-08-21T14:46:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8d5e254-3dfa-4eb5-b324-564bb0833f46", "eventTime": "2019-08-21T14:46:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8d5e254-3dfa-4eb5-b324-564bb0833f46", "record_id": "flaws_cloudtrail:0000342:c8d5e254-3dfa-4eb5-b324-564bb0833f46", "row_index": 342, "timestamp": "2019-08-21T14:46:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8d5e254-3dfa-4eb5-b324-564bb0833f46", "eventTime": "2019-08-21T14:46:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf0e423-91b5-4781-85e7-0ad168330fc5", "record_id": "flaws_cloudtrail:0000343:9bf0e423-91b5-4781-85e7-0ad168330fc5", "row_index": 343, "timestamp": "2019-08-21T14:46:59Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 510, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf0e423-91b5-4781-85e7-0ad168330fc5", "eventTime": "2019-08-21T14:46:59Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac25d77a-7026-4c12-898b-7d48ea366cf8", "record_id": "flaws_cloudtrail:0000344:ac25d77a-7026-4c12-898b-7d48ea366cf8", "row_index": 344, "timestamp": "2019-08-21T14:48:06Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 504, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac25d77a-7026-4c12-898b-7d48ea366cf8", "eventTime": "2019-08-21T14:48:06Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34d1476-8a51-49b0-98d6-8a2701433ba2", "record_id": "flaws_cloudtrail:0000345:f34d1476-8a51-49b0-98d6-8a2701433ba2", "row_index": 345, "timestamp": "2019-08-21T14:50:01Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 510, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34d1476-8a51-49b0-98d6-8a2701433ba2", "eventTime": "2019-08-21T14:50:01Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "172ce9c8-6faf-467b-a1df-7315312f3739", "record_id": "flaws_cloudtrail:0000346:172ce9c8-6faf-467b-a1df-7315312f3739", "row_index": 346, "timestamp": "2019-08-21T14:51:47Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASRCNBW5XJBBGF0UI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "25.47.53.87", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "172ce9c8-6faf-467b-a1df-7315312f3739", "eventTime": "2019-08-21T14:51:47Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "25.47.53.87", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASRCNBW5XJBBGF0UI", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3887caa-2910-4d11-bb87-19ec53f5445c", "record_id": "flaws_cloudtrail:0000347:b3887caa-2910-4d11-bb87-19ec53f5445c", "row_index": 347, "timestamp": "2019-08-21T14:51:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3887caa-2910-4d11-bb87-19ec53f5445c", "eventTime": "2019-08-21T14:51:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3887caa-2910-4d11-bb87-19ec53f5445c", "record_id": "flaws_cloudtrail:0000348:b3887caa-2910-4d11-bb87-19ec53f5445c", "row_index": 348, "timestamp": "2019-08-21T14:51:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3887caa-2910-4d11-bb87-19ec53f5445c", "eventTime": "2019-08-21T14:51:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "025c266c-6a55-4f9a-b065-55b965427ce3a", "record_id": "flaws_cloudtrail:0000349:025c266c-6a55-4f9a-b065-55b965427ce3a", "row_index": 349, "timestamp": "2019-08-21T14:51:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "025c266c-6a55-4f9a-b065-55b965427ce3a", "eventTime": "2019-08-21T14:51:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "025c266c-6a55-4f9a-b065-55b965427ce3a", "record_id": "flaws_cloudtrail:0000350:025c266c-6a55-4f9a-b065-55b965427ce3a", "row_index": 350, "timestamp": "2019-08-21T14:51:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "025c266c-6a55-4f9a-b065-55b965427ce3a", "eventTime": "2019-08-21T14:51:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b107c8e2-243d-4af5-a923-df0e89e670125", "record_id": "flaws_cloudtrail:0000351:b107c8e2-243d-4af5-a923-df0e89e670125", "row_index": 351, "timestamp": "2019-08-21T14:51:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b107c8e2-243d-4af5-a923-df0e89e670125", "eventTime": "2019-08-21T14:51:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "record_id": "flaws_cloudtrail:0000352:61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "row_index": 352, "timestamp": "2019-08-21T14:51:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "eventTime": "2019-08-21T14:51:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b107c8e2-243d-4af5-a923-df0e89e670125", "record_id": "flaws_cloudtrail:0000353:b107c8e2-243d-4af5-a923-df0e89e670125", "row_index": 353, "timestamp": "2019-08-21T14:51:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b107c8e2-243d-4af5-a923-df0e89e670125", "eventTime": "2019-08-21T14:51:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "record_id": "flaws_cloudtrail:0000354:61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "row_index": 354, "timestamp": "2019-08-21T14:51:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a8c08c-afa1-4ff3-b1f9-b60c2d45722e", "eventTime": "2019-08-21T14:51:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "record_id": "flaws_cloudtrail:0000355:5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "row_index": 355, "timestamp": "2019-08-21T14:51:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "eventTime": "2019-08-21T14:51:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "record_id": "flaws_cloudtrail:0000356:5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "row_index": 356, "timestamp": "2019-08-21T14:51:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f9fa1ff-dbe0-47b1-a820-ee2740b1a680", "eventTime": "2019-08-21T14:51:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c96641-7e41-49ac-99cc-6c8c2f868665", "record_id": "flaws_cloudtrail:0000357:63c96641-7e41-49ac-99cc-6c8c2f868665", "row_index": 357, "timestamp": "2019-08-21T14:52:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c96641-7e41-49ac-99cc-6c8c2f868665", "eventTime": "2019-08-21T14:52:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c96641-7e41-49ac-99cc-6c8c2f868665", "record_id": "flaws_cloudtrail:0000358:63c96641-7e41-49ac-99cc-6c8c2f868665", "row_index": 358, "timestamp": "2019-08-21T14:52:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c96641-7e41-49ac-99cc-6c8c2f868665", "eventTime": "2019-08-21T14:52:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc7be708-b402-4ae5-9e3a-48669c1a09c0", "record_id": "flaws_cloudtrail:0000359:fc7be708-b402-4ae5-9e3a-48669c1a09c0", "row_index": 359, "timestamp": "2019-08-21T14:52:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc7be708-b402-4ae5-9e3a-48669c1a09c0", "eventTime": "2019-08-21T14:52:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc7be708-b402-4ae5-9e3a-48669c1a09c0", "record_id": "flaws_cloudtrail:0000360:fc7be708-b402-4ae5-9e3a-48669c1a09c0", "row_index": 360, "timestamp": "2019-08-21T14:52:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc7be708-b402-4ae5-9e3a-48669c1a09c0", "eventTime": "2019-08-21T14:52:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d424e1d-7944-47d0-a6a3-96b1907f7935", "record_id": "flaws_cloudtrail:0000361:8d424e1d-7944-47d0-a6a3-96b1907f7935", "row_index": 361, "timestamp": "2019-08-21T14:52:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d424e1d-7944-47d0-a6a3-96b1907f7935", "eventTime": "2019-08-21T14:52:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d424e1d-7944-47d0-a6a3-96b1907f7935", "record_id": "flaws_cloudtrail:0000362:8d424e1d-7944-47d0-a6a3-96b1907f7935", "row_index": 362, "timestamp": "2019-08-21T14:52:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d424e1d-7944-47d0-a6a3-96b1907f7935", "eventTime": "2019-08-21T14:52:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e378d406-b647-46ed-a649-529225f064", "record_id": "flaws_cloudtrail:0000363:e378d406-b647-46ed-a649-529225f064", "row_index": 363, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e378d406-b647-46ed-a649-529225f064", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ad798e-4115-43df-b726-1ef18072a13f", "record_id": "flaws_cloudtrail:0000364:18ad798e-4115-43df-b726-1ef18072a13f", "row_index": 364, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ad798e-4115-43df-b726-1ef18072a13f", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd2c5ebe-3e6a-496c-84df-413357f4daa6", "record_id": "flaws_cloudtrail:0000365:fd2c5ebe-3e6a-496c-84df-413357f4daa6", "row_index": 365, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd2c5ebe-3e6a-496c-84df-413357f4daa6", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facf9353-62f7-4edc-bafa-e9175893975e", "record_id": "flaws_cloudtrail:0000366:facf9353-62f7-4edc-bafa-e9175893975e", "row_index": 366, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facf9353-62f7-4edc-bafa-e9175893975e", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "record_id": "flaws_cloudtrail:0000367:93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "row_index": 367, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d27a08-9abf-4519-8935-3f910ae9be60", "record_id": "flaws_cloudtrail:0000368:96d27a08-9abf-4519-8935-3f910ae9be60", "row_index": 368, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d27a08-9abf-4519-8935-3f910ae9be60", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "record_id": "flaws_cloudtrail:0000369:d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "row_index": 369, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e378d406-b647-46ed-a649-529225f064", "record_id": "flaws_cloudtrail:0000370:e378d406-b647-46ed-a649-529225f064", "row_index": 370, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e378d406-b647-46ed-a649-529225f064", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ad798e-4115-43df-b726-1ef18072a13f", "record_id": "flaws_cloudtrail:0000371:18ad798e-4115-43df-b726-1ef18072a13f", "row_index": 371, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ad798e-4115-43df-b726-1ef18072a13f", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd2c5ebe-3e6a-496c-84df-413357f4daa6", "record_id": "flaws_cloudtrail:0000372:fd2c5ebe-3e6a-496c-84df-413357f4daa6", "row_index": 372, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd2c5ebe-3e6a-496c-84df-413357f4daa6", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facf9353-62f7-4edc-bafa-e9175893975e", "record_id": "flaws_cloudtrail:0000373:facf9353-62f7-4edc-bafa-e9175893975e", "row_index": 373, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facf9353-62f7-4edc-bafa-e9175893975e", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "record_id": "flaws_cloudtrail:0000374:93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "row_index": 374, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93a051a8-ef8d-480e-89ad-9fcbdebe0a11", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d27a08-9abf-4519-8935-3f910ae9be60", "record_id": "flaws_cloudtrail:0000375:96d27a08-9abf-4519-8935-3f910ae9be60", "row_index": 375, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d27a08-9abf-4519-8935-3f910ae9be60", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "record_id": "flaws_cloudtrail:0000376:d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "row_index": 376, "timestamp": "2019-08-21T14:52:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d120c3f2-aa67-41dd-a4b3-9fcc1fade1e5", "eventTime": "2019-08-21T14:52:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f411757-55f0-42e7-b076-37f3d65e7354", "record_id": "flaws_cloudtrail:0000377:4f411757-55f0-42e7-b076-37f3d65e7354", "row_index": 377, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f411757-55f0-42e7-b076-37f3d65e7354", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1da4aaea-6689-4c44-b27b-a4be43af8245", "record_id": "flaws_cloudtrail:0000378:1da4aaea-6689-4c44-b27b-a4be43af8245", "row_index": 378, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1da4aaea-6689-4c44-b27b-a4be43af8245", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4f2e81f-e327-4981-a770-034eb58746b", "record_id": "flaws_cloudtrail:0000379:e4f2e81f-e327-4981-a770-034eb58746b", "row_index": 379, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4f2e81f-e327-4981-a770-034eb58746b", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f15e869-0065-4733-bb30-2e0bcd7e57e7", "record_id": "flaws_cloudtrail:0000380:8f15e869-0065-4733-bb30-2e0bcd7e57e7", "row_index": 380, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f15e869-0065-4733-bb30-2e0bcd7e57e7", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416617fb8-ae17-485b-93e1-d05edbe19a82", "record_id": "flaws_cloudtrail:0000381:416617fb8-ae17-485b-93e1-d05edbe19a82", "row_index": 381, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416617fb8-ae17-485b-93e1-d05edbe19a82", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "record_id": "flaws_cloudtrail:0000382:18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "row_index": 382, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf9d074-b486-415e-a54e-8d6de3a5976a", "record_id": "flaws_cloudtrail:0000383:baf9d074-b486-415e-a54e-8d6de3a5976a", "row_index": 383, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf9d074-b486-415e-a54e-8d6de3a5976a", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171a9ebb-fc7f-4996-b298-8471fbdc238b", "record_id": "flaws_cloudtrail:0000384:171a9ebb-fc7f-4996-b298-8471fbdc238b", "row_index": 384, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171a9ebb-fc7f-4996-b298-8471fbdc238b", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811a0cab-3adf-458d-bf63-0f6486e87e75", "record_id": "flaws_cloudtrail:0000385:811a0cab-3adf-458d-bf63-0f6486e87e75", "row_index": 385, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811a0cab-3adf-458d-bf63-0f6486e87e75", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "record_id": "flaws_cloudtrail:0000386:d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "row_index": 386, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "record_id": "flaws_cloudtrail:0000387:e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "row_index": 387, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e328368-b86d-4846-beea-eb7206d9eab1", "record_id": "flaws_cloudtrail:0000388:e328368-b86d-4846-beea-eb7206d9eab1", "row_index": 388, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e328368-b86d-4846-beea-eb7206d9eab1", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87fd1af6-7f98-4aec-83bc-ea90006f2715", "record_id": "flaws_cloudtrail:0000389:87fd1af6-7f98-4aec-83bc-ea90006f2715", "row_index": 389, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87fd1af6-7f98-4aec-83bc-ea90006f2715", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f57b190-c72f-453b-953c-2a83ae6ef36d", "record_id": "flaws_cloudtrail:0000390:4f57b190-c72f-453b-953c-2a83ae6ef36d", "row_index": 390, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f57b190-c72f-453b-953c-2a83ae6ef36d", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "record_id": "flaws_cloudtrail:0000391:54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "row_index": 391, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "record_id": "flaws_cloudtrail:0000392:d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "row_index": 392, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7dcfc0d-1782-4815-8910-ae947005a98c0", "record_id": "flaws_cloudtrail:0000393:f7dcfc0d-1782-4815-8910-ae947005a98c0", "row_index": 393, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7dcfc0d-1782-4815-8910-ae947005a98c0", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "record_id": "flaws_cloudtrail:0000394:3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "row_index": 394, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f411757-55f0-42e7-b076-37f3d65e7354", "record_id": "flaws_cloudtrail:0000395:4f411757-55f0-42e7-b076-37f3d65e7354", "row_index": 395, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f411757-55f0-42e7-b076-37f3d65e7354", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1da4aaea-6689-4c44-b27b-a4be43af8245", "record_id": "flaws_cloudtrail:0000396:1da4aaea-6689-4c44-b27b-a4be43af8245", "row_index": 396, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1da4aaea-6689-4c44-b27b-a4be43af8245", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4f2e81f-e327-4981-a770-034eb58746b", "record_id": "flaws_cloudtrail:0000397:e4f2e81f-e327-4981-a770-034eb58746b", "row_index": 397, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4f2e81f-e327-4981-a770-034eb58746b", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f15e869-0065-4733-bb30-2e0bcd7e57e7", "record_id": "flaws_cloudtrail:0000398:8f15e869-0065-4733-bb30-2e0bcd7e57e7", "row_index": 398, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f15e869-0065-4733-bb30-2e0bcd7e57e7", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416617fb8-ae17-485b-93e1-d05edbe19a82", "record_id": "flaws_cloudtrail:0000399:416617fb8-ae17-485b-93e1-d05edbe19a82", "row_index": 399, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416617fb8-ae17-485b-93e1-d05edbe19a82", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "record_id": "flaws_cloudtrail:0000400:18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "row_index": 400, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b0a23f-c0f3-4f83-9b4c-fa5bf5e4f63f", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf9d074-b486-415e-a54e-8d6de3a5976a", "record_id": "flaws_cloudtrail:0000401:baf9d074-b486-415e-a54e-8d6de3a5976a", "row_index": 401, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf9d074-b486-415e-a54e-8d6de3a5976a", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171a9ebb-fc7f-4996-b298-8471fbdc238b", "record_id": "flaws_cloudtrail:0000402:171a9ebb-fc7f-4996-b298-8471fbdc238b", "row_index": 402, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171a9ebb-fc7f-4996-b298-8471fbdc238b", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811a0cab-3adf-458d-bf63-0f6486e87e75", "record_id": "flaws_cloudtrail:0000403:811a0cab-3adf-458d-bf63-0f6486e87e75", "row_index": 403, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811a0cab-3adf-458d-bf63-0f6486e87e75", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "record_id": "flaws_cloudtrail:0000404:d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "row_index": 404, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fdc971-2ceb-4f9c-b3b2-932b1aa8e1f9", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "record_id": "flaws_cloudtrail:0000405:e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "row_index": 405, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4b3e287-6fd0-4760-8019-f13a1ccc7c17", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e328368-b86d-4846-beea-eb7206d9eab1", "record_id": "flaws_cloudtrail:0000406:e328368-b86d-4846-beea-eb7206d9eab1", "row_index": 406, "timestamp": "2019-08-21T14:52:46Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e328368-b86d-4846-beea-eb7206d9eab1", "eventTime": "2019-08-21T14:52:46Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87fd1af6-7f98-4aec-83bc-ea90006f2715", "record_id": "flaws_cloudtrail:0000407:87fd1af6-7f98-4aec-83bc-ea90006f2715", "row_index": 407, "timestamp": "2019-08-21T14:52:46Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87fd1af6-7f98-4aec-83bc-ea90006f2715", "eventTime": "2019-08-21T14:52:46Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f57b190-c72f-453b-953c-2a83ae6ef36d", "record_id": "flaws_cloudtrail:0000408:4f57b190-c72f-453b-953c-2a83ae6ef36d", "row_index": 408, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f57b190-c72f-453b-953c-2a83ae6ef36d", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "record_id": "flaws_cloudtrail:0000409:54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "row_index": 409, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54bbcb22-9539-43f6-9aa8-3fa1262e8a20", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "record_id": "flaws_cloudtrail:0000410:d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "row_index": 410, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e9f6ba-e643-43c2-8fd0-a9983bfc41e5", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7dcfc0d-1782-4815-8910-ae947005a98c0", "record_id": "flaws_cloudtrail:0000411:f7dcfc0d-1782-4815-8910-ae947005a98c0", "row_index": 411, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7dcfc0d-1782-4815-8910-ae947005a98c0", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "record_id": "flaws_cloudtrail:0000412:3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "row_index": 412, "timestamp": "2019-08-21T14:52:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a0fcd29-bc9e-4d9a-8d32-e339ff286057", "eventTime": "2019-08-21T14:52:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "record_id": "flaws_cloudtrail:0000413:3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "row_index": 413, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "record_id": "flaws_cloudtrail:0000414:2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "row_index": 414, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600687d12-f635-4902-904f-ed34016d34d0", "record_id": "flaws_cloudtrail:0000415:600687d12-f635-4902-904f-ed34016d34d0", "row_index": 415, "timestamp": "2019-08-21T14:52:47Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600687d12-f635-4902-904f-ed34016d34d0", "eventTime": "2019-08-21T14:52:47Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "record_id": "flaws_cloudtrail:0000416:0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "row_index": 416, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "record_id": "flaws_cloudtrail:0000417:3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "row_index": 417, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3454f8cc-2cfb-4c26-8dc2-4c75c4ba9a03", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "record_id": "flaws_cloudtrail:0000418:2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "row_index": 418, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b298ecb-8113-4c40-bf8c-42f3776e7bbb", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600687d12-f635-4902-904f-ed34016d34d0", "record_id": "flaws_cloudtrail:0000419:600687d12-f635-4902-904f-ed34016d34d0", "row_index": 419, "timestamp": "2019-08-21T14:52:47Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600687d12-f635-4902-904f-ed34016d34d0", "eventTime": "2019-08-21T14:52:47Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "record_id": "flaws_cloudtrail:0000420:0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "row_index": 420, "timestamp": "2019-08-21T14:52:47Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a9804ff-b3e4-43a6-84c0-2af184f6ec3a", "eventTime": "2019-08-21T14:52:47Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f2db99-41cc-492d-b01a-bc497bb82cf4", "record_id": "flaws_cloudtrail:0000421:46f2db99-41cc-492d-b01a-bc497bb82cf4", "row_index": 421, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f2db99-41cc-492d-b01a-bc497bb82cf4", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "record_id": "flaws_cloudtrail:0000422:3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "row_index": 422, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da980f06-9ead-46aa-92c2-b73f99187", "record_id": "flaws_cloudtrail:0000423:da980f06-9ead-46aa-92c2-b73f99187", "row_index": 423, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da980f06-9ead-46aa-92c2-b73f99187", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "record_id": "flaws_cloudtrail:0000424:f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "row_index": 424, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "record_id": "flaws_cloudtrail:0000425:6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "row_index": 425, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bcbf174-e4dd-41a9-9528-97935a4160e9", "record_id": "flaws_cloudtrail:0000426:8bcbf174-e4dd-41a9-9528-97935a4160e9", "row_index": 426, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bcbf174-e4dd-41a9-9528-97935a4160e9", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133f959b-a86c-4819-8ece-a027a260e642", "record_id": "flaws_cloudtrail:0000427:133f959b-a86c-4819-8ece-a027a260e642", "row_index": 427, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133f959b-a86c-4819-8ece-a027a260e642", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dce4057-f865-42ec-bf60-52e0ea0d3012", "record_id": "flaws_cloudtrail:0000428:5dce4057-f865-42ec-bf60-52e0ea0d3012", "row_index": 428, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dce4057-f865-42ec-bf60-52e0ea0d3012", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8fc30cd-07cd-4b6d-996c-182342b27180", "record_id": "flaws_cloudtrail:0000429:e8fc30cd-07cd-4b6d-996c-182342b27180", "row_index": 429, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8fc30cd-07cd-4b6d-996c-182342b27180", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfaca879-0778-4d7f-8899-e658033aef59", "record_id": "flaws_cloudtrail:0000430:dfaca879-0778-4d7f-8899-e658033aef59", "row_index": 430, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfaca879-0778-4d7f-8899-e658033aef59", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f2db99-41cc-492d-b01a-bc497bb82cf4", "record_id": "flaws_cloudtrail:0000431:46f2db99-41cc-492d-b01a-bc497bb82cf4", "row_index": 431, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f2db99-41cc-492d-b01a-bc497bb82cf4", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "record_id": "flaws_cloudtrail:0000432:3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "row_index": 432, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2d2b82-3a14-4ae8-a2ce-3aaa7bfcf5d7", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da980f06-9ead-46aa-92c2-b73f99187", "record_id": "flaws_cloudtrail:0000433:da980f06-9ead-46aa-92c2-b73f99187", "row_index": 433, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da980f06-9ead-46aa-92c2-b73f99187", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "record_id": "flaws_cloudtrail:0000434:f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "row_index": 434, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f827ccad-90b4-4a7b-91c2-3d4b7de6eb22", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "record_id": "flaws_cloudtrail:0000435:6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "row_index": 435, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f024e42-1e0a-48c6-8b04-5ff4b4047c2b", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bcbf174-e4dd-41a9-9528-97935a4160e9", "record_id": "flaws_cloudtrail:0000436:8bcbf174-e4dd-41a9-9528-97935a4160e9", "row_index": 436, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bcbf174-e4dd-41a9-9528-97935a4160e9", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133f959b-a86c-4819-8ece-a027a260e642", "record_id": "flaws_cloudtrail:0000437:133f959b-a86c-4819-8ece-a027a260e642", "row_index": 437, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133f959b-a86c-4819-8ece-a027a260e642", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dce4057-f865-42ec-bf60-52e0ea0d3012", "record_id": "flaws_cloudtrail:0000438:5dce4057-f865-42ec-bf60-52e0ea0d3012", "row_index": 438, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dce4057-f865-42ec-bf60-52e0ea0d3012", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8fc30cd-07cd-4b6d-996c-182342b27180", "record_id": "flaws_cloudtrail:0000439:e8fc30cd-07cd-4b6d-996c-182342b27180", "row_index": 439, "timestamp": "2019-08-21T14:52:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8fc30cd-07cd-4b6d-996c-182342b27180", "eventTime": "2019-08-21T14:52:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfaca879-0778-4d7f-8899-e658033aef59", "record_id": "flaws_cloudtrail:0000440:dfaca879-0778-4d7f-8899-e658033aef59", "row_index": 440, "timestamp": "2019-08-21T14:52:48Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfaca879-0778-4d7f-8899-e658033aef59", "eventTime": "2019-08-21T14:52:48Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560ff81b-7d50-48f2-bd62-253725c48d53", "record_id": "flaws_cloudtrail:0000441:560ff81b-7d50-48f2-bd62-253725c48d53", "row_index": 441, "timestamp": "2019-08-21T14:52:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560ff81b-7d50-48f2-bd62-253725c48d53", "eventTime": "2019-08-21T14:52:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "record_id": "flaws_cloudtrail:0000442:d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "row_index": 442, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5587f4ef-ad2a-40b3-a217-65858f8674b1", "record_id": "flaws_cloudtrail:0000443:5587f4ef-ad2a-40b3-a217-65858f8674b1", "row_index": 443, "timestamp": "2019-08-21T14:52:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5587f4ef-ad2a-40b3-a217-65858f8674b1", "eventTime": "2019-08-21T14:52:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "record_id": "flaws_cloudtrail:0000444:21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "row_index": 444, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29629d81-d5e5-4d6d-9817-efbf6bf3938a", "record_id": "flaws_cloudtrail:0000445:29629d81-d5e5-4d6d-9817-efbf6bf3938a", "row_index": 445, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29629d81-d5e5-4d6d-9817-efbf6bf3938a", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f518581a-dfef-4070-ab52-9fd8708af9f0", "record_id": "flaws_cloudtrail:0000446:9f518581a-dfef-4070-ab52-9fd8708af9f0", "row_index": 446, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f518581a-dfef-4070-ab52-9fd8708af9f0", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b11d6fd9-f700-4b72-ad5b-dff87def0141", "record_id": "flaws_cloudtrail:0000447:b11d6fd9-f700-4b72-ad5b-dff87def0141", "row_index": 447, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b11d6fd9-f700-4b72-ad5b-dff87def0141", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0341f3-3448-429f-83cc-5a6ce5fa772e", "record_id": "flaws_cloudtrail:0000448:ab0341f3-3448-429f-83cc-5a6ce5fa772e", "row_index": 448, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0341f3-3448-429f-83cc-5a6ce5fa772e", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560ff81b-7d50-48f2-bd62-253725c48d53", "record_id": "flaws_cloudtrail:0000449:560ff81b-7d50-48f2-bd62-253725c48d53", "row_index": 449, "timestamp": "2019-08-21T14:52:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560ff81b-7d50-48f2-bd62-253725c48d53", "eventTime": "2019-08-21T14:52:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "record_id": "flaws_cloudtrail:0000450:d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "row_index": 450, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c2ebb3-d967-4ea5-b6c3-4e75ebe2674c", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5587f4ef-ad2a-40b3-a217-65858f8674b1", "record_id": "flaws_cloudtrail:0000451:5587f4ef-ad2a-40b3-a217-65858f8674b1", "row_index": 451, "timestamp": "2019-08-21T14:52:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5587f4ef-ad2a-40b3-a217-65858f8674b1", "eventTime": "2019-08-21T14:52:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "record_id": "flaws_cloudtrail:0000452:21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "row_index": 452, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f807077-c1f1-4b1d-bd21-cb2ad9c549bb", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29629d81-d5e5-4d6d-9817-efbf6bf3938a", "record_id": "flaws_cloudtrail:0000453:29629d81-d5e5-4d6d-9817-efbf6bf3938a", "row_index": 453, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29629d81-d5e5-4d6d-9817-efbf6bf3938a", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f518581a-dfef-4070-ab52-9fd8708af9f0", "record_id": "flaws_cloudtrail:0000454:9f518581a-dfef-4070-ab52-9fd8708af9f0", "row_index": 454, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f518581a-dfef-4070-ab52-9fd8708af9f0", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b11d6fd9-f700-4b72-ad5b-dff87def0141", "record_id": "flaws_cloudtrail:0000455:b11d6fd9-f700-4b72-ad5b-dff87def0141", "row_index": 455, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b11d6fd9-f700-4b72-ad5b-dff87def0141", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0341f3-3448-429f-83cc-5a6ce5fa772e", "record_id": "flaws_cloudtrail:0000456:ab0341f3-3448-429f-83cc-5a6ce5fa772e", "row_index": 456, "timestamp": "2019-08-21T14:52:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0341f3-3448-429f-83cc-5a6ce5fa772e", "eventTime": "2019-08-21T14:52:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "record_id": "flaws_cloudtrail:0000457:fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "row_index": 457, "timestamp": "2019-08-21T14:52:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "eventTime": "2019-08-21T14:52:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "502e5abb-4ef4-483a-a673-4c279bbe399b", "record_id": "flaws_cloudtrail:0000458:502e5abb-4ef4-483a-a673-4c279bbe399b", "row_index": 458, "timestamp": "2019-08-21T14:52:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "502e5abb-4ef4-483a-a673-4c279bbe399b", "eventTime": "2019-08-21T14:52:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32313b-f785-4e23-bf93-bbe2393cb1d6", "record_id": "flaws_cloudtrail:0000459:32313b-f785-4e23-bf93-bbe2393cb1d6", "row_index": 459, "timestamp": "2019-08-21T14:52:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32313b-f785-4e23-bf93-bbe2393cb1d6", "eventTime": "2019-08-21T14:52:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "record_id": "flaws_cloudtrail:0000460:fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "row_index": 460, "timestamp": "2019-08-21T14:52:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd4654ae-bbce-4dc2-8bf6-9dccf2bb560e", "eventTime": "2019-08-21T14:52:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "502e5abb-4ef4-483a-a673-4c279bbe399b", "record_id": "flaws_cloudtrail:0000461:502e5abb-4ef4-483a-a673-4c279bbe399b", "row_index": 461, "timestamp": "2019-08-21T14:52:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "502e5abb-4ef4-483a-a673-4c279bbe399b", "eventTime": "2019-08-21T14:52:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32313b-f785-4e23-bf93-bbe2393cb1d6", "record_id": "flaws_cloudtrail:0000462:32313b-f785-4e23-bf93-bbe2393cb1d6", "row_index": 462, "timestamp": "2019-08-21T14:52:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32313b-f785-4e23-bf93-bbe2393cb1d6", "eventTime": "2019-08-21T14:52:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "record_id": "flaws_cloudtrail:0000463:4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "row_index": 463, "timestamp": "2019-08-21T14:52:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "eventTime": "2019-08-21T14:52:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee83237-f88d-4c84-9f1b-c3e59c66ea82", "record_id": "flaws_cloudtrail:0000464:ee83237-f88d-4c84-9f1b-c3e59c66ea82", "row_index": 464, "timestamp": "2019-08-21T14:52:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee83237-f88d-4c84-9f1b-c3e59c66ea82", "eventTime": "2019-08-21T14:52:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "record_id": "flaws_cloudtrail:0000465:4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "row_index": 465, "timestamp": "2019-08-21T14:52:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aa0fe7f-62f1-44f8-b6a2-7c5dc17cab92", "eventTime": "2019-08-21T14:52:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee83237-f88d-4c84-9f1b-c3e59c66ea82", "record_id": "flaws_cloudtrail:0000466:ee83237-f88d-4c84-9f1b-c3e59c66ea82", "row_index": 466, "timestamp": "2019-08-21T14:52:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee83237-f88d-4c84-9f1b-c3e59c66ea82", "eventTime": "2019-08-21T14:52:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67081-208e-4063-a0fd-af428e1cee51", "record_id": "flaws_cloudtrail:0000467:67081-208e-4063-a0fd-af428e1cee51", "row_index": 467, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1394, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67081-208e-4063-a0fd-af428e1cee51", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88d46f9f-c2ec-4928-9fc2-2f92ad94416", "record_id": "flaws_cloudtrail:0000468:88d46f9f-c2ec-4928-9fc2-2f92ad94416", "row_index": 468, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88d46f9f-c2ec-4928-9fc2-2f92ad94416", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OrsKJjLHdP0xG1iRVRxFLW_xa2kcH500-NwLPp3_l1ouNIVet07Rafn1H_wAZwA-ljzFOmk8qgNPlUjG79c-7t9_wP54ZxE7YpXn_uZtBNrsoa7QG21_uPG6q0N_MeO1yu2PfdnxW-weVOCSvJeFXCCYDQTpmIqqExmIjtC0ub4YM2nf9S7lCAH39hWOK036CQDf8l2O7_YqU0xP2h_ryHIsbE8CBM1i1CQjMTOQZIjPQKsK3wrPzJVUSQMb7UmaraLb0MXgvcbq4BD1erfypm-sTNKpaWTUrhtwSOrkBlSHjbMr7s1yvqhhQFazczWu9GsshmPgspazWjMnx7OPofgUA-qRxi7ZJksKDNRDKdCTVE1nVGBGZEEXjAxWHdviu9G7wMCaNqsF6fJFR_OS9b4sVQKzmksIULF1dNTmpnG4mrcOlqIhIG4eamKggn6ndrtLqI4YyUn6DKyISuN-htC-tsI1VfTmG1CkyuX7XG6O0V4_0jk4MPYatiVZ0Ihr5Ylfi0uyzQ4FLLRwDZKK759fko7CRd3Skw41mXfVIAldCLg9ZsoemRmTXqidrw5Exr8s4ejjwm8ScvO16zKFrfdPCKW4wciPV3PpcEPf5rKs5sk-hHpGsQ9DRikV35HBjlKDnfPsE1RtSYS0b2OpacHXqNLrh1G9VvK2OS3a", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446635-c42d-4339-b9af-82f7a738022c", "record_id": "flaws_cloudtrail:0000469:446635-c42d-4339-b9af-82f7a738022c", "row_index": 469, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1395, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446635-c42d-4339-b9af-82f7a738022c", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a530e1de-055a-4891-9303-530669cad6fa", "record_id": "flaws_cloudtrail:0000470:a530e1de-055a-4891-9303-530669cad6fa", "row_index": 470, "timestamp": "2019-08-21T14:52:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a530e1de-055a-4891-9303-530669cad6fa", "eventTime": "2019-08-21T14:52:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67081-208e-4063-a0fd-af428e1cee51", "record_id": "flaws_cloudtrail:0000471:67081-208e-4063-a0fd-af428e1cee51", "row_index": 471, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1394, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67081-208e-4063-a0fd-af428e1cee51", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88d46f9f-c2ec-4928-9fc2-2f92ad94416", "record_id": "flaws_cloudtrail:0000472:88d46f9f-c2ec-4928-9fc2-2f92ad94416", "row_index": 472, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88d46f9f-c2ec-4928-9fc2-2f92ad94416", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OrsKJjLHdP0xG1iRVRxFLW_xa2kcH500-NwLPp3_l1ouNIVet07Rafn1H_wAZwA-ljzFOmk8qgNPlUjG79c-7t9_wP54ZxE7YpXn_uZtBNrsoa7QG21_uPG6q0N_MeO1yu2PfdnxW-weVOCSvJeFXCCYDQTpmIqqExmIjtC0ub4YM2nf9S7lCAH39hWOK036CQDf8l2O7_YqU0xP2h_ryHIsbE8CBM1i1CQjMTOQZIjPQKsK3wrPzJVUSQMb7UmaraLb0MXgvcbq4BD1erfypm-sTNKpaWTUrhtwSOrkBlSHjbMr7s1yvqhhQFazczWu9GsshmPgspazWjMnx7OPofgUA-qRxi7ZJksKDNRDKdCTVE1nVGBGZEEXjAxWHdviu9G7wMCaNqsF6fJFR_OS9b4sVQKzmksIULF1dNTmpnG4mrcOlqIhIG4eamKggn6ndrtLqI4YyUn6DKyISuN-htC-tsI1VfTmG1CkyuX7XG6O0V4_0jk4MPYatiVZ0Ihr5Ylfi0uyzQ4FLLRwDZKK759fko7CRd3Skw41mXfVIAldCLg9ZsoemRmTXqidrw5Exr8s4ejjwm8ScvO16zKFrfdPCKW4wciPV3PpcEPf5rKs5sk-hHpGsQ9DRikV35HBjlKDnfPsE1RtSYS0b2OpacHXqNLrh1G9VvK2OS3a", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446635-c42d-4339-b9af-82f7a738022c", "record_id": "flaws_cloudtrail:0000473:446635-c42d-4339-b9af-82f7a738022c", "row_index": 473, "timestamp": "2019-08-21T14:52:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1395, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446635-c42d-4339-b9af-82f7a738022c", "eventTime": "2019-08-21T14:52:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a530e1de-055a-4891-9303-530669cad6fa", "record_id": "flaws_cloudtrail:0000474:a530e1de-055a-4891-9303-530669cad6fa", "row_index": 474, "timestamp": "2019-08-21T14:52:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a530e1de-055a-4891-9303-530669cad6fa", "eventTime": "2019-08-21T14:52:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbc9b35-0088-4583-b20c-81ae98b6289e", "record_id": "flaws_cloudtrail:0000475:9cbc9b35-0088-4583-b20c-81ae98b6289e", "row_index": 475, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbc9b35-0088-4583-b20c-81ae98b6289e", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "record_id": "flaws_cloudtrail:0000476:c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "row_index": 476, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dK1Amw9gRw77VGXD9thWYod_QLS926Uw8OkJdnvyrv1gGzi5x6A8wVQxerAUPVErsZYVgNpvA7xdyZDGYTloF-CgbDV_dqywaPz_P9-qfEMUMfZDRR9kSo53MKqXu9hxpu8vyKLlBd6mAy2Rtn194vVE6XqYVvp66INEabEmLLaYEJ-yt-gXMEA-lTasP-cjbg_IABqutXBK4C-JTWuT8IoXmXkNIGRn0zof66ZAsPPluDJlAcOKM0l3X6D5exutHH7gOkYl-JOjFW85B9Z1aMkzxhf90M7EoBLJDltg26bUN5GgOc3O3KjaAEmFVc5NR2GYQbbdeDe1rju9_aEvEzrjTbLV-MeoK3rAjZ5bKcKJhIGTqKvQcvI14dDDx6LpL8HJ8496CnIQTvMOfcUxoyWfw2_D8U4M0e4xkRU6hSGjfhOQ7S-wqZ6Y4yB-9MLBvFkf5Fgp8qJ7NQvvNPs05g-nArETIGK5tBaHtNFFWkrJ1eL84rI_EHu2hKjwS4_GWWI76SBJcqZCkPwZaoj0SiNcfyS9u-MSW3vATzxmR_srTfEnxN37wDul0zF0IP_xKCTdpwHEawj8C_xYzxmSen74AODFNUf9XMnMljtWCjRYQov9P7MLRu2JNOAkPsdUzYrHmv1bmgYxS7elZ8_h9wUn8wKXo37BVLmjWPFU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "900de0d1-2850-4012-8a4a-8857c9115bfb", "record_id": "flaws_cloudtrail:0000477:900de0d1-2850-4012-8a4a-8857c9115bfb", "row_index": 477, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "900de0d1-2850-4012-8a4a-8857c9115bfb", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "record_id": "flaws_cloudtrail:0000478:003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "row_index": 478, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b80d74-06ce-4fdb-b5b1-aa767405a342", "record_id": "flaws_cloudtrail:0000479:29b80d74-06ce-4fdb-b5b1-aa767405a342", "row_index": 479, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b80d74-06ce-4fdb-b5b1-aa767405a342", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9grQVMm1YSvbkAQOMINV8wc-pAm09iZbqcp6LO24qMAenBMR2WTRicpskUAfr0pR0ho8v-xERXs9yUW-Z29a0S7fYPr3K_PQe0QvjrhFHa-RXjRAlQcPzkOq2GiNCOdPEQaHl3v8n1Th5Bg6ecgt8eQvZCaOp07KLZWk8NvYb6UWLdzZMiSfXUJDGfa0qxqUTVW71ah_x7vlvHD_0KbBG4kmkkdc7q-Jkh5eGVTIzn8NNHHmiA2_12xpWnvY974_xL9soPsmitIzi4gr8nBryptCvlW4IIdmJfJXiy3eLmelhVGNJhphwM6h9Nkw3k9_BkS7eMh6L_9WFfXdZgN6FJoZg1m_0Px1Nnf-IvtCebmgzJr8ne4Cw_-1kAB9ajRv5d9TWGlkjenKpV3Kx471ShKNiI_1JuwnYe0DNlTx481eLtAGtVJtbov9u_ioXj2bZ5VwObBZ6LBIpsabm9xM2NOwKY_wWvCjzf1ek-mIZSVUytTQpPRSfMzkyR-C3PQu8Rnap0MBr0Q0CnGU7FJx9u-4RneGqFwvJ0bd0l7KPYna6Nv_kZiobrtASDUWIe-ph3UlmsdIfR2_9gW128FtM_l8c2-NV6v4jUn4gHI9FOr_JbilNCmAmSxaqJE-fASW8TPqkoHgGd05Ic_N83T3V_si3eRkSWHTD7V_dSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f075aa76-b3c5-453d-890e-4c92d28fa46d", "record_id": "flaws_cloudtrail:0000480:f075aa76-b3c5-453d-890e-4c92d28fa46d", "row_index": 480, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f075aa76-b3c5-453d-890e-4c92d28fa46d", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: oaqSjP4UIVHvvOKT-AzO9lGG42deNhDTFrMGkDCC5QeV4WvLPI_kSi5tGoz6dEMxlCVm8yr88KxEXhV-w1TZlqw8UahZIHuBo3H7zfz2sjd9V-KIraEBx5kUoesPzye6YsRwj-rH7tYup6WxdRBcwJ0c3w4E2ZgQWSrsYnxSK-NztZRta1o2aGyLLt4PCaQKUnlHExQqOGuE9v7BjFNFA-0-ztziYygM_pavjP4Zcgicj_h5blix1tQ-mUbODgYaczh5iCJbgRlRKqdwEUnXWkZfH-O1T6B7WsBTww8aZQelAjQaulGA490ouG131ctXWV_jnzE_TXz_DA6Etm2j9OCgamps50Pzun7o2GL8W97Z5SzJ8f9PbXznngjsRLtSqS61pkzDHdsj5Rv4psunuGj0rjKaA2YwUpaRPgK_M0Kn0_WmOUITyWuIQSpxXy84m3-YyjciECsG92nNXdiOp7yr9p4rdPs_dLbrbHeh2MrJJ9ub2CMdRhV8sXAFVNKIuz8YIskuE1GKZucjnM_w72ZVKJewiu80hvNHoPmClRPdxZdEZmAw4XwArrf7ObOABXDp1N7SKX_Qgiw1INqFAfTw-4Ei23KoYv9vQ5SxFY_-hHUKrkze8NJhBXnvsvcX9qqrH96FKfFAFn7tux40IlNCZSHD4TbLxQ57Sw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c8ee820-379e-4392-a0b5-492fba0806e9", "record_id": "flaws_cloudtrail:0000481:5c8ee820-379e-4392-a0b5-492fba0806e9", "row_index": 481, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c8ee820-379e-4392-a0b5-492fba0806e9", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "record_id": "flaws_cloudtrail:0000482:ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "row_index": 482, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9740e7d1-9618-41a3-b953-0c483b71e981", "record_id": "flaws_cloudtrail:0000483:9740e7d1-9618-41a3-b953-0c483b71e981", "row_index": 483, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9740e7d1-9618-41a3-b953-0c483b71e981", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "record_id": "flaws_cloudtrail:0000484:0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "row_index": 484, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbc9b35-0088-4583-b20c-81ae98b6289e", "record_id": "flaws_cloudtrail:0000485:9cbc9b35-0088-4583-b20c-81ae98b6289e", "row_index": 485, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbc9b35-0088-4583-b20c-81ae98b6289e", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "record_id": "flaws_cloudtrail:0000486:c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "row_index": 486, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d3b0f6-3498-4dee-bcd3-dc7710bb3e53", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dK1Amw9gRw77VGXD9thWYod_QLS926Uw8OkJdnvyrv1gGzi5x6A8wVQxerAUPVErsZYVgNpvA7xdyZDGYTloF-CgbDV_dqywaPz_P9-qfEMUMfZDRR9kSo53MKqXu9hxpu8vyKLlBd6mAy2Rtn194vVE6XqYVvp66INEabEmLLaYEJ-yt-gXMEA-lTasP-cjbg_IABqutXBK4C-JTWuT8IoXmXkNIGRn0zof66ZAsPPluDJlAcOKM0l3X6D5exutHH7gOkYl-JOjFW85B9Z1aMkzxhf90M7EoBLJDltg26bUN5GgOc3O3KjaAEmFVc5NR2GYQbbdeDe1rju9_aEvEzrjTbLV-MeoK3rAjZ5bKcKJhIGTqKvQcvI14dDDx6LpL8HJ8496CnIQTvMOfcUxoyWfw2_D8U4M0e4xkRU6hSGjfhOQ7S-wqZ6Y4yB-9MLBvFkf5Fgp8qJ7NQvvNPs05g-nArETIGK5tBaHtNFFWkrJ1eL84rI_EHu2hKjwS4_GWWI76SBJcqZCkPwZaoj0SiNcfyS9u-MSW3vATzxmR_srTfEnxN37wDul0zF0IP_xKCTdpwHEawj8C_xYzxmSen74AODFNUf9XMnMljtWCjRYQov9P7MLRu2JNOAkPsdUzYrHmv1bmgYxS7elZ8_h9wUn8wKXo37BVLmjWPFU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "900de0d1-2850-4012-8a4a-8857c9115bfb", "record_id": "flaws_cloudtrail:0000487:900de0d1-2850-4012-8a4a-8857c9115bfb", "row_index": 487, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "900de0d1-2850-4012-8a4a-8857c9115bfb", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "record_id": "flaws_cloudtrail:0000488:003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "row_index": 488, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003a4b3f-c9b2-4e53-9f1c-a7bc55ebd8e3", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b80d74-06ce-4fdb-b5b1-aa767405a342", "record_id": "flaws_cloudtrail:0000489:29b80d74-06ce-4fdb-b5b1-aa767405a342", "row_index": 489, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b80d74-06ce-4fdb-b5b1-aa767405a342", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9grQVMm1YSvbkAQOMINV8wc-pAm09iZbqcp6LO24qMAenBMR2WTRicpskUAfr0pR0ho8v-xERXs9yUW-Z29a0S7fYPr3K_PQe0QvjrhFHa-RXjRAlQcPzkOq2GiNCOdPEQaHl3v8n1Th5Bg6ecgt8eQvZCaOp07KLZWk8NvYb6UWLdzZMiSfXUJDGfa0qxqUTVW71ah_x7vlvHD_0KbBG4kmkkdc7q-Jkh5eGVTIzn8NNHHmiA2_12xpWnvY974_xL9soPsmitIzi4gr8nBryptCvlW4IIdmJfJXiy3eLmelhVGNJhphwM6h9Nkw3k9_BkS7eMh6L_9WFfXdZgN6FJoZg1m_0Px1Nnf-IvtCebmgzJr8ne4Cw_-1kAB9ajRv5d9TWGlkjenKpV3Kx471ShKNiI_1JuwnYe0DNlTx481eLtAGtVJtbov9u_ioXj2bZ5VwObBZ6LBIpsabm9xM2NOwKY_wWvCjzf1ek-mIZSVUytTQpPRSfMzkyR-C3PQu8Rnap0MBr0Q0CnGU7FJx9u-4RneGqFwvJ0bd0l7KPYna6Nv_kZiobrtASDUWIe-ph3UlmsdIfR2_9gW128FtM_l8c2-NV6v4jUn4gHI9FOr_JbilNCmAmSxaqJE-fASW8TPqkoHgGd05Ic_N83T3V_si3eRkSWHTD7V_dSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f075aa76-b3c5-453d-890e-4c92d28fa46d", "record_id": "flaws_cloudtrail:0000490:f075aa76-b3c5-453d-890e-4c92d28fa46d", "row_index": 490, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f075aa76-b3c5-453d-890e-4c92d28fa46d", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: oaqSjP4UIVHvvOKT-AzO9lGG42deNhDTFrMGkDCC5QeV4WvLPI_kSi5tGoz6dEMxlCVm8yr88KxEXhV-w1TZlqw8UahZIHuBo3H7zfz2sjd9V-KIraEBx5kUoesPzye6YsRwj-rH7tYup6WxdRBcwJ0c3w4E2ZgQWSrsYnxSK-NztZRta1o2aGyLLt4PCaQKUnlHExQqOGuE9v7BjFNFA-0-ztziYygM_pavjP4Zcgicj_h5blix1tQ-mUbODgYaczh5iCJbgRlRKqdwEUnXWkZfH-O1T6B7WsBTww8aZQelAjQaulGA490ouG131ctXWV_jnzE_TXz_DA6Etm2j9OCgamps50Pzun7o2GL8W97Z5SzJ8f9PbXznngjsRLtSqS61pkzDHdsj5Rv4psunuGj0rjKaA2YwUpaRPgK_M0Kn0_WmOUITyWuIQSpxXy84m3-YyjciECsG92nNXdiOp7yr9p4rdPs_dLbrbHeh2MrJJ9ub2CMdRhV8sXAFVNKIuz8YIskuE1GKZucjnM_w72ZVKJewiu80hvNHoPmClRPdxZdEZmAw4XwArrf7ObOABXDp1N7SKX_Qgiw1INqFAfTw-4Ei23KoYv9vQ5SxFY_-hHUKrkze8NJhBXnvsvcX9qqrH96FKfFAFn7tux40IlNCZSHD4TbLxQ57Sw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c8ee820-379e-4392-a0b5-492fba0806e9", "record_id": "flaws_cloudtrail:0000491:5c8ee820-379e-4392-a0b5-492fba0806e9", "row_index": 491, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c8ee820-379e-4392-a0b5-492fba0806e9", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "record_id": "flaws_cloudtrail:0000492:ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "row_index": 492, "timestamp": "2019-08-21T14:52:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ce5d4-ebf8-4b74-8bf5-c817643adc03", "eventTime": "2019-08-21T14:52:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9740e7d1-9618-41a3-b953-0c483b71e981", "record_id": "flaws_cloudtrail:0000493:9740e7d1-9618-41a3-b953-0c483b71e981", "row_index": 493, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9740e7d1-9618-41a3-b953-0c483b71e981", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "record_id": "flaws_cloudtrail:0000494:0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "row_index": 494, "timestamp": "2019-08-21T14:52:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab43701-72d1-4fd6-8c41-4d93ec01d7c5", "eventTime": "2019-08-21T14:52:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29e162d1-b004-421f-b1ab-782398a046f5", "record_id": "flaws_cloudtrail:0000495:29e162d1-b004-421f-b1ab-782398a046f5", "row_index": 495, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29e162d1-b004-421f-b1ab-782398a046f5", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "record_id": "flaws_cloudtrail:0000496:cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "row_index": 496, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zp_krWerI_8lZ-mYMPjYRZMNsJPMR82gEj5gd7YPMteiLOfcxWntwcbnQG2JbdwUiG4nnWa1tXfs4WSv-0aMXGK7Sg9YFnruPnrLeUfrV4p8-pwL66L6NxA_SEu8y9i440vzJoJWVpPg0I6FxG5p8GBkkoCIxCOGq-VBDoBJ2MC_hQj3B5vIWOwQDNgtGGwcKVZUo-K2PyFcfP5DsYMAXLlwnApr4psq14AYjTFV1P19HItqw3e9sfubPYK8_ZKFmpe_EnUH9l3Y3fnmX3EycVL-k-QOXMN4OqIdQyDlCtxJ6OnhEWCJTat1ou-4gMoz7lak3vHemx0yq9QnXTu8qWldZc0Lhu_fvADdvcat_31qN7VzKpTg5VGLhWTVUonNkwuSKF8zVMhplRUwq7A0mCuL_NML9Q4TGdxPajN7vgNT7D3WbKJgWU-I2CO33Rlr3hOIUkfnfPOQkfUaAdRQZC8fx35CoBv2Yy7o4vpyWp0xk_XcF8C609USDV0V8B14yd4JBlsudgVXbnA8zL_elJcHsEaMtlv5qO0b2SjM81kvcGP1x3jnY3m_Fqf68GUH3finYrKqlNbHu8-5kF7ce5q6oI3_uVZFHMjV7mblLVeOzF0z0NRt5hFiu5meFGMR6i5JK1TpoI1I_IvWfYuIkltI0ShyZnNL1L9p97Ii", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056cb506-36c9-4950-92a1-aab8d1cbf69f", "record_id": "flaws_cloudtrail:0000497:056cb506-36c9-4950-92a1-aab8d1cbf69f", "row_index": 497, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056cb506-36c9-4950-92a1-aab8d1cbf69f", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed32532-c519-43bd-9ad1-20be1519b59f", "record_id": "flaws_cloudtrail:0000498:ed32532-c519-43bd-9ad1-20be1519b59f", "row_index": 498, "timestamp": "2019-08-21T14:52:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed32532-c519-43bd-9ad1-20be1519b59f", "eventTime": "2019-08-21T14:52:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "record_id": "flaws_cloudtrail:0000499:2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "row_index": 499, "timestamp": "2019-08-21T14:52:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "eventTime": "2019-08-21T14:52:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29e162d1-b004-421f-b1ab-782398a046f5", "record_id": "flaws_cloudtrail:0000500:29e162d1-b004-421f-b1ab-782398a046f5", "row_index": 500, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29e162d1-b004-421f-b1ab-782398a046f5", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "record_id": "flaws_cloudtrail:0000501:cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "row_index": 501, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb4bd60d-fc35-4a8b-98b2-7e0ddfe320dc", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zp_krWerI_8lZ-mYMPjYRZMNsJPMR82gEj5gd7YPMteiLOfcxWntwcbnQG2JbdwUiG4nnWa1tXfs4WSv-0aMXGK7Sg9YFnruPnrLeUfrV4p8-pwL66L6NxA_SEu8y9i440vzJoJWVpPg0I6FxG5p8GBkkoCIxCOGq-VBDoBJ2MC_hQj3B5vIWOwQDNgtGGwcKVZUo-K2PyFcfP5DsYMAXLlwnApr4psq14AYjTFV1P19HItqw3e9sfubPYK8_ZKFmpe_EnUH9l3Y3fnmX3EycVL-k-QOXMN4OqIdQyDlCtxJ6OnhEWCJTat1ou-4gMoz7lak3vHemx0yq9QnXTu8qWldZc0Lhu_fvADdvcat_31qN7VzKpTg5VGLhWTVUonNkwuSKF8zVMhplRUwq7A0mCuL_NML9Q4TGdxPajN7vgNT7D3WbKJgWU-I2CO33Rlr3hOIUkfnfPOQkfUaAdRQZC8fx35CoBv2Yy7o4vpyWp0xk_XcF8C609USDV0V8B14yd4JBlsudgVXbnA8zL_elJcHsEaMtlv5qO0b2SjM81kvcGP1x3jnY3m_Fqf68GUH3finYrKqlNbHu8-5kF7ce5q6oI3_uVZFHMjV7mblLVeOzF0z0NRt5hFiu5meFGMR6i5JK1TpoI1I_IvWfYuIkltI0ShyZnNL1L9p97Ii", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056cb506-36c9-4950-92a1-aab8d1cbf69f", "record_id": "flaws_cloudtrail:0000502:056cb506-36c9-4950-92a1-aab8d1cbf69f", "row_index": 502, "timestamp": "2019-08-21T14:52:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056cb506-36c9-4950-92a1-aab8d1cbf69f", "eventTime": "2019-08-21T14:52:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed32532-c519-43bd-9ad1-20be1519b59f", "record_id": "flaws_cloudtrail:0000503:ed32532-c519-43bd-9ad1-20be1519b59f", "row_index": 503, "timestamp": "2019-08-21T14:52:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed32532-c519-43bd-9ad1-20be1519b59f", "eventTime": "2019-08-21T14:52:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "record_id": "flaws_cloudtrail:0000504:2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "row_index": 504, "timestamp": "2019-08-21T14:52:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1fde43-600f-4b4b-bd36-f24d4b0b3d04", "eventTime": "2019-08-21T14:52:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51f55a8-e376-4932-9a7a-9413fe2112f4", "record_id": "flaws_cloudtrail:0000505:a51f55a8-e376-4932-9a7a-9413fe2112f4", "row_index": 505, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51f55a8-e376-4932-9a7a-9413fe2112f4", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20629-28a5-49b0-ae46-71c58fc09500", "record_id": "flaws_cloudtrail:0000506:d20629-28a5-49b0-ae46-71c58fc09500", "row_index": 506, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20629-28a5-49b0-ae46-71c58fc09500", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AH3sjelKRUcPOJgmigF3YZk-uIUq3acgz8d59FYb1lp2sj6TjVmu4QlVfN3sXP35-ly4zmpOXvj5S4gxDGo6uh4A5ma_CdCQAWCglhxS3SE_ppAFIkhtua4AZsKkewXyqcdM9rM3HjY_dWHRmR-tI6sK_Dl5IcW59Aiapv-VL6bzGpRx46l6Npwzr5NCZU-JTKzGryFZqau0rCoy7_a_WJYSwTUVgk1KPzVx4whP86XqPajjW_nToqq5-nwBp4yLXZwxEPnC2oF44a9TuYbB4cO9rUSjVVMX3U5raaMFuBvuEtuMh6QXcxZdsWULuTn3xGUur8K4RYo8HBBUplESmKOXsq2ipEiJQa-saSB-EaP72gWCYoSic_Mfon2M0c8ckUCn1uY0x0P2ouqVS6bE69_VWEDcVWB0lMVnRjgZLQb7aNvDaFfheSekpkMJZ6gmfjVyZunnt3369METXnrMxJsjZLigqfCabWUcUR0tH_1KTVtBf7ou-ZEb4jzWaomX1NcBH40QkKhRC1J482dzpCOCQwpo5cK1omI4biP9TKAMIaxHd7GnOmvAXoH1zPy3WD5xFuxVZAvLMAK8o7e1LpLGI8Qs_ZFFjOqvr2PslblWu2BZJgT77ASNXH3f3-NJIUL9IRN3TaJT7R4XSqLppdToEjcg61Tg-1IGeUk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7918d16-751d-4a6e-8b33-282d43b423d3", "record_id": "flaws_cloudtrail:0000507:a7918d16-751d-4a6e-8b33-282d43b423d3", "row_index": 507, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1853, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7918d16-751d-4a6e-8b33-282d43b423d3", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LEharRFixfbkO7V2Dp0KbwrNYk6bEf5LW9EGlWLF9z6lvC1urQKV5v4QZSrqjNobXc_MzLobFNFCAAcs-1Pv-NFTT1k5c3lRkqYFS3w1ankPSd0NtUTovtQ8WhgFHfPD25De0TCD4Eg56bjC8aTSXVRvbzlK1ey1kbzTUrpxTjQQFgqhfSV1Ywz6mntNaPQZzBzIt-2r7ZH7TwpYfp0X4y1OojrrS71rZ3fafdb7sSTsobs94lfyJ18L8XwcEq_jz7JgcUnaY_w1SACn4nMlIB5dLe0Pf9qJfgaXNac-R-FbU_Z_SgC_GoAoc38MrCATwndSy1MCPXKNsUOBSH05weiMBEEU5vFS2Lx80LdYBLlQPuc2rg3uFjDUubJ5184qw5r191Jlkl8p1ZykEi-w4UPSFAUsswcFcGbugOQDa50hVbIHqqv4hGHp5-JRTGGEqvJo9Iee3Yz0xKRK4FDxOCyPnnbvNS0BdtqaQyJLdMkUdb5x7QnqOVoGVFT49ioGAUo_FxXGV9hcRTBvdik07t8QGnRphUiMGNnSlpg37I0qubIG2r8wj7_UGYm5tStG4GtxNlQnUa6okkGF4zfOX9Dxt01vnVLwiJ_oQ4oIomtJc6y2sFodsddtJNIEmSwrxccTPe2RJDhf3JFdZ2wD8Wo103yFuMOJpJ8A3A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e452078-7de7-4bc0-8ccb-dd2bd248909e", "record_id": "flaws_cloudtrail:0000508:4e452078-7de7-4bc0-8ccb-dd2bd248909e", "row_index": 508, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e452078-7de7-4bc0-8ccb-dd2bd248909e", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716f4721-bbb2-4f43-a4b6-c011c1cfd099", "record_id": "flaws_cloudtrail:0000509:716f4721-bbb2-4f43-a4b6-c011c1cfd099", "row_index": 509, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716f4721-bbb2-4f43-a4b6-c011c1cfd099", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af7f5a63-e095-4359-b21c-dd27acb9459d", "record_id": "flaws_cloudtrail:0000510:af7f5a63-e095-4359-b21c-dd27acb9459d", "row_index": 510, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af7f5a63-e095-4359-b21c-dd27acb9459d", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59455d1-9f18-4fd2-aa96-8953a210520c", "record_id": "flaws_cloudtrail:0000511:d59455d1-9f18-4fd2-aa96-8953a210520c", "row_index": 511, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1437, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59455d1-9f18-4fd2-aa96-8953a210520c", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51f55a8-e376-4932-9a7a-9413fe2112f4", "record_id": "flaws_cloudtrail:0000512:a51f55a8-e376-4932-9a7a-9413fe2112f4", "row_index": 512, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51f55a8-e376-4932-9a7a-9413fe2112f4", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20629-28a5-49b0-ae46-71c58fc09500", "record_id": "flaws_cloudtrail:0000513:d20629-28a5-49b0-ae46-71c58fc09500", "row_index": 513, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20629-28a5-49b0-ae46-71c58fc09500", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AH3sjelKRUcPOJgmigF3YZk-uIUq3acgz8d59FYb1lp2sj6TjVmu4QlVfN3sXP35-ly4zmpOXvj5S4gxDGo6uh4A5ma_CdCQAWCglhxS3SE_ppAFIkhtua4AZsKkewXyqcdM9rM3HjY_dWHRmR-tI6sK_Dl5IcW59Aiapv-VL6bzGpRx46l6Npwzr5NCZU-JTKzGryFZqau0rCoy7_a_WJYSwTUVgk1KPzVx4whP86XqPajjW_nToqq5-nwBp4yLXZwxEPnC2oF44a9TuYbB4cO9rUSjVVMX3U5raaMFuBvuEtuMh6QXcxZdsWULuTn3xGUur8K4RYo8HBBUplESmKOXsq2ipEiJQa-saSB-EaP72gWCYoSic_Mfon2M0c8ckUCn1uY0x0P2ouqVS6bE69_VWEDcVWB0lMVnRjgZLQb7aNvDaFfheSekpkMJZ6gmfjVyZunnt3369METXnrMxJsjZLigqfCabWUcUR0tH_1KTVtBf7ou-ZEb4jzWaomX1NcBH40QkKhRC1J482dzpCOCQwpo5cK1omI4biP9TKAMIaxHd7GnOmvAXoH1zPy3WD5xFuxVZAvLMAK8o7e1LpLGI8Qs_ZFFjOqvr2PslblWu2BZJgT77ASNXH3f3-NJIUL9IRN3TaJT7R4XSqLppdToEjcg61Tg-1IGeUk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7918d16-751d-4a6e-8b33-282d43b423d3", "record_id": "flaws_cloudtrail:0000514:a7918d16-751d-4a6e-8b33-282d43b423d3", "row_index": 514, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1853, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7918d16-751d-4a6e-8b33-282d43b423d3", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LEharRFixfbkO7V2Dp0KbwrNYk6bEf5LW9EGlWLF9z6lvC1urQKV5v4QZSrqjNobXc_MzLobFNFCAAcs-1Pv-NFTT1k5c3lRkqYFS3w1ankPSd0NtUTovtQ8WhgFHfPD25De0TCD4Eg56bjC8aTSXVRvbzlK1ey1kbzTUrpxTjQQFgqhfSV1Ywz6mntNaPQZzBzIt-2r7ZH7TwpYfp0X4y1OojrrS71rZ3fafdb7sSTsobs94lfyJ18L8XwcEq_jz7JgcUnaY_w1SACn4nMlIB5dLe0Pf9qJfgaXNac-R-FbU_Z_SgC_GoAoc38MrCATwndSy1MCPXKNsUOBSH05weiMBEEU5vFS2Lx80LdYBLlQPuc2rg3uFjDUubJ5184qw5r191Jlkl8p1ZykEi-w4UPSFAUsswcFcGbugOQDa50hVbIHqqv4hGHp5-JRTGGEqvJo9Iee3Yz0xKRK4FDxOCyPnnbvNS0BdtqaQyJLdMkUdb5x7QnqOVoGVFT49ioGAUo_FxXGV9hcRTBvdik07t8QGnRphUiMGNnSlpg37I0qubIG2r8wj7_UGYm5tStG4GtxNlQnUa6okkGF4zfOX9Dxt01vnVLwiJ_oQ4oIomtJc6y2sFodsddtJNIEmSwrxccTPe2RJDhf3JFdZ2wD8Wo103yFuMOJpJ8A3A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e452078-7de7-4bc0-8ccb-dd2bd248909e", "record_id": "flaws_cloudtrail:0000515:4e452078-7de7-4bc0-8ccb-dd2bd248909e", "row_index": 515, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e452078-7de7-4bc0-8ccb-dd2bd248909e", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716f4721-bbb2-4f43-a4b6-c011c1cfd099", "record_id": "flaws_cloudtrail:0000516:716f4721-bbb2-4f43-a4b6-c011c1cfd099", "row_index": 516, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716f4721-bbb2-4f43-a4b6-c011c1cfd099", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af7f5a63-e095-4359-b21c-dd27acb9459d", "record_id": "flaws_cloudtrail:0000517:af7f5a63-e095-4359-b21c-dd27acb9459d", "row_index": 517, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af7f5a63-e095-4359-b21c-dd27acb9459d", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59455d1-9f18-4fd2-aa96-8953a210520c", "record_id": "flaws_cloudtrail:0000518:d59455d1-9f18-4fd2-aa96-8953a210520c", "row_index": 518, "timestamp": "2019-08-21T14:52:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1437, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59455d1-9f18-4fd2-aa96-8953a210520c", "eventTime": "2019-08-21T14:52:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7405f83b-9698-4fdd-a357-f996cda63025", "record_id": "flaws_cloudtrail:0000519:7405f83b-9698-4fdd-a357-f996cda63025", "row_index": 519, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7405f83b-9698-4fdd-a357-f996cda63025", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fFjVOD5Mrn9SphBgBtyxNwNINfUWfXfAtmH9gNFho8s3KXCIRSsS03eH_MHHk7j1hSGpFIIO4Axo2D11a7JPGejnVRwN07bJkHnJVKWw5O3C-GwshUy-0VtY3Fp6wbNW_q3sOGOsmyu_RsODreoCOQQpWQZZshbsXSQ48Pf6DWQxtqWr522QgBnXbU-iZtEOJaDzoRYl45w8Rf6Jk59K5ytU4OGSF1j7_HEoDHqcwxI-HQfCRgOkUA1qv88wlSuTBG5tuYJ1qI5NkJ6P7wBBmMAN_q-y6YRn6qsT-jBg6Uhxe7QWNwnpeCkGFgGEv67B6gXf2PfOZQ3ALr5pBE4UwuNPq9U9kWDP01Plx51jF4eMRuG9IIrciMP-Kd7h-T7-nlB061PPjOUpBOjDx2nnSnPCau-oHmIODD3tAQyjStCM8jzlpav-Vy5yX1mPi7rs2_kuqTaTS0FZy6HNe6paJE_R6LIq4awmJUtRiNiaKi1lrvi0MFqiLBUbBPA_Viyj4kDgINXOz0b0GcU50SJDVOobj2sf8s4AUbTxGiM9qkx79ax54G4MxFveso9ZGw2I3ElnRsAhdAN9bhYLgaQoONkAAke8k7kGTt-mY4mabJ-uXFQPwKFXW6lySCueAj6B_cgFdRJ0j-vbE9tbKlG7RaTm9sZOjtgOv2z17KLi", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a12223-5083-415a-aca9-1e14a81aa570", "record_id": "flaws_cloudtrail:0000520:9a12223-5083-415a-aca9-1e14a81aa570", "row_index": 520, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a12223-5083-415a-aca9-1e14a81aa570", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "record_id": "flaws_cloudtrail:0000521:606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "row_index": 521, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1398, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "record_id": "flaws_cloudtrail:0000522:7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "row_index": 522, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7405f83b-9698-4fdd-a357-f996cda63025", "record_id": "flaws_cloudtrail:0000523:7405f83b-9698-4fdd-a357-f996cda63025", "row_index": 523, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7405f83b-9698-4fdd-a357-f996cda63025", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fFjVOD5Mrn9SphBgBtyxNwNINfUWfXfAtmH9gNFho8s3KXCIRSsS03eH_MHHk7j1hSGpFIIO4Axo2D11a7JPGejnVRwN07bJkHnJVKWw5O3C-GwshUy-0VtY3Fp6wbNW_q3sOGOsmyu_RsODreoCOQQpWQZZshbsXSQ48Pf6DWQxtqWr522QgBnXbU-iZtEOJaDzoRYl45w8Rf6Jk59K5ytU4OGSF1j7_HEoDHqcwxI-HQfCRgOkUA1qv88wlSuTBG5tuYJ1qI5NkJ6P7wBBmMAN_q-y6YRn6qsT-jBg6Uhxe7QWNwnpeCkGFgGEv67B6gXf2PfOZQ3ALr5pBE4UwuNPq9U9kWDP01Plx51jF4eMRuG9IIrciMP-Kd7h-T7-nlB061PPjOUpBOjDx2nnSnPCau-oHmIODD3tAQyjStCM8jzlpav-Vy5yX1mPi7rs2_kuqTaTS0FZy6HNe6paJE_R6LIq4awmJUtRiNiaKi1lrvi0MFqiLBUbBPA_Viyj4kDgINXOz0b0GcU50SJDVOobj2sf8s4AUbTxGiM9qkx79ax54G4MxFveso9ZGw2I3ElnRsAhdAN9bhYLgaQoONkAAke8k7kGTt-mY4mabJ-uXFQPwKFXW6lySCueAj6B_cgFdRJ0j-vbE9tbKlG7RaTm9sZOjtgOv2z17KLi", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a12223-5083-415a-aca9-1e14a81aa570", "record_id": "flaws_cloudtrail:0000524:9a12223-5083-415a-aca9-1e14a81aa570", "row_index": 524, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a12223-5083-415a-aca9-1e14a81aa570", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "record_id": "flaws_cloudtrail:0000525:606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "row_index": 525, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1398, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "606ef6d9-8aab-43ef-9415-f1d57b3c19d7", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "record_id": "flaws_cloudtrail:0000526:7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "row_index": 526, "timestamp": "2019-08-21T14:52:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac5d8a1-67db-4288-aad4-5635c8bf35fc", "eventTime": "2019-08-21T14:52:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "record_id": "flaws_cloudtrail:0000527:bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "row_index": 527, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mu31A603dMz_eUEe5CfGl9nGySiTwwLlWKA8OuPgvnBfJBgnX3VdF9Xd8zgqtzpQ4z6jS5yQj57bivWeLXgb9HXFSNKGWB49DBi-Pi5dV2-hHMNYff-2wmhcOMnUz4Nqg5Q4BqXXK9uPCt9BKR66m-qZabJds-Pac26kU5r_41hlOIVDND00V0wC8P5I0BqkKCEpfdBPWtswvubP1SS4rSaVmp0pUoUxS1BRlcYNlzYCvP4suSjofaS7QEAstVZ386mFJx2rzGfLdcbu0gdUuEhJxw3xKw6QnIPAH9c7hDrTsMrTFQ7wR-cy8_OLgyQHL7nJuFOwHB7PsKafTXEWYikvVhkdNSzocQBY-QlGaziCDUpUIcYU1wMDC41i2Tb-QUjUKQoAjrNHmyg3MtW5OVb9K6TqH8MnKkm8Fsm9LpLO0-whbU2vq0uOJ7KVPUj5WLo6NCtuMsWKQLepxryPS_njISGZR-MbyuTs7xlXT2QqFd4dE-KF64ty4DmSPcWnwD-F50UAmTa02KLyX8EllvmdErf-aYAelXSaJu0F9dfzi-FRlYfSomKJIvO-ao_SB-4gx_vLRchNRtTXIofJnGDv_Y_kcSOXr6kG0E-eJyGiqBNKd2raWRMvGkfRzlSN-En3VMhD5EjdtAeKUr94B-geww88CwiS6rIimOPT", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35230f4b-b862-4efb-98d8-804f2e5fb78c", "record_id": "flaws_cloudtrail:0000528:35230f4b-b862-4efb-98d8-804f2e5fb78c", "row_index": 528, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35230f4b-b862-4efb-98d8-804f2e5fb78c", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a5d6db-17e1-4952-aef1-28bd46542d7b", "record_id": "flaws_cloudtrail:0000529:f0a5d6db-17e1-4952-aef1-28bd46542d7b", "row_index": 529, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a5d6db-17e1-4952-aef1-28bd46542d7b", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaab7d4-67d0-409d-8473-29b028286fba9", "record_id": "flaws_cloudtrail:0000530:ecaab7d4-67d0-409d-8473-29b028286fba9", "row_index": 530, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaab7d4-67d0-409d-8473-29b028286fba9", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "914038-2688-4d78-b6d6-75129a55", "record_id": "flaws_cloudtrail:0000531:914038-2688-4d78-b6d6-75129a55", "row_index": 531, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "914038-2688-4d78-b6d6-75129a55", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f031845dd-f414-4250-ad15-bf0463b197a9", "record_id": "flaws_cloudtrail:0000532:f031845dd-f414-4250-ad15-bf0463b197a9", "row_index": 532, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f031845dd-f414-4250-ad15-bf0463b197a9", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "record_id": "flaws_cloudtrail:0000533:78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "row_index": 533, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5320ddc8-945a-42f3-9816-44b44a555d8b", "record_id": "flaws_cloudtrail:0000534:5320ddc8-945a-42f3-9816-44b44a555d8b", "row_index": 534, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5320ddc8-945a-42f3-9816-44b44a555d8b", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "record_id": "flaws_cloudtrail:0000535:bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "row_index": 535, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5b84a2-aa7e-421a-b8ce-3b5db62352da", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mu31A603dMz_eUEe5CfGl9nGySiTwwLlWKA8OuPgvnBfJBgnX3VdF9Xd8zgqtzpQ4z6jS5yQj57bivWeLXgb9HXFSNKGWB49DBi-Pi5dV2-hHMNYff-2wmhcOMnUz4Nqg5Q4BqXXK9uPCt9BKR66m-qZabJds-Pac26kU5r_41hlOIVDND00V0wC8P5I0BqkKCEpfdBPWtswvubP1SS4rSaVmp0pUoUxS1BRlcYNlzYCvP4suSjofaS7QEAstVZ386mFJx2rzGfLdcbu0gdUuEhJxw3xKw6QnIPAH9c7hDrTsMrTFQ7wR-cy8_OLgyQHL7nJuFOwHB7PsKafTXEWYikvVhkdNSzocQBY-QlGaziCDUpUIcYU1wMDC41i2Tb-QUjUKQoAjrNHmyg3MtW5OVb9K6TqH8MnKkm8Fsm9LpLO0-whbU2vq0uOJ7KVPUj5WLo6NCtuMsWKQLepxryPS_njISGZR-MbyuTs7xlXT2QqFd4dE-KF64ty4DmSPcWnwD-F50UAmTa02KLyX8EllvmdErf-aYAelXSaJu0F9dfzi-FRlYfSomKJIvO-ao_SB-4gx_vLRchNRtTXIofJnGDv_Y_kcSOXr6kG0E-eJyGiqBNKd2raWRMvGkfRzlSN-En3VMhD5EjdtAeKUr94B-geww88CwiS6rIimOPT", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35230f4b-b862-4efb-98d8-804f2e5fb78c", "record_id": "flaws_cloudtrail:0000536:35230f4b-b862-4efb-98d8-804f2e5fb78c", "row_index": 536, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35230f4b-b862-4efb-98d8-804f2e5fb78c", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a5d6db-17e1-4952-aef1-28bd46542d7b", "record_id": "flaws_cloudtrail:0000537:f0a5d6db-17e1-4952-aef1-28bd46542d7b", "row_index": 537, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a5d6db-17e1-4952-aef1-28bd46542d7b", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaab7d4-67d0-409d-8473-29b028286fba9", "record_id": "flaws_cloudtrail:0000538:ecaab7d4-67d0-409d-8473-29b028286fba9", "row_index": 538, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaab7d4-67d0-409d-8473-29b028286fba9", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "914038-2688-4d78-b6d6-75129a55", "record_id": "flaws_cloudtrail:0000539:914038-2688-4d78-b6d6-75129a55", "row_index": 539, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "914038-2688-4d78-b6d6-75129a55", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f031845dd-f414-4250-ad15-bf0463b197a9", "record_id": "flaws_cloudtrail:0000540:f031845dd-f414-4250-ad15-bf0463b197a9", "row_index": 540, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f031845dd-f414-4250-ad15-bf0463b197a9", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "record_id": "flaws_cloudtrail:0000541:78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "row_index": 541, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c5db37-def4-4cf8-8c6e-d63cb9c30b74", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5320ddc8-945a-42f3-9816-44b44a555d8b", "record_id": "flaws_cloudtrail:0000542:5320ddc8-945a-42f3-9816-44b44a555d8b", "row_index": 542, "timestamp": "2019-08-21T14:52:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5320ddc8-945a-42f3-9816-44b44a555d8b", "eventTime": "2019-08-21T14:52:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75b0446-997e-4fcc-a438-9f591d399dd1", "record_id": "flaws_cloudtrail:0000543:d75b0446-997e-4fcc-a438-9f591d399dd1", "row_index": 543, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75b0446-997e-4fcc-a438-9f591d399dd1", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5583d169-9d19-4457-946d-243b7ba32942", "record_id": "flaws_cloudtrail:0000544:5583d169-9d19-4457-946d-243b7ba32942", "row_index": 544, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5583d169-9d19-4457-946d-243b7ba32942", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58c86274-a502-4975-ae3d-e2c282ae0bd7", "record_id": "flaws_cloudtrail:0000545:58c86274-a502-4975-ae3d-e2c282ae0bd7", "row_index": 545, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58c86274-a502-4975-ae3d-e2c282ae0bd7", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372dc16a-66e6-48fc-b31d-04fd779c7a68", "record_id": "flaws_cloudtrail:0000546:372dc16a-66e6-48fc-b31d-04fd779c7a68", "row_index": 546, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1854, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372dc16a-66e6-48fc-b31d-04fd779c7a68", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H5klRAywUd3nSWOsUaMzE_4lA_FtINtxQCv2OU9HfXWDjcwXDoIL6ufkPHU6icy61N4ctPeKEZcSVpk5xL9BEdbfP2pwXB0lCJyAPZxVsjfl1pKowUWrl32I1yX1O61punZrptXV1Tc0tTzCNaqnKSAPWewrK644-xU_mbWHFciabKSJUQu7OCbrsohc83Fw_OtA95_8j70orIfUcslCo61X3ECjqN-gTwuDwqP__tScU99-RB4Fu3sR_WYh4_yTFWDrBYz8hQbDtJqes61dOmogxBu_XSfCzVfykafu_2S6qu-gSRpRqc2sVS62-F6JKuG13xrOBH4HsTqeOLiBh5bc36YDqAmbjpy2dstPo5tPM6w10XoQ1bZEKHW9NjjpKaFKn-JU-QqwT5uo4K5nY98BsL1sHpOHykiZLFdsP4jRWldE--LmT8kfcpuCEIQrZcagl47JM-kEkXaZeTCnF7VLcjYThufX7APEoOBvjmnOZMDehzH5hh64ySUFYnp555MkCPetWtYGJ-aSnMNSMwDBS1ivdTHaRdddhhBBkevfs3Wys7EWaAfsaGR5tXT1Kcxi5vmjfvKhH1rQtcsNv_6dZwxLbK5n5cPCQXeZ8rA9smTXYVoopgYr58pLFwbwAjldt-j0bd5ScoMf-JTvQzFtatjwRNCeoAT01zCZ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383737a-f2b8-43ea-90ef-d3b0a0a4effd", "record_id": "flaws_cloudtrail:0000547:383737a-f2b8-43ea-90ef-d3b0a0a4effd", "row_index": 547, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1329, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383737a-f2b8-43ea-90ef-d3b0a0a4effd", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "record_id": "flaws_cloudtrail:0000548:b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "row_index": 548, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75b0446-997e-4fcc-a438-9f591d399dd1", "record_id": "flaws_cloudtrail:0000549:d75b0446-997e-4fcc-a438-9f591d399dd1", "row_index": 549, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75b0446-997e-4fcc-a438-9f591d399dd1", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5583d169-9d19-4457-946d-243b7ba32942", "record_id": "flaws_cloudtrail:0000550:5583d169-9d19-4457-946d-243b7ba32942", "row_index": 550, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5583d169-9d19-4457-946d-243b7ba32942", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58c86274-a502-4975-ae3d-e2c282ae0bd7", "record_id": "flaws_cloudtrail:0000551:58c86274-a502-4975-ae3d-e2c282ae0bd7", "row_index": 551, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58c86274-a502-4975-ae3d-e2c282ae0bd7", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372dc16a-66e6-48fc-b31d-04fd779c7a68", "record_id": "flaws_cloudtrail:0000552:372dc16a-66e6-48fc-b31d-04fd779c7a68", "row_index": 552, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1854, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372dc16a-66e6-48fc-b31d-04fd779c7a68", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H5klRAywUd3nSWOsUaMzE_4lA_FtINtxQCv2OU9HfXWDjcwXDoIL6ufkPHU6icy61N4ctPeKEZcSVpk5xL9BEdbfP2pwXB0lCJyAPZxVsjfl1pKowUWrl32I1yX1O61punZrptXV1Tc0tTzCNaqnKSAPWewrK644-xU_mbWHFciabKSJUQu7OCbrsohc83Fw_OtA95_8j70orIfUcslCo61X3ECjqN-gTwuDwqP__tScU99-RB4Fu3sR_WYh4_yTFWDrBYz8hQbDtJqes61dOmogxBu_XSfCzVfykafu_2S6qu-gSRpRqc2sVS62-F6JKuG13xrOBH4HsTqeOLiBh5bc36YDqAmbjpy2dstPo5tPM6w10XoQ1bZEKHW9NjjpKaFKn-JU-QqwT5uo4K5nY98BsL1sHpOHykiZLFdsP4jRWldE--LmT8kfcpuCEIQrZcagl47JM-kEkXaZeTCnF7VLcjYThufX7APEoOBvjmnOZMDehzH5hh64ySUFYnp555MkCPetWtYGJ-aSnMNSMwDBS1ivdTHaRdddhhBBkevfs3Wys7EWaAfsaGR5tXT1Kcxi5vmjfvKhH1rQtcsNv_6dZwxLbK5n5cPCQXeZ8rA9smTXYVoopgYr58pLFwbwAjldt-j0bd5ScoMf-JTvQzFtatjwRNCeoAT01zCZ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383737a-f2b8-43ea-90ef-d3b0a0a4effd", "record_id": "flaws_cloudtrail:0000553:383737a-f2b8-43ea-90ef-d3b0a0a4effd", "row_index": 553, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1329, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383737a-f2b8-43ea-90ef-d3b0a0a4effd", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "record_id": "flaws_cloudtrail:0000554:b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "row_index": 554, "timestamp": "2019-08-21T14:52:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ca3b78-1542-4c3b-8d46-e935526e5fb90", "eventTime": "2019-08-21T14:52:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14c860a-ab9d-4cc5-8778-893a71319fc", "record_id": "flaws_cloudtrail:0000555:e14c860a-ab9d-4cc5-8778-893a71319fc", "row_index": 555, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14c860a-ab9d-4cc5-8778-893a71319fc", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b4d447-a0d1-4037-b081-0cdf4b8a461a", "record_id": "flaws_cloudtrail:0000556:01b4d447-a0d1-4037-b081-0cdf4b8a461a", "row_index": 556, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b4d447-a0d1-4037-b081-0cdf4b8a461a", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: X4hY6iGJZXvY4WojirFaRNTvnkyLUtLR7wEJ13mf6oxSIFfNIRIfV38pDuYsTUlDgZBem4ECYp_JohjEi5McFqnGfbanrpfNO6YPylouhSiP25ZS4-0zJLCyOqAkqer70O10StIfmAZreJRA6ZAJthDEOZghqf8TK95LCVYGq80GSe08usfvHB8NkQ3k2rnOgq928mL-Rc8gfwhBNXDN1O0LrX2CpMm5prO5v2TcGE6IbUESd4eUaD9qp0Ts5KCc8wObg_3vZmuLWodqGj1NSfga1SgCjD1_ThJA42AuENjncyYw3W8ZSvXt8i3pVVSfC7CYlS2eso16EtGnAsmQpq-MuBrRZOZluQqgjwJUAOkWxBAVI6gxyTx4vptStw4bsknzOTCiKTJ33HqVjMuECycNXHYMv7GaV8Fy1kHc2AbRWI_Ijo_BkkTxJaKjPfBfLyF2M6Halajw1UTLexHfcOIMiwwaXgTzDKkxBhmlA2n_o9oegOkQ6Kp0FVIu4Tdkc8d-JMJVqxXQABTCJL85hN_Fqb7FgquQagr90CG7U7Bluui6SMWpNhCq3-BDERHj2R2vvF46CW9Ou3ET81JyigFRDke8_s2dTUOMBbX79REJlFPOkjT9YmIRheCDpwT9PTikzyIUQLeBnMogiaeJ8xkgCKT8S1Kgrr8oqhp9", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237e96c9-40fd-4401-a38a-fde892d37b79", "record_id": "flaws_cloudtrail:0000557:237e96c9-40fd-4401-a38a-fde892d37b79", "row_index": 557, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237e96c9-40fd-4401-a38a-fde892d37b79", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FxALD-X02HjZY7DZLm69WLvT-s7qit6vUQaeEK4JSYBPNuJispab_2xw3l1EqU3r3KpHfaxqU5_uK70bKLavUazlRvnU-ayl92TzfevIok2U4kzA3rJv02aY-Zr3rsGU2iZR_SacP_4Ttp0d3PDv1CYMnKvcVFmBZ3nxsVxr_Ijxlv6_8KEhiKwrFAOUcaJbiSDaQ4frLCjVgHbP_vBlJGNHnLIYW5ba5CkbfJYNrN69_UfOj5BcV4JdbYHwqgZq3RzRNZplwA1bKKLeWDiszfBzKKNxV-nLSsiOPmTPvc7Lb9ZbiLnRtvnRb_6mFvv2N4maOy0dB2UWSurTM8E_Xc9ezGo8OxjfcQ7PuArRWnFo2_6t2txWHDhFXaZHwjVuxmOregZQhpWhV5QO07U5RqMuqGZiC1Q5UED5tggfw2Zbl-ACmRNftoaDqHr4F52VeHC96eem8OUR5N1I9jOXio-bdNoZbRKrgKptuuqPG7R5Bhm8cn9QiGgIrBKICAClLutjh5FvK9skUpeHhBx9ivZ_cD6e6isVDu1nEeNmMtPuUZxsuqzm9MyUoJJh5GCEtQkQJeapduLeFfrTAADSFtJhpodr4ljheVYE6Q9y2xdpB2G-h3sDYvmB5pACv3yeD0b6e56KJMvEpDBlRLXwpk0ybYUEVnpb_w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8982ca96-7387-4cde-9943-f6fc7c9e89be", "record_id": "flaws_cloudtrail:0000558:8982ca96-7387-4cde-9943-f6fc7c9e89be", "row_index": 558, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8982ca96-7387-4cde-9943-f6fc7c9e89be", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14c860a-ab9d-4cc5-8778-893a71319fc", "record_id": "flaws_cloudtrail:0000559:e14c860a-ab9d-4cc5-8778-893a71319fc", "row_index": 559, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14c860a-ab9d-4cc5-8778-893a71319fc", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b4d447-a0d1-4037-b081-0cdf4b8a461a", "record_id": "flaws_cloudtrail:0000560:01b4d447-a0d1-4037-b081-0cdf4b8a461a", "row_index": 560, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1855, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b4d447-a0d1-4037-b081-0cdf4b8a461a", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: X4hY6iGJZXvY4WojirFaRNTvnkyLUtLR7wEJ13mf6oxSIFfNIRIfV38pDuYsTUlDgZBem4ECYp_JohjEi5McFqnGfbanrpfNO6YPylouhSiP25ZS4-0zJLCyOqAkqer70O10StIfmAZreJRA6ZAJthDEOZghqf8TK95LCVYGq80GSe08usfvHB8NkQ3k2rnOgq928mL-Rc8gfwhBNXDN1O0LrX2CpMm5prO5v2TcGE6IbUESd4eUaD9qp0Ts5KCc8wObg_3vZmuLWodqGj1NSfga1SgCjD1_ThJA42AuENjncyYw3W8ZSvXt8i3pVVSfC7CYlS2eso16EtGnAsmQpq-MuBrRZOZluQqgjwJUAOkWxBAVI6gxyTx4vptStw4bsknzOTCiKTJ33HqVjMuECycNXHYMv7GaV8Fy1kHc2AbRWI_Ijo_BkkTxJaKjPfBfLyF2M6Halajw1UTLexHfcOIMiwwaXgTzDKkxBhmlA2n_o9oegOkQ6Kp0FVIu4Tdkc8d-JMJVqxXQABTCJL85hN_Fqb7FgquQagr90CG7U7Bluui6SMWpNhCq3-BDERHj2R2vvF46CW9Ou3ET81JyigFRDke8_s2dTUOMBbX79REJlFPOkjT9YmIRheCDpwT9PTikzyIUQLeBnMogiaeJ8xkgCKT8S1Kgrr8oqhp9", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237e96c9-40fd-4401-a38a-fde892d37b79", "record_id": "flaws_cloudtrail:0000561:237e96c9-40fd-4401-a38a-fde892d37b79", "row_index": 561, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237e96c9-40fd-4401-a38a-fde892d37b79", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FxALD-X02HjZY7DZLm69WLvT-s7qit6vUQaeEK4JSYBPNuJispab_2xw3l1EqU3r3KpHfaxqU5_uK70bKLavUazlRvnU-ayl92TzfevIok2U4kzA3rJv02aY-Zr3rsGU2iZR_SacP_4Ttp0d3PDv1CYMnKvcVFmBZ3nxsVxr_Ijxlv6_8KEhiKwrFAOUcaJbiSDaQ4frLCjVgHbP_vBlJGNHnLIYW5ba5CkbfJYNrN69_UfOj5BcV4JdbYHwqgZq3RzRNZplwA1bKKLeWDiszfBzKKNxV-nLSsiOPmTPvc7Lb9ZbiLnRtvnRb_6mFvv2N4maOy0dB2UWSurTM8E_Xc9ezGo8OxjfcQ7PuArRWnFo2_6t2txWHDhFXaZHwjVuxmOregZQhpWhV5QO07U5RqMuqGZiC1Q5UED5tggfw2Zbl-ACmRNftoaDqHr4F52VeHC96eem8OUR5N1I9jOXio-bdNoZbRKrgKptuuqPG7R5Bhm8cn9QiGgIrBKICAClLutjh5FvK9skUpeHhBx9ivZ_cD6e6isVDu1nEeNmMtPuUZxsuqzm9MyUoJJh5GCEtQkQJeapduLeFfrTAADSFtJhpodr4ljheVYE6Q9y2xdpB2G-h3sDYvmB5pACv3yeD0b6e56KJMvEpDBlRLXwpk0ybYUEVnpb_w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8982ca96-7387-4cde-9943-f6fc7c9e89be", "record_id": "flaws_cloudtrail:0000562:8982ca96-7387-4cde-9943-f6fc7c9e89be", "row_index": 562, "timestamp": "2019-08-21T14:52:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8982ca96-7387-4cde-9943-f6fc7c9e89be", "eventTime": "2019-08-21T14:52:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf45f961-1075-4ede-85da-45b3fe80fb30", "record_id": "flaws_cloudtrail:0000563:bf45f961-1075-4ede-85da-45b3fe80fb30", "row_index": 563, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1291, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf45f961-1075-4ede-85da-45b3fe80fb30", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35990ec-88c4-48f2-a455-a5215d481d0a", "record_id": "flaws_cloudtrail:0000564:a35990ec-88c4-48f2-a455-a5215d481d0a", "row_index": 564, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1956, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35990ec-88c4-48f2-a455-a5215d481d0a", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YbUyn_vWzYVPoxOlyMBRFboJbsCz7RiIebzqHiH9nxCN_Ok5CnCSPFpDYfdZVWmRR2suNd_jBkowUZ_IFVMb-qzs274_J2gcBq9Sy6h119IEUD7FyaNBd_wkwTKgCbQ7CGFCTon-p2fEWBTwDKThQWoehWOnWezP5c1hGjZI7tWYdq-8yru8lO7c9mz2d_lX8f_yhiriDxsO5jvdtS3O6dz1EJqtOno5pjmThdCitV18mV6EepitfN0jHA1n11j2E_XodE_5UcPktfhhILYCdTEfwmcGH1kL3S1l6qNneb_8u0MCj7xLvVQZNGUXx6NCYSHbx2Hhk-62JGb6-0V_aD0JWzk9bSN2dFhxDHRTMJpe8XBWkKSjmZRbP1Obzmsvd-lxbdZsGCtjTwxIJd3FM-lVg31ZepOwOF-W-jioTzm-WRmzIJRndUZHOas0VMS14LGZ0XlgrusuAbL7OoeSGnuN8DEPNR1Ky3sXhtpPb6oUtXNX73uMHoDfzb_iBZFztoLE6DCnKOgGyoTiDREC3gH4HUN7k59p3Roye_rFu_zY_q2u3eVZRm1EL91BWBob8JjKg8KJntMrape532PuahryAUazc0epJ_sE9V0NhvwUbtoNwHaAMn8AG93hndjmiCoq9FxxQB8lEhM7QMJoZ6Af8nc8J7YaQrzHUZrIHA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9eed2f-f652-4638-9c24-c573667f74af", "record_id": "flaws_cloudtrail:0000565:8d9eed2f-f652-4638-9c24-c573667f74af", "row_index": 565, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9eed2f-f652-4638-9c24-c573667f74af", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "749be5ad-6aa7-43f9-bed4-28eee65304", "record_id": "flaws_cloudtrail:0000566:749be5ad-6aa7-43f9-bed4-28eee65304", "row_index": 566, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1190, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "749be5ad-6aa7-43f9-bed4-28eee65304", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "217ce718-1b32-4d35-8842-f329ef75b527", "record_id": "flaws_cloudtrail:0000567:217ce718-1b32-4d35-8842-f329ef75b527", "row_index": 567, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "217ce718-1b32-4d35-8842-f329ef75b527", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: phXIcj5Jyq4K-eAZgW-0l24kSGaOCGIJ3y3U16wAirgXvH9hCm9fRjTeEkOtvLdo5OaSON6zK3zKuEXtcQ0hFm6LOe8Pu7EMiXX1f-fG0kSsVbqiTXoIkcKxLfClMf5uxutJmbIatE-IflCV3mRmptJv8JINJAYDgq_CrbAR8ArTIDWr59WL8_SbrRbx4Qtq_0lahQoPYqDoNxBta3LeKmutXOW196d0oGGOEyRFy_58PQUDs8owcPwNCv4xwLRptVZGbqcTTUqVPwprMVOp2htuVIffSYTzloD2PIcyhvNiwMKRAmDL2eUkFilI75dIy86ZCB3C-Iz8xicuFF6MkRa_wlwwXlp02W6x-NMbgxoweyschXKH-FUomJSo0MLZ3xlOXLn3DasuedUL7EjAUv65j7F4nSIk6txjVcEtn0WcQ85yjG4GNAlrUgMzhBNLNyBFt8sg-5aJctL21yvGBjTC99KMKRArmo4DgciaTU5HAX2cMn5T2ZzonDmpR_K_eOZjHS-owiWyxSdCvM8QrY-k54eJUTl2Yx0NI2gvSg_vB__U4Z-t32Caax4B4NAWONjQ_p7uOAB6_GXWKCP_4RFOVG7-gyYZQfbD27uzxRebmCsFHxkuiOih0vh-li6pEghAuctQIOjSex96DTQai4TP9c-fFM63", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf45f961-1075-4ede-85da-45b3fe80fb30", "record_id": "flaws_cloudtrail:0000568:bf45f961-1075-4ede-85da-45b3fe80fb30", "row_index": 568, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1291, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf45f961-1075-4ede-85da-45b3fe80fb30", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35990ec-88c4-48f2-a455-a5215d481d0a", "record_id": "flaws_cloudtrail:0000569:a35990ec-88c4-48f2-a455-a5215d481d0a", "row_index": 569, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1956, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35990ec-88c4-48f2-a455-a5215d481d0a", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YbUyn_vWzYVPoxOlyMBRFboJbsCz7RiIebzqHiH9nxCN_Ok5CnCSPFpDYfdZVWmRR2suNd_jBkowUZ_IFVMb-qzs274_J2gcBq9Sy6h119IEUD7FyaNBd_wkwTKgCbQ7CGFCTon-p2fEWBTwDKThQWoehWOnWezP5c1hGjZI7tWYdq-8yru8lO7c9mz2d_lX8f_yhiriDxsO5jvdtS3O6dz1EJqtOno5pjmThdCitV18mV6EepitfN0jHA1n11j2E_XodE_5UcPktfhhILYCdTEfwmcGH1kL3S1l6qNneb_8u0MCj7xLvVQZNGUXx6NCYSHbx2Hhk-62JGb6-0V_aD0JWzk9bSN2dFhxDHRTMJpe8XBWkKSjmZRbP1Obzmsvd-lxbdZsGCtjTwxIJd3FM-lVg31ZepOwOF-W-jioTzm-WRmzIJRndUZHOas0VMS14LGZ0XlgrusuAbL7OoeSGnuN8DEPNR1Ky3sXhtpPb6oUtXNX73uMHoDfzb_iBZFztoLE6DCnKOgGyoTiDREC3gH4HUN7k59p3Roye_rFu_zY_q2u3eVZRm1EL91BWBob8JjKg8KJntMrape532PuahryAUazc0epJ_sE9V0NhvwUbtoNwHaAMn8AG93hndjmiCoq9FxxQB8lEhM7QMJoZ6Af8nc8J7YaQrzHUZrIHA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9eed2f-f652-4638-9c24-c573667f74af", "record_id": "flaws_cloudtrail:0000570:8d9eed2f-f652-4638-9c24-c573667f74af", "row_index": 570, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9eed2f-f652-4638-9c24-c573667f74af", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "749be5ad-6aa7-43f9-bed4-28eee65304", "record_id": "flaws_cloudtrail:0000571:749be5ad-6aa7-43f9-bed4-28eee65304", "row_index": 571, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1190, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "749be5ad-6aa7-43f9-bed4-28eee65304", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "217ce718-1b32-4d35-8842-f329ef75b527", "record_id": "flaws_cloudtrail:0000572:217ce718-1b32-4d35-8842-f329ef75b527", "row_index": 572, "timestamp": "2019-08-21T14:53:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "217ce718-1b32-4d35-8842-f329ef75b527", "eventTime": "2019-08-21T14:53:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: phXIcj5Jyq4K-eAZgW-0l24kSGaOCGIJ3y3U16wAirgXvH9hCm9fRjTeEkOtvLdo5OaSON6zK3zKuEXtcQ0hFm6LOe8Pu7EMiXX1f-fG0kSsVbqiTXoIkcKxLfClMf5uxutJmbIatE-IflCV3mRmptJv8JINJAYDgq_CrbAR8ArTIDWr59WL8_SbrRbx4Qtq_0lahQoPYqDoNxBta3LeKmutXOW196d0oGGOEyRFy_58PQUDs8owcPwNCv4xwLRptVZGbqcTTUqVPwprMVOp2htuVIffSYTzloD2PIcyhvNiwMKRAmDL2eUkFilI75dIy86ZCB3C-Iz8xicuFF6MkRa_wlwwXlp02W6x-NMbgxoweyschXKH-FUomJSo0MLZ3xlOXLn3DasuedUL7EjAUv65j7F4nSIk6txjVcEtn0WcQ85yjG4GNAlrUgMzhBNLNyBFt8sg-5aJctL21yvGBjTC99KMKRArmo4DgciaTU5HAX2cMn5T2ZzonDmpR_K_eOZjHS-owiWyxSdCvM8QrY-k54eJUTl2Yx0NI2gvSg_vB__U4Z-t32Caax4B4NAWONjQ_p7uOAB6_GXWKCP_4RFOVG7-gyYZQfbD27uzxRebmCsFHxkuiOih0vh-li6pEghAuctQIOjSex96DTQai4TP9c-fFM63", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273499a5c-28ab-43a8-8f7b-db109892dcb5", "record_id": "flaws_cloudtrail:0000573:273499a5c-28ab-43a8-8f7b-db109892dcb5", "row_index": 573, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273499a5c-28ab-43a8-8f7b-db109892dcb5", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92db90b-c47e-4ba2-b38e-891257406d33", "record_id": "flaws_cloudtrail:0000574:e92db90b-c47e-4ba2-b38e-891257406d33", "row_index": 574, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92db90b-c47e-4ba2-b38e-891257406d33", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ad7de0d-1def-493b-9532-fa995f7e3e27", "record_id": "flaws_cloudtrail:0000575:9ad7de0d-1def-493b-9532-fa995f7e3e27", "row_index": 575, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ad7de0d-1def-493b-9532-fa995f7e3e27", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61de3817-db68-497d-9abb-03d3006a7f50", "record_id": "flaws_cloudtrail:0000576:61de3817-db68-497d-9abb-03d3006a7f50", "row_index": 576, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61de3817-db68-497d-9abb-03d3006a7f50", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9685abf-eaef-468f-91e1-f758892cb151", "record_id": "flaws_cloudtrail:0000577:a9685abf-eaef-468f-91e1-f758892cb151", "row_index": 577, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9685abf-eaef-468f-91e1-f758892cb151", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f862219e0-37aa-4b11-95ac-a941cafd4e5d", "record_id": "flaws_cloudtrail:0000578:f862219e0-37aa-4b11-95ac-a941cafd4e5d", "row_index": 578, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1846, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f862219e0-37aa-4b11-95ac-a941cafd4e5d", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cyjCxMyx65z_V1JMoMCdMel0IYrtS5AfFAdzpkuKpdOmK2RIqR_uV3FwUTOZTkOAiGtYhV4gfc86qyLhpD6pA48ggSAozeRPS_l_xWFkSx5Qx51SOujh2JVojci_XjaGgEbBMGehlZMk8uYPx_RHRERGyteCHQb8FjCEAwYB507Nq2U--B0zOdYoexljxOHLuhH4U6drZ6lyrH5Yp4oH8fIxTNqop2x3Dfs3m-W0IpbCmajBbzDje8I-5qhuPghn6LEMIE7vAKnEYxCtV0W668tYUMAYeYvD4Qn6IzXZvqY9fE23nI6hmMlAxzKzsUxbBmoSFWLmJzkPKzXTwLLPGeMNW7Ix_ByEzDpfztvu4YZ-xUiivpqi69TNmQJoPzBcjm3VynvED9Tz8VT9kgMDEXfjbBvCe0B_3q0hl_qAPLnoR-z07kVz3ZFvL7tOKXC4tvJUNPNPlOBMo3ZffPlNHUhfl5r09LthpMRbe-fhrzhVmgvg02dZ_Slq2JLo36u6QeP8Zmubzh5AGHnpNgFSHqPiPcgrKerGuVue_FTvdX6hmrfyK89l7OKU-78iGRtpZDKwV-3ONSCEbYcEWIWT88KXugXe_m83P-UJ_kX1Kn3AQJFrUubydVwYsOW1Sn9x8ZQxL2stB2tBSDbh2FEwxmX_25TmR9mv6HM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3684b696-65f3-48a9-8138-b556cfc968b0", "record_id": "flaws_cloudtrail:0000579:3684b696-65f3-48a9-8138-b556cfc968b0", "row_index": 579, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3684b696-65f3-48a9-8138-b556cfc968b0", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "record_id": "flaws_cloudtrail:0000580:4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "row_index": 580, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1988, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0gUA-2l_TmyiePFszeYKV7czuPgzJZH0m5lveWKVqIUbFMJSeO9UUfpVPWJ4PJ6sDs4gkoDGdWCqKEbX3hacC0wcJas0BwctkV1dZSNgAMueeLHOI7dD8XaQ_RZrKrUr1c1aR_2muyvb_4uP_CPVRcwBRGPD9CCNFzilNH01LHbOMZ8hQqcORpxe6O7cowLSq54g8wTK3GWCYsDaDUSLgMckXvHZyKf3aY7WGmMnjnoobmrbYwbFMM_36aMUH2WKPrGFeAZeIyw0KzeLRMZYfSsNHqDkHgEBjyzSyCjA8D5oQB_wME9DOGqTwVxdqUb7rpk2w_-Xc9Rk6--slYDTfPMo5GZ1QYfl4uRazWlN1khzjU-ikdFDewwO3cYM-qCbDsAQeWJlktBmrsG3G2zZSATKOd2uscml1uztrFrVLRY9ZzWbaglP0pvO_Gg_wWB3kYYx4ZtVvIeoi4HIx-9_CZIbSQYU3-IsfVXvWNRCdpej7G85U5-h_nrns2dklwi5pJvSTMqJZAxrY-pmrq1vH9YlEWMvSaYl-Me-ZOPLiT0aN4G-M8xGKlIEhoP83fjHSuQbHc-rCDv8C_KARv-4Y66AQmyh734eTirBalKlrDpSdVIE2fnUhLvPImW0NsQ2gh1aqLxh2Skg4bIBPnJVzyZy71G4JgrgBFw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273499a5c-28ab-43a8-8f7b-db109892dcb5", "record_id": "flaws_cloudtrail:0000581:273499a5c-28ab-43a8-8f7b-db109892dcb5", "row_index": 581, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273499a5c-28ab-43a8-8f7b-db109892dcb5", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92db90b-c47e-4ba2-b38e-891257406d33", "record_id": "flaws_cloudtrail:0000582:e92db90b-c47e-4ba2-b38e-891257406d33", "row_index": 582, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92db90b-c47e-4ba2-b38e-891257406d33", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ad7de0d-1def-493b-9532-fa995f7e3e27", "record_id": "flaws_cloudtrail:0000583:9ad7de0d-1def-493b-9532-fa995f7e3e27", "row_index": 583, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ad7de0d-1def-493b-9532-fa995f7e3e27", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61de3817-db68-497d-9abb-03d3006a7f50", "record_id": "flaws_cloudtrail:0000584:61de3817-db68-497d-9abb-03d3006a7f50", "row_index": 584, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61de3817-db68-497d-9abb-03d3006a7f50", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9685abf-eaef-468f-91e1-f758892cb151", "record_id": "flaws_cloudtrail:0000585:a9685abf-eaef-468f-91e1-f758892cb151", "row_index": 585, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9685abf-eaef-468f-91e1-f758892cb151", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f862219e0-37aa-4b11-95ac-a941cafd4e5d", "record_id": "flaws_cloudtrail:0000586:f862219e0-37aa-4b11-95ac-a941cafd4e5d", "row_index": 586, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1846, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f862219e0-37aa-4b11-95ac-a941cafd4e5d", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cyjCxMyx65z_V1JMoMCdMel0IYrtS5AfFAdzpkuKpdOmK2RIqR_uV3FwUTOZTkOAiGtYhV4gfc86qyLhpD6pA48ggSAozeRPS_l_xWFkSx5Qx51SOujh2JVojci_XjaGgEbBMGehlZMk8uYPx_RHRERGyteCHQb8FjCEAwYB507Nq2U--B0zOdYoexljxOHLuhH4U6drZ6lyrH5Yp4oH8fIxTNqop2x3Dfs3m-W0IpbCmajBbzDje8I-5qhuPghn6LEMIE7vAKnEYxCtV0W668tYUMAYeYvD4Qn6IzXZvqY9fE23nI6hmMlAxzKzsUxbBmoSFWLmJzkPKzXTwLLPGeMNW7Ix_ByEzDpfztvu4YZ-xUiivpqi69TNmQJoPzBcjm3VynvED9Tz8VT9kgMDEXfjbBvCe0B_3q0hl_qAPLnoR-z07kVz3ZFvL7tOKXC4tvJUNPNPlOBMo3ZffPlNHUhfl5r09LthpMRbe-fhrzhVmgvg02dZ_Slq2JLo36u6QeP8Zmubzh5AGHnpNgFSHqPiPcgrKerGuVue_FTvdX6hmrfyK89l7OKU-78iGRtpZDKwV-3ONSCEbYcEWIWT88KXugXe_m83P-UJ_kX1Kn3AQJFrUubydVwYsOW1Sn9x8ZQxL2stB2tBSDbh2FEwxmX_25TmR9mv6HM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3684b696-65f3-48a9-8138-b556cfc968b0", "record_id": "flaws_cloudtrail:0000587:3684b696-65f3-48a9-8138-b556cfc968b0", "row_index": 587, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3684b696-65f3-48a9-8138-b556cfc968b0", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "record_id": "flaws_cloudtrail:0000588:4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "row_index": 588, "timestamp": "2019-08-21T14:53:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1988, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ae5cd5f-3f53-4134-a1f0-f2f70ed81ca3", "eventTime": "2019-08-21T14:53:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0gUA-2l_TmyiePFszeYKV7czuPgzJZH0m5lveWKVqIUbFMJSeO9UUfpVPWJ4PJ6sDs4gkoDGdWCqKEbX3hacC0wcJas0BwctkV1dZSNgAMueeLHOI7dD8XaQ_RZrKrUr1c1aR_2muyvb_4uP_CPVRcwBRGPD9CCNFzilNH01LHbOMZ8hQqcORpxe6O7cowLSq54g8wTK3GWCYsDaDUSLgMckXvHZyKf3aY7WGmMnjnoobmrbYwbFMM_36aMUH2WKPrGFeAZeIyw0KzeLRMZYfSsNHqDkHgEBjyzSyCjA8D5oQB_wME9DOGqTwVxdqUb7rpk2w_-Xc9Rk6--slYDTfPMo5GZ1QYfl4uRazWlN1khzjU-ikdFDewwO3cYM-qCbDsAQeWJlktBmrsG3G2zZSATKOd2uscml1uztrFrVLRY9ZzWbaglP0pvO_Gg_wWB3kYYx4ZtVvIeoi4HIx-9_CZIbSQYU3-IsfVXvWNRCdpej7G85U5-h_nrns2dklwi5pJvSTMqJZAxrY-pmrq1vH9YlEWMvSaYl-Me-ZOPLiT0aN4G-M8xGKlIEhoP83fjHSuQbHc-rCDv8C_KARv-4Y66AQmyh734eTirBalKlrDpSdVIE2fnUhLvPImW0NsQ2gh1aqLxh2Skg4bIBPnJVzyZy71G4JgrgBFw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a0d9e15-a295-4aed-95a1-4f342815", "record_id": "flaws_cloudtrail:0000589:6a0d9e15-a295-4aed-95a1-4f342815", "row_index": 589, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a0d9e15-a295-4aed-95a1-4f342815", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2942e9b3-6f32-4628-a6b5-914c8b4c7908", "record_id": "flaws_cloudtrail:0000590:2942e9b3-6f32-4628-a6b5-914c8b4c7908", "row_index": 590, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2942e9b3-6f32-4628-a6b5-914c8b4c7908", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "record_id": "flaws_cloudtrail:0000591:7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "row_index": 591, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59a622f-7968-41cb-9660-529ef347186a2", "record_id": "flaws_cloudtrail:0000592:e59a622f-7968-41cb-9660-529ef347186a2", "row_index": 592, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59a622f-7968-41cb-9660-529ef347186a2", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390a760b-df23-4e8c-a91e-78bd1d8aea84", "record_id": "flaws_cloudtrail:0000593:390a760b-df23-4e8c-a91e-78bd1d8aea84", "row_index": 593, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390a760b-df23-4e8c-a91e-78bd1d8aea84", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tz7IU7p5ofKMd00DU37M-9Wg83PHSqCPmA1gXC4nhxlI_NOG93WEWpQYk6eaMM26xQYZTWupA41Aw_xrSm0LAQsMhujvFg0Q3awbSI-6W_8I79ZafVmBYiCutb9_0Afrle1M1nSHSuPsqTrSO_pdXV5AL5_E-a1oPX5g9Wq-h_M60Qtd01q8PSam0fLeAeZnibGVCisymCgvYMOE1LBsQhiuJLCgE5MvrOMlbMi5tLS_Mz2E0rGbULi3Y1fLv1W0N0VfW7y-l7H_LtOWXAKLOSYw1-deBfOsw1LiYMkA01kXjdKJATgVep5m8sekbPGLDun5SAj2A8lCmR8prcvVsE8A8GlnZNfMssf3I0_PG_vTzP9h_clRxN8SSvAOSvCrawUYMcZ7cXZNyLweAW22Scd5J2VGPLfpdF4Vuo6yMbDUIdRV_b_jvwYyF0GyrPh_2us9mbEILW4s0lGHSmegnosQd-8WJltgS1Y_WMo_qPlCcrewjgEHKi1xKpqpIud12n7EVtB2cEcsuS_4FFJRJJHrHyena_ZCIxvSwQGr3rQbCHNq4g7jR_D_0F6F-SDpOJZK7Tn7AGWndkl3LCusZyH3Bmqk52z7r9KLKQkzRzm5bxyMVB2RG9nVwlYYcAZISRU4yCEQtRW7f-fGvdqztHT21dmE_RVHQw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "921579-b65f-4a51-ac5c-9e5da524beb9", "record_id": "flaws_cloudtrail:0000594:921579-b65f-4a51-ac5c-9e5da524beb9", "row_index": 594, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1292, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "921579-b65f-4a51-ac5c-9e5da524beb9", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737ac1de-1602-40d9-881e-87884c700efb", "record_id": "flaws_cloudtrail:0000595:737ac1de-1602-40d9-881e-87884c700efb", "row_index": 595, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1843, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737ac1de-1602-40d9-881e-87884c700efb", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cHPxQbokNjrmd4AnYE0CBMZ51MBG5FWYFV2LMKs-eE-Rw6qgPrYWf0XOnfdmZ898VepCDU6qJLQaDO3XMSmhuogkA1wh3tcbaJKEBmBqKFhVn-ZT5pF_wCvxmAo-PApgBeIIY5fDOkBCB0_BIWEE9S5_873xcan4fxPxqDvuvWtosSKyqeCU3XhDDfZzibBM0vKoT_mEGK0UCWZ1DhbT9HUH3cK3VLwg4P6fp_NmAjQic6kp9k55QBqD1cEeGHnf6imzNtTIIcyDK5DswkyD9eOEXN1CzQBvdBXD2SoBV10YP5BAfFca3tfdKzexm9PRR_EqhWkDc1xFOAkIyEDr_2bC2tZ2wk03Oea6Hv-xj5wDHw3r5dlyjW2wpBOsrrCv2oiF9fNtpAwYn88f28P_v36tck7eM5QEixvxyUf9QZpFvpFxO7EACJD3bitili6S_ivFkOUgml_hgMHpdGHAueT_87VoGw3TJ2Sp1sm8blyw5ijqpXIaiSKIMy4rq2co0zQJ0nSXphGrw_m3iRqknD3-E0wVNV-YB3Na8EDxVLqXg8NqAGdX8nxPsZz6Qm7_mvP9yTuQJ9W_cDS7Uvh1pNS7nHdGcL7IJ7JzFJh-mq4emi7a-WAj7tL9jGk7DQfvioflz_h2ssh1sFt-Bkdm5DB3fO9uxSUI9w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28480e9-93af-4b1f-9621-e4ac3f390ded", "record_id": "flaws_cloudtrail:0000596:28480e9-93af-4b1f-9621-e4ac3f390ded", "row_index": 596, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1984, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28480e9-93af-4b1f-9621-e4ac3f390ded", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aYlDR9UaiueuuNn5IoLg8zBum1HQFcQKCEE-5mKxC8bL99A_slXFegBP0C0-5dle1l0AIPdh7uPhv8DMHOa1lWIlNMUVLeuiuxXEkIEIUfrnVzjkW6wLKO_3428Mf-YEavAfffIoZ41t_CS1i8b-FNwIc-Zga_CE7MRfLrVzC6lI7luz6Avy1EIkUqOU7vRZMh24BIYNyXQ0cdjMR2yQa37kakEkLLNSidG8ZJ2Q_6ZQdu_nQA-yXe0DhURxxcB_Pt1bae1FObiKfQUkSSmjE6Gfm0E4PPVHHjSWVc5MVeK68oCF9XNVYEoQuWWmrxmtQJZJd7IgZJRaFoGuBEon4kkTjvPbThSgNgmjcKXkT7HnojELN-tsr3vmjieRMIU9hlPVsPNsKsumv4g0p7zYcX1VVcwEUig7emADo6sGTnrqzmFvpOgkbXq_dvZEU-5xGLTsDVFbPrdAUkMKCm0E7zAgx4jPZUyR0JrAAGdXLrIcMtA9dR9ZNXTfcyqBOvLmO8I0345OyH1AUsepwnHdi5ORIrKvziGx8qwM3W5p0W3cxTnIitklTRoWRkbs6lwE3rVlW4ier8wR1EoyAj1jr368BWpdHVwBHWM6lKFqUrCSOY4MAImqMKD9ylelzfgNgBmtDcl7F2jAJgbnpePso9RbfOszE81G", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97c1a12-f9ee-4784-8868-53cef976bcb7", "record_id": "flaws_cloudtrail:0000597:f97c1a12-f9ee-4784-8868-53cef976bcb7", "row_index": 597, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1987, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97c1a12-f9ee-4784-8868-53cef976bcb7", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZQbjz2Nn99K4D5KpWY4TfvYVHvucyTpHqwE5BlyMB0l1-JGxdN1lj3jxBkQkGnQSyeSkC5A6iRYM1NRUUMh1JrnfDSUENhTSz3532TLMIqu8kwR7oc5KZQI9uXYX7e61dfpTD7NepO2ggj2v0f7U8CpBfesxu4Dts1U535voTr-0tgTKOEe6D9751lG-a0rjnucAj8tpq78yRN-UimDd-ZOye0nos6ZV7IyQ46zpJn-vUWpUSi1Z7zz2XhZS4m8-v7QxiubRTEXi17QKvdQnfv_1ridw3ifvKYaGbimQ2sXHtZ-B093Lk5dcQ0-ETEL1B3xtkam3sIF4m3kZr4LSOYZCEjmpQXWqxUyAf7szbPCym53Vh1dS3xnJuyy02GvP4-BeGYtIt1v6pGxGHnRw3rn04mq4089niYhAm6m_l4GAr8jYoHdVbIegaD3m5F1UITm4yS8ytXVUUtCHyEzVWxsDbEQzptx03lI5sUAb6Y-4jw9WdUi1XSZRPKQ8aBqWU7Asp0_dYGhAN0668z7_RbaWgclthJeeMfdVhmZPwebCkc4Pxy_ncjjdLY981ufls-H3DHa3EWOwVTM48RaqJqMBlMINqWURbhWqul1aMXrSrKC8dCHRUXfxYAhbG6E2Dk9hY2vdFNq4qcTFDlJgxdOap3hKIiUx2ws", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a0d9e15-a295-4aed-95a1-4f342815", "record_id": "flaws_cloudtrail:0000598:6a0d9e15-a295-4aed-95a1-4f342815", "row_index": 598, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a0d9e15-a295-4aed-95a1-4f342815", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2942e9b3-6f32-4628-a6b5-914c8b4c7908", "record_id": "flaws_cloudtrail:0000599:2942e9b3-6f32-4628-a6b5-914c8b4c7908", "row_index": 599, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2942e9b3-6f32-4628-a6b5-914c8b4c7908", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "record_id": "flaws_cloudtrail:0000600:7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "row_index": 600, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1af28c-8cb3-4c51-90c2-e1dd3508a352", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59a622f-7968-41cb-9660-529ef347186a2", "record_id": "flaws_cloudtrail:0000601:e59a622f-7968-41cb-9660-529ef347186a2", "row_index": 601, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59a622f-7968-41cb-9660-529ef347186a2", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390a760b-df23-4e8c-a91e-78bd1d8aea84", "record_id": "flaws_cloudtrail:0000602:390a760b-df23-4e8c-a91e-78bd1d8aea84", "row_index": 602, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390a760b-df23-4e8c-a91e-78bd1d8aea84", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tz7IU7p5ofKMd00DU37M-9Wg83PHSqCPmA1gXC4nhxlI_NOG93WEWpQYk6eaMM26xQYZTWupA41Aw_xrSm0LAQsMhujvFg0Q3awbSI-6W_8I79ZafVmBYiCutb9_0Afrle1M1nSHSuPsqTrSO_pdXV5AL5_E-a1oPX5g9Wq-h_M60Qtd01q8PSam0fLeAeZnibGVCisymCgvYMOE1LBsQhiuJLCgE5MvrOMlbMi5tLS_Mz2E0rGbULi3Y1fLv1W0N0VfW7y-l7H_LtOWXAKLOSYw1-deBfOsw1LiYMkA01kXjdKJATgVep5m8sekbPGLDun5SAj2A8lCmR8prcvVsE8A8GlnZNfMssf3I0_PG_vTzP9h_clRxN8SSvAOSvCrawUYMcZ7cXZNyLweAW22Scd5J2VGPLfpdF4Vuo6yMbDUIdRV_b_jvwYyF0GyrPh_2us9mbEILW4s0lGHSmegnosQd-8WJltgS1Y_WMo_qPlCcrewjgEHKi1xKpqpIud12n7EVtB2cEcsuS_4FFJRJJHrHyena_ZCIxvSwQGr3rQbCHNq4g7jR_D_0F6F-SDpOJZK7Tn7AGWndkl3LCusZyH3Bmqk52z7r9KLKQkzRzm5bxyMVB2RG9nVwlYYcAZISRU4yCEQtRW7f-fGvdqztHT21dmE_RVHQw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "921579-b65f-4a51-ac5c-9e5da524beb9", "record_id": "flaws_cloudtrail:0000603:921579-b65f-4a51-ac5c-9e5da524beb9", "row_index": 603, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1292, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "921579-b65f-4a51-ac5c-9e5da524beb9", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737ac1de-1602-40d9-881e-87884c700efb", "record_id": "flaws_cloudtrail:0000604:737ac1de-1602-40d9-881e-87884c700efb", "row_index": 604, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1843, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737ac1de-1602-40d9-881e-87884c700efb", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cHPxQbokNjrmd4AnYE0CBMZ51MBG5FWYFV2LMKs-eE-Rw6qgPrYWf0XOnfdmZ898VepCDU6qJLQaDO3XMSmhuogkA1wh3tcbaJKEBmBqKFhVn-ZT5pF_wCvxmAo-PApgBeIIY5fDOkBCB0_BIWEE9S5_873xcan4fxPxqDvuvWtosSKyqeCU3XhDDfZzibBM0vKoT_mEGK0UCWZ1DhbT9HUH3cK3VLwg4P6fp_NmAjQic6kp9k55QBqD1cEeGHnf6imzNtTIIcyDK5DswkyD9eOEXN1CzQBvdBXD2SoBV10YP5BAfFca3tfdKzexm9PRR_EqhWkDc1xFOAkIyEDr_2bC2tZ2wk03Oea6Hv-xj5wDHw3r5dlyjW2wpBOsrrCv2oiF9fNtpAwYn88f28P_v36tck7eM5QEixvxyUf9QZpFvpFxO7EACJD3bitili6S_ivFkOUgml_hgMHpdGHAueT_87VoGw3TJ2Sp1sm8blyw5ijqpXIaiSKIMy4rq2co0zQJ0nSXphGrw_m3iRqknD3-E0wVNV-YB3Na8EDxVLqXg8NqAGdX8nxPsZz6Qm7_mvP9yTuQJ9W_cDS7Uvh1pNS7nHdGcL7IJ7JzFJh-mq4emi7a-WAj7tL9jGk7DQfvioflz_h2ssh1sFt-Bkdm5DB3fO9uxSUI9w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28480e9-93af-4b1f-9621-e4ac3f390ded", "record_id": "flaws_cloudtrail:0000605:28480e9-93af-4b1f-9621-e4ac3f390ded", "row_index": 605, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1984, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28480e9-93af-4b1f-9621-e4ac3f390ded", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aYlDR9UaiueuuNn5IoLg8zBum1HQFcQKCEE-5mKxC8bL99A_slXFegBP0C0-5dle1l0AIPdh7uPhv8DMHOa1lWIlNMUVLeuiuxXEkIEIUfrnVzjkW6wLKO_3428Mf-YEavAfffIoZ41t_CS1i8b-FNwIc-Zga_CE7MRfLrVzC6lI7luz6Avy1EIkUqOU7vRZMh24BIYNyXQ0cdjMR2yQa37kakEkLLNSidG8ZJ2Q_6ZQdu_nQA-yXe0DhURxxcB_Pt1bae1FObiKfQUkSSmjE6Gfm0E4PPVHHjSWVc5MVeK68oCF9XNVYEoQuWWmrxmtQJZJd7IgZJRaFoGuBEon4kkTjvPbThSgNgmjcKXkT7HnojELN-tsr3vmjieRMIU9hlPVsPNsKsumv4g0p7zYcX1VVcwEUig7emADo6sGTnrqzmFvpOgkbXq_dvZEU-5xGLTsDVFbPrdAUkMKCm0E7zAgx4jPZUyR0JrAAGdXLrIcMtA9dR9ZNXTfcyqBOvLmO8I0345OyH1AUsepwnHdi5ORIrKvziGx8qwM3W5p0W3cxTnIitklTRoWRkbs6lwE3rVlW4ier8wR1EoyAj1jr368BWpdHVwBHWM6lKFqUrCSOY4MAImqMKD9ylelzfgNgBmtDcl7F2jAJgbnpePso9RbfOszE81G", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97c1a12-f9ee-4784-8868-53cef976bcb7", "record_id": "flaws_cloudtrail:0000606:f97c1a12-f9ee-4784-8868-53cef976bcb7", "row_index": 606, "timestamp": "2019-08-21T14:53:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1987, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97c1a12-f9ee-4784-8868-53cef976bcb7", "eventTime": "2019-08-21T14:53:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZQbjz2Nn99K4D5KpWY4TfvYVHvucyTpHqwE5BlyMB0l1-JGxdN1lj3jxBkQkGnQSyeSkC5A6iRYM1NRUUMh1JrnfDSUENhTSz3532TLMIqu8kwR7oc5KZQI9uXYX7e61dfpTD7NepO2ggj2v0f7U8CpBfesxu4Dts1U535voTr-0tgTKOEe6D9751lG-a0rjnucAj8tpq78yRN-UimDd-ZOye0nos6ZV7IyQ46zpJn-vUWpUSi1Z7zz2XhZS4m8-v7QxiubRTEXi17QKvdQnfv_1ridw3ifvKYaGbimQ2sXHtZ-B093Lk5dcQ0-ETEL1B3xtkam3sIF4m3kZr4LSOYZCEjmpQXWqxUyAf7szbPCym53Vh1dS3xnJuyy02GvP4-BeGYtIt1v6pGxGHnRw3rn04mq4089niYhAm6m_l4GAr8jYoHdVbIegaD3m5F1UITm4yS8ytXVUUtCHyEzVWxsDbEQzptx03lI5sUAb6Y-4jw9WdUi1XSZRPKQ8aBqWU7Asp0_dYGhAN0668z7_RbaWgclthJeeMfdVhmZPwebCkc4Pxy_ncjjdLY981ufls-H3DHa3EWOwVTM48RaqJqMBlMINqWURbhWqul1aMXrSrKC8dCHRUXfxYAhbG6E2Dk9hY2vdFNq4qcTFDlJgxdOap3hKIiUx2ws", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f106cd9-bcb6-42c7-8501-70755bd35", "record_id": "flaws_cloudtrail:0000607:1f106cd9-bcb6-42c7-8501-70755bd35", "row_index": 607, "timestamp": "2019-08-21T14:53:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f106cd9-bcb6-42c7-8501-70755bd35", "eventTime": "2019-08-21T14:53:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: NBWfGwLRhDWO65B8CDl4NXxQlNp-ivzlVlI3RTVu4J3maTqwoesCNOhixLxvLMdB-qdS22qnRX4gnPIbNjelfeuGRTZwh_fgVx4zI7txdDkd-lIoWd1toWsfajkLiTkRaEkA6BtneiW73ns1WZARk2ImPSeOMz12LTMLpOUa1hbrKf6vClziLawb6WPo2Akwk_69FGBXfzKH-ZWXXI3IKR1tDqLfl_9Jjem3SKc_YaEqShY-w1Nm1v1upPTNcHbKZ_X53bJS1qQ5sMiEhyCcUI8EzA8mm4V_VOwH9FSygclF3dx0hqcTtkh8erc1v1mTcB2noh5rugd07q9HeXK3yAK6g9VCdVd7hT6XoOxPjtIIuIAihq_pcEymCYve3erJYm4ECTVLtAh6wRRAH-MEj5KS-I847gDqL8RssW7tCV2HoA4EI--26Ppoq2T5mrfULiS9GxxZekBgye1QgThxZSZTtabp0tihjqHQ9dRjcmIoW0FHjCTiqDqu08aXmfUoLcfVwXET_XPgmeSzo4fLS2MLsWSniFeeghMw8JKfiPTjpxKx3zma3iL_rdfWBe_ngb3rKnmsCwcd75_dYJtidDz2Iao8KJDtBZb07mTLNbDrRWOU9OHNTDy3dMjW6cNXr75_W7TZxTYznbCaV6hFejJWdaXAqnwCzWoSvD6E", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf453077f-706b-4c61-b553-a50d4daef2e9", "record_id": "flaws_cloudtrail:0000608:bf453077f-706b-4c61-b553-a50d4daef2e9", "row_index": 608, "timestamp": "2019-08-21T14:53:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf453077f-706b-4c61-b553-a50d4daef2e9", "eventTime": "2019-08-21T14:53:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aa86e65-d8bd-454f-a9e4-44017f68af3", "record_id": "flaws_cloudtrail:0000609:4aa86e65-d8bd-454f-a9e4-44017f68af3", "row_index": 609, "timestamp": "2019-08-21T14:53:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1850, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aa86e65-d8bd-454f-a9e4-44017f68af3", "eventTime": "2019-08-21T14:53:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OJKzprpsyc-vglSsnuoeQuPWmSoUXc4lbBfHwv45e1hO2gD1nm4l5r0shzLvQg5Jyz2reyBUSUmQL0f4ofA4eMzSvYVTQxYOQ9I-Qij2oyrOSzBhL3kcwklAECtoGTwxueHHiNrbOsk6XFjtWs-UtLWag1J5JHb7d5l112X2aMh74m7uHyeXmmtTStnUb7LkorGxGtzVlAcch-LC524Kvsh-AZADXhjYt0mv9WBm3T3Z3XX38F1rPlceHCIWkjkBGEm99WXfp0SyaPICHUg-jPxRKpNuPklHZX6AFyiZcM3Z8B0yAlp1b-gRP201wTc_uGXd2X2nmfAkXBOLrXEEmIpTe7FEglRlKI9Vmi7xQ831lGHPt8TEicyT0mN51N8IdpYpaMyHarb5rGfx3evznZsbKIdcQ-sDjFONFOogKt8uemqYMa7t72IwG1zrbCGJQePYYlLWIfnT_gF9AFWM-3qPLdscrDbn6M9yV5pwIKjvyW9tahhsx05c268nZ7mG1HWrSYChcZp8BSgAHZECx54fVgLIbhuQmqbO8yhILaGCQ7TeDFIDOeXzK-_iEZjIF0bzwMrNXmrRaWEsKUS3nRjtIQYOI7lWots7dvSxMMjiTaxwngBxnjlcpiMXsdhJtXp1W12L8Dm4KEsaXJVeJj-LQ1NtTOiBetVMuQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec61517-0021-4082-827c-722c11d8baf0", "record_id": "flaws_cloudtrail:0000610:8ec61517-0021-4082-827c-722c11d8baf0", "row_index": 610, "timestamp": "2019-08-21T14:53:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1854, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec61517-0021-4082-827c-722c11d8baf0", "eventTime": "2019-08-21T14:53:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CjXBF4XH2kYu7EzVxt7Jl3D1b3vna36y0dF0Y1v66dF6VNJBtRmHCLnVThy26aZvqRA5xnZwG214oTC1nyd5IOTE1oLAYzza3gtUbxgXeFP9AFYKOku60AXIaSG6Tvei3n8g8PRWeUyoinukbjIEZxsMvt70AfMCpdKh8ist2N9LPyvH1nSwthhoyVw1utfjJtzUyJOAVcYekdL3skgD_hNb1tm4NjnVzQ5Lzc4hVUIsld-UjnKzDZfMrQo8paF49xXyiw9M-_NYT3J1BbuqWw-ZPvB8_-z3kExFMXBBHbFiVeYiq3WXqu2tHoUn0CkCxD393RB2HX0UP6NNDOuM3YpqIKlsRJwZwlAYNozxVPgMdWHVMydyohJaBifL_YvSCKyk8ESCwzDHRRRR1RF-CvOzjIGeGuqjlhsSZeT4CmHnDTwJnCjZMsOZlKhKmoxy3CS523shUXwEhGmw2M-7pLbqcX4LzjksUTin2QcjH9LcwLEFevWld_KoFciZD5yhSZikPNhBs-S23iqw57R_c0st8HN-M_EW809ZUuoikVSkOZ2-ITpR5rgfc7hZQ2dmigMSlq8LjtqC05T2iaKcWaRVgxe79WBGDMulwmuN-sbhWMw5tbXOmNiwbv4bfQIyEX8xME7j6ctUeQlkmh2ikkFeJGo_PDW9Q299uQk", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c6228d6-aa9c-4012-a137-839a512987", "record_id": "flaws_cloudtrail:0000611:9c6228d6-aa9c-4012-a137-839a512987", "row_index": 611, "timestamp": "2019-08-21T14:53:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1434, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c6228d6-aa9c-4012-a137-839a512987", "eventTime": "2019-08-21T14:53:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}