Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032edd0e-f92e-4eef-8123-0dd4fcc4de8c", "record_id": "flaws_cloudtrail:0000000:032edd0e-f92e-4eef-8123-0dd4fcc4de8c", "row_index": 0, "timestamp": "2019-05-19T20:12:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032edd0e-f92e-4eef-8123-0dd4fcc4de8c", "eventTime": "2019-05-19T20:12:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9f007d5-d647-4be1-bea0-a20a75c7ec7f", "record_id": "flaws_cloudtrail:0000001:d9f007d5-d647-4be1-bea0-a20a75c7ec7f", "row_index": 1, "timestamp": "2019-05-19T20:12:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9f007d5-d647-4be1-bea0-a20a75c7ec7f", "eventTime": "2019-05-19T20:12:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05409b2-dccf-49bd-9eab-5707f9c4020f", "record_id": "flaws_cloudtrail:0000002:05409b2-dccf-49bd-9eab-5707f9c4020f", "row_index": 2, "timestamp": "2019-05-19T20:13:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05409b2-dccf-49bd-9eab-5707f9c4020f", "eventTime": "2019-05-19T20:13:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d3f0e43-c978-485b-b860-2366e334a341", "record_id": "flaws_cloudtrail:0000003:3d3f0e43-c978-485b-b860-2366e334a341", "row_index": 3, "timestamp": "2019-05-19T20:13:50Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d3f0e43-c978-485b-b860-2366e334a341", "eventTime": "2019-05-19T20:13:50Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a632c166-f77f-4f29-951d-706b53955b43", "record_id": "flaws_cloudtrail:0000004:a632c166-f77f-4f29-951d-706b53955b43", "row_index": 4, "timestamp": "2019-05-19T20:13:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a632c166-f77f-4f29-951d-706b53955b43", "eventTime": "2019-05-19T20:13:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05409b2-dccf-49bd-9eab-5707f9c4020f", "record_id": "flaws_cloudtrail:0000005:05409b2-dccf-49bd-9eab-5707f9c4020f", "row_index": 5, "timestamp": "2019-05-19T20:13:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05409b2-dccf-49bd-9eab-5707f9c4020f", "eventTime": "2019-05-19T20:13:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d3f0e43-c978-485b-b860-2366e334a341", "record_id": "flaws_cloudtrail:0000006:3d3f0e43-c978-485b-b860-2366e334a341", "row_index": 6, "timestamp": "2019-05-19T20:13:50Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d3f0e43-c978-485b-b860-2366e334a341", "eventTime": "2019-05-19T20:13:50Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a632c166-f77f-4f29-951d-706b53955b43", "record_id": "flaws_cloudtrail:0000007:a632c166-f77f-4f29-951d-706b53955b43", "row_index": 7, "timestamp": "2019-05-19T20:13:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a632c166-f77f-4f29-951d-706b53955b43", "eventTime": "2019-05-19T20:13:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe51bba-be2e-4ba6-941e-88388b23941c", "record_id": "flaws_cloudtrail:0000008:3fe51bba-be2e-4ba6-941e-88388b23941c", "row_index": 8, "timestamp": "2019-05-19T20:13:52Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe51bba-be2e-4ba6-941e-88388b23941c", "eventTime": "2019-05-19T20:13:52Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2b5244-7c69-4a3d-b5e4-00492e5df8", "record_id": "flaws_cloudtrail:0000009:dc2b5244-7c69-4a3d-b5e4-00492e5df8", "row_index": 9, "timestamp": "2019-05-19T20:14:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2b5244-7c69-4a3d-b5e4-00492e5df8", "eventTime": "2019-05-19T20:14:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2b5244-7c69-4a3d-b5e4-00492e5df8", "record_id": "flaws_cloudtrail:0000010:dc2b5244-7c69-4a3d-b5e4-00492e5df8", "row_index": 10, "timestamp": "2019-05-19T20:14:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2b5244-7c69-4a3d-b5e4-00492e5df8", "eventTime": "2019-05-19T20:14:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f04317e-ff5a-4707-8b21-4641c93a4d68", "record_id": "flaws_cloudtrail:0000011:7f04317e-ff5a-4707-8b21-4641c93a4d68", "row_index": 11, "timestamp": "2019-05-19T20:14:01Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f04317e-ff5a-4707-8b21-4641c93a4d68", "eventTime": "2019-05-19T20:14:01Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "record_id": "flaws_cloudtrail:0000012:74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "row_index": 12, "timestamp": "2019-05-19T20:14:01Z", "event_type": "ListPoliciesGrantingServiceAccess", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1128, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "eventTime": "2019-05-19T20:14:01Z", "eventName": "ListPoliciesGrantingServiceAccess", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"serviceNamespaces": ["ec2", "s3"], "arn": "arn:aws:iam::811596193553:user/Level6"}, "responseElements": {"policiesGrantingServiceAccess": [{"policies": [{"policyType": "MANAGED", "policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "policyName": "MySecurityAudit"}], "serviceNamespace": "ec2"}, {"policies": [{"policyType": "MANAGED", "policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "policyName": "MySecurityAudit"}], "serviceNamespace": "s3"}], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf3876a6-60b1-4a3c-8737-359cb5dde87e", "record_id": "flaws_cloudtrail:0000013:bf3876a6-60b1-4a3c-8737-359cb5dde87e", "row_index": 13, "timestamp": "2019-05-19T20:14:01Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf3876a6-60b1-4a3c-8737-359cb5dde87e", "eventTime": "2019-05-19T20:14:01Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f04317e-ff5a-4707-8b21-4641c93a4d68", "record_id": "flaws_cloudtrail:0000014:7f04317e-ff5a-4707-8b21-4641c93a4d68", "row_index": 14, "timestamp": "2019-05-19T20:14:01Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f04317e-ff5a-4707-8b21-4641c93a4d68", "eventTime": "2019-05-19T20:14:01Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "record_id": "flaws_cloudtrail:0000015:74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "row_index": 15, "timestamp": "2019-05-19T20:14:01Z", "event_type": "ListPoliciesGrantingServiceAccess", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1128, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a9ab9d-e8a6-4692-8065-7fcf9a52a8d5", "eventTime": "2019-05-19T20:14:01Z", "eventName": "ListPoliciesGrantingServiceAccess", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"serviceNamespaces": ["ec2", "s3"], "arn": "arn:aws:iam::811596193553:user/Level6"}, "responseElements": {"policiesGrantingServiceAccess": [{"policies": [{"policyType": "MANAGED", "policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "policyName": "MySecurityAudit"}], "serviceNamespace": "ec2"}, {"policies": [{"policyType": "MANAGED", "policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "policyName": "MySecurityAudit"}], "serviceNamespace": "s3"}], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf3876a6-60b1-4a3c-8737-359cb5dde87e", "record_id": "flaws_cloudtrail:0000016:bf3876a6-60b1-4a3c-8737-359cb5dde87e", "row_index": 16, "timestamp": "2019-05-19T20:14:01Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf3876a6-60b1-4a3c-8737-359cb5dde87e", "eventTime": "2019-05-19T20:14:01Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5cd388d-bcbc-4e52-8f46-0e7307151528", "record_id": "flaws_cloudtrail:0000017:e5cd388d-bcbc-4e52-8f46-0e7307151528", "row_index": 17, "timestamp": "2019-05-19T20:14:52Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5cd388d-bcbc-4e52-8f46-0e7307151528", "eventTime": "2019-05-19T20:14:52Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9b01f35-8ffc-4dea-8463-b64c475c8ad7", "record_id": "flaws_cloudtrail:0000018:f9b01f35-8ffc-4dea-8463-b64c475c8ad7", "row_index": 18, "timestamp": "2019-05-19T20:15:23Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 561, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9b01f35-8ffc-4dea-8463-b64c475c8ad7", "eventTime": "2019-05-19T20:15:23Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a5fd07-adc0-4c53-a8d2-5bdbf7e8d026", "record_id": "flaws_cloudtrail:0000019:52a5fd07-adc0-4c53-a8d2-5bdbf7e8d026", "row_index": 19, "timestamp": "2019-05-19T20:15:59Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 559, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a5fd07-adc0-4c53-a8d2-5bdbf7e8d026", "eventTime": "2019-05-19T20:15:59Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16f22aef-ba15-48de-8fb4-2b1ca4fa9510", "record_id": "flaws_cloudtrail:0000020:16f22aef-ba15-48de-8fb4-2b1ca4fa9510", "row_index": 20, "timestamp": "2019-05-19T20:17:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16f22aef-ba15-48de-8fb4-2b1ca4fa9510", "eventTime": "2019-05-19T20:17:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e11f49fb-3844-4ac1-ab3f-a9e69951db77", "record_id": "flaws_cloudtrail:0000021:e11f49fb-3844-4ac1-ab3f-a9e69951db77", "row_index": 21, "timestamp": "2019-05-19T20:18:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 524, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e11f49fb-3844-4ac1-ab3f-a9e69951db77", "eventTime": "2019-05-19T20:18:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384c3c37-80e3-4edc-adc6-bc86c66fbd13", "record_id": "flaws_cloudtrail:0000022:384c3c37-80e3-4edc-adc6-bc86c66fbd13", "row_index": 22, "timestamp": "2019-05-19T20:19:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384c3c37-80e3-4edc-adc6-bc86c66fbd13", "eventTime": "2019-05-19T20:19:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a12476bc-af95-46ee-ba03-64c9859b9545", "record_id": "flaws_cloudtrail:0000023:a12476bc-af95-46ee-ba03-64c9859b9545", "row_index": 23, "timestamp": "2019-05-19T20:20:12Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a12476bc-af95-46ee-ba03-64c9859b9545", "eventTime": "2019-05-19T20:20:12Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0d1553-91d4-4e79-9514-dd1a69534341", "record_id": "flaws_cloudtrail:0000024:ab0d1553-91d4-4e79-9514-dd1a69534341", "row_index": 24, "timestamp": "2019-05-19T20:20:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 522, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0d1553-91d4-4e79-9514-dd1a69534341", "eventTime": "2019-05-19T20:20:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "record_id": "flaws_cloudtrail:0000025:31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "row_index": 25, "timestamp": "2019-05-19T20:21:18Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "eventTime": "2019-05-19T20:21:18Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "record_id": "flaws_cloudtrail:0000026:75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "row_index": 26, "timestamp": "2019-05-19T20:21:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "eventTime": "2019-05-19T20:21:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "record_id": "flaws_cloudtrail:0000027:31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "row_index": 27, "timestamp": "2019-05-19T20:21:18Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a4f381-4d53-45e7-8d75-a6e3d0079ca0", "eventTime": "2019-05-19T20:21:18Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "record_id": "flaws_cloudtrail:0000028:75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "row_index": 28, "timestamp": "2019-05-19T20:21:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75ccd230-0ed5-4a86-bcbb-f8a353db9ce8", "eventTime": "2019-05-19T20:21:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae3c182a-faf7-4b35-85fa-0f244e835ac7", "record_id": "flaws_cloudtrail:0000029:ae3c182a-faf7-4b35-85fa-0f244e835ac7", "row_index": 29, "timestamp": "2019-05-19T20:21:19Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae3c182a-faf7-4b35-85fa-0f244e835ac7", "eventTime": "2019-05-19T20:21:19Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ad8cd54-af4d-4066-9347-0913d6d75a6f", "record_id": "flaws_cloudtrail:0000030:1ad8cd54-af4d-4066-9347-0913d6d75a6f", "row_index": 30, "timestamp": "2019-05-19T20:21:19Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ad8cd54-af4d-4066-9347-0913d6d75a6f", "eventTime": "2019-05-19T20:21:19Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae3c182a-faf7-4b35-85fa-0f244e835ac7", "record_id": "flaws_cloudtrail:0000031:ae3c182a-faf7-4b35-85fa-0f244e835ac7", "row_index": 31, "timestamp": "2019-05-19T20:21:19Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae3c182a-faf7-4b35-85fa-0f244e835ac7", "eventTime": "2019-05-19T20:21:19Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ad8cd54-af4d-4066-9347-0913d6d75a6f", "record_id": "flaws_cloudtrail:0000032:1ad8cd54-af4d-4066-9347-0913d6d75a6f", "row_index": 32, "timestamp": "2019-05-19T20:21:19Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ad8cd54-af4d-4066-9347-0913d6d75a6f", "eventTime": "2019-05-19T20:21:19Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd76a3e6-cae6-4359-9ba2-894648190867", "record_id": "flaws_cloudtrail:0000033:cd76a3e6-cae6-4359-9ba2-894648190867", "row_index": 33, "timestamp": "2019-05-19T20:21:42Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd76a3e6-cae6-4359-9ba2-894648190867", "eventTime": "2019-05-19T20:21:42Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd76a3e6-cae6-4359-9ba2-894648190867", "record_id": "flaws_cloudtrail:0000034:cd76a3e6-cae6-4359-9ba2-894648190867", "row_index": 34, "timestamp": "2019-05-19T20:21:42Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd76a3e6-cae6-4359-9ba2-894648190867", "eventTime": "2019-05-19T20:21:42Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "record_id": "flaws_cloudtrail:0000035:fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "row_index": 35, "timestamp": "2019-05-19T20:21:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "eventTime": "2019-05-19T20:21:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acb28ac-6214-441e-9440-84dec89a4936", "record_id": "flaws_cloudtrail:0000036:8acb28ac-6214-441e-9440-84dec89a4936", "row_index": 36, "timestamp": "2019-05-19T20:21:43Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acb28ac-6214-441e-9440-84dec89a4936", "eventTime": "2019-05-19T20:21:43Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["User"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80bfec80-cdb1-48b3-906c-b7c8121007e5", "record_id": "flaws_cloudtrail:0000037:80bfec80-cdb1-48b3-906c-b7c8121007e5", "row_index": 37, "timestamp": "2019-05-19T20:21:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80bfec80-cdb1-48b3-906c-b7c8121007e5", "eventTime": "2019-05-19T20:21:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "record_id": "flaws_cloudtrail:0000038:fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "row_index": 38, "timestamp": "2019-05-19T20:21:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcfedab4-32d3-459f-85a9-fb4cdf897b7f", "eventTime": "2019-05-19T20:21:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acb28ac-6214-441e-9440-84dec89a4936", "record_id": "flaws_cloudtrail:0000039:8acb28ac-6214-441e-9440-84dec89a4936", "row_index": 39, "timestamp": "2019-05-19T20:21:43Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acb28ac-6214-441e-9440-84dec89a4936", "eventTime": "2019-05-19T20:21:43Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["User"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80bfec80-cdb1-48b3-906c-b7c8121007e5", "record_id": "flaws_cloudtrail:0000040:80bfec80-cdb1-48b3-906c-b7c8121007e5", "row_index": 40, "timestamp": "2019-05-19T20:21:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80bfec80-cdb1-48b3-906c-b7c8121007e5", "eventTime": "2019-05-19T20:21:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a961e3-b5f2-453a-9255-eee8dfafe58e", "record_id": "flaws_cloudtrail:0000041:57a961e3-b5f2-453a-9255-eee8dfafe58e", "row_index": 41, "timestamp": "2019-05-19T20:22:18Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a961e3-b5f2-453a-9255-eee8dfafe58e", "eventTime": "2019-05-19T20:22:18Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5ea51b-db55-4728-bda6-bd452e94c339", "record_id": "flaws_cloudtrail:0000042:1a5ea51b-db55-4728-bda6-bd452e94c339", "row_index": 42, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5ea51b-db55-4728-bda6-bd452e94c339", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10f6908a-bed1-4396-9f24-cfba0eb3e85b", "record_id": "flaws_cloudtrail:0000043:10f6908a-bed1-4396-9f24-cfba0eb3e85b", "row_index": 43, "timestamp": "2019-05-19T20:22:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10f6908a-bed1-4396-9f24-cfba0eb3e85b", "eventTime": "2019-05-19T20:22:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6167e8df-828c-49d3-a67e-fe444285ff49", "record_id": "flaws_cloudtrail:0000044:6167e8df-828c-49d3-a67e-fe444285ff49", "row_index": 44, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6167e8df-828c-49d3-a67e-fe444285ff49", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["Group"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e0c376-0cbd-4339-958a-505f9d907552", "record_id": "flaws_cloudtrail:0000045:05e0c376-0cbd-4339-958a-505f9d907552", "row_index": 45, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e0c376-0cbd-4339-958a-505f9d907552", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5ea51b-db55-4728-bda6-bd452e94c339", "record_id": "flaws_cloudtrail:0000046:1a5ea51b-db55-4728-bda6-bd452e94c339", "row_index": 46, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5ea51b-db55-4728-bda6-bd452e94c339", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10f6908a-bed1-4396-9f24-cfba0eb3e85b", "record_id": "flaws_cloudtrail:0000047:10f6908a-bed1-4396-9f24-cfba0eb3e85b", "row_index": 47, "timestamp": "2019-05-19T20:22:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10f6908a-bed1-4396-9f24-cfba0eb3e85b", "eventTime": "2019-05-19T20:22:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6167e8df-828c-49d3-a67e-fe444285ff49", "record_id": "flaws_cloudtrail:0000048:6167e8df-828c-49d3-a67e-fe444285ff49", "row_index": 48, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6167e8df-828c-49d3-a67e-fe444285ff49", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["Group"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e0c376-0cbd-4339-958a-505f9d907552", "record_id": "flaws_cloudtrail:0000049:05e0c376-0cbd-4339-958a-505f9d907552", "row_index": 49, "timestamp": "2019-05-19T20:22:25Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e0c376-0cbd-4339-958a-505f9d907552", "eventTime": "2019-05-19T20:22:25Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "record_id": "flaws_cloudtrail:0000050:232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "row_index": 50, "timestamp": "2019-05-19T20:23:09Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "eventTime": "2019-05-19T20:23:09Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "record_id": "flaws_cloudtrail:0000051:232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "row_index": 51, "timestamp": "2019-05-19T20:23:09Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232f9cb0-c215-4adb-b7f1-c4c6611dfcfe", "eventTime": "2019-05-19T20:23:09Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277613-2e76-41c4-9227-73887a8a831", "record_id": "flaws_cloudtrail:0000052:277613-2e76-41c4-9227-73887a8a831", "row_index": 52, "timestamp": "2019-05-19T20:23:10Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277613-2e76-41c4-9227-73887a8a831", "eventTime": "2019-05-19T20:23:10Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca2d32f-6ee9-467c-9206-64b20cec5c35", "record_id": "flaws_cloudtrail:0000053:cca2d32f-6ee9-467c-9206-64b20cec5c35", "row_index": 53, "timestamp": "2019-05-19T20:23:10Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca2d32f-6ee9-467c-9206-64b20cec5c35", "eventTime": "2019-05-19T20:23:10Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["Group"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "record_id": "flaws_cloudtrail:0000054:c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "row_index": 54, "timestamp": "2019-05-19T20:23:10Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "eventTime": "2019-05-19T20:23:10Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277613-2e76-41c4-9227-73887a8a831", "record_id": "flaws_cloudtrail:0000055:277613-2e76-41c4-9227-73887a8a831", "row_index": 55, "timestamp": "2019-05-19T20:23:10Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277613-2e76-41c4-9227-73887a8a831", "eventTime": "2019-05-19T20:23:10Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca2d32f-6ee9-467c-9206-64b20cec5c35", "record_id": "flaws_cloudtrail:0000056:cca2d32f-6ee9-467c-9206-64b20cec5c35", "row_index": 56, "timestamp": "2019-05-19T20:23:10Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca2d32f-6ee9-467c-9206-64b20cec5c35", "eventTime": "2019-05-19T20:23:10Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["Group"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "record_id": "flaws_cloudtrail:0000057:c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "row_index": 57, "timestamp": "2019-05-19T20:23:10Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0772ebb-e6a2-4f29-b3b2-3642cb604fa8", "eventTime": "2019-05-19T20:23:10Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e7a608-b163-415f-ab74-f4cefb8f8749", "record_id": "flaws_cloudtrail:0000058:c3e7a608-b163-415f-ab74-f4cefb8f8749", "row_index": 58, "timestamp": "2019-05-19T20:23:23Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e7a608-b163-415f-ab74-f4cefb8f8749", "eventTime": "2019-05-19T20:23:23Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e7a608-b163-415f-ab74-f4cefb8f8749", "record_id": "flaws_cloudtrail:0000059:c3e7a608-b163-415f-ab74-f4cefb8f8749", "row_index": 59, "timestamp": "2019-05-19T20:23:23Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e7a608-b163-415f-ab74-f4cefb8f8749", "eventTime": "2019-05-19T20:23:23Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b6b723-8a79-4417-ba2d-cde932a6e0bd", "record_id": "flaws_cloudtrail:0000060:56b6b723-8a79-4417-ba2d-cde932a6e0bd", "row_index": 60, "timestamp": "2019-05-19T20:23:24Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b6b723-8a79-4417-ba2d-cde932a6e0bd", "eventTime": "2019-05-19T20:23:24Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326859e5-e6e0-4957-af72-c1c9a53d9377", "record_id": "flaws_cloudtrail:0000061:326859e5-e6e0-4957-af72-c1c9a53d9377", "row_index": 61, "timestamp": "2019-05-19T20:23:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326859e5-e6e0-4957-af72-c1c9a53d9377", "eventTime": "2019-05-19T20:23:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "record_id": "flaws_cloudtrail:0000062:5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "row_index": 62, "timestamp": "2019-05-19T20:23:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "eventTime": "2019-05-19T20:23:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b6b723-8a79-4417-ba2d-cde932a6e0bd", "record_id": "flaws_cloudtrail:0000063:56b6b723-8a79-4417-ba2d-cde932a6e0bd", "row_index": 63, "timestamp": "2019-05-19T20:23:24Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b6b723-8a79-4417-ba2d-cde932a6e0bd", "eventTime": "2019-05-19T20:23:24Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326859e5-e6e0-4957-af72-c1c9a53d9377", "record_id": "flaws_cloudtrail:0000064:326859e5-e6e0-4957-af72-c1c9a53d9377", "row_index": 64, "timestamp": "2019-05-19T20:23:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326859e5-e6e0-4957-af72-c1c9a53d9377", "eventTime": "2019-05-19T20:23:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "record_id": "flaws_cloudtrail:0000065:5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "row_index": 65, "timestamp": "2019-05-19T20:23:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fdf234b-a21e-4a68-a39a-e22f73bb22d3", "eventTime": "2019-05-19T20:23:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5fce416-5085-4c16-9595-47a7c167e500", "record_id": "flaws_cloudtrail:0000066:a5fce416-5085-4c16-9595-47a7c167e500", "row_index": 66, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5fce416-5085-4c16-9595-47a7c167e500", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2338b2c-2cae-4538-83c6-92a4ba494b05", "record_id": "flaws_cloudtrail:0000067:d2338b2c-2cae-4538-83c6-92a4ba494b05", "row_index": 67, "timestamp": "2019-05-19T20:24:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2338b2c-2cae-4538-83c6-92a4ba494b05", "eventTime": "2019-05-19T20:24:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "624827c-915e-4c42-aff9-44594f6ee", "record_id": "flaws_cloudtrail:0000068:624827c-915e-4c42-aff9-44594f6ee", "row_index": 68, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "624827c-915e-4c42-aff9-44594f6ee", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7942c6cb-bd00-498f-84ee-0db3b455d063", "record_id": "flaws_cloudtrail:0000069:7942c6cb-bd00-498f-84ee-0db3b455d063", "row_index": 69, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7942c6cb-bd00-498f-84ee-0db3b455d063", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5fce416-5085-4c16-9595-47a7c167e500", "record_id": "flaws_cloudtrail:0000070:a5fce416-5085-4c16-9595-47a7c167e500", "row_index": 70, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5fce416-5085-4c16-9595-47a7c167e500", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2338b2c-2cae-4538-83c6-92a4ba494b05", "record_id": "flaws_cloudtrail:0000071:d2338b2c-2cae-4538-83c6-92a4ba494b05", "row_index": 71, "timestamp": "2019-05-19T20:24:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2338b2c-2cae-4538-83c6-92a4ba494b05", "eventTime": "2019-05-19T20:24:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "624827c-915e-4c42-aff9-44594f6ee", "record_id": "flaws_cloudtrail:0000072:624827c-915e-4c42-aff9-44594f6ee", "row_index": 72, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "624827c-915e-4c42-aff9-44594f6ee", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7942c6cb-bd00-498f-84ee-0db3b455d063", "record_id": "flaws_cloudtrail:0000073:7942c6cb-bd00-498f-84ee-0db3b455d063", "row_index": 73, "timestamp": "2019-05-19T20:24:05Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7942c6cb-bd00-498f-84ee-0db3b455d063", "eventTime": "2019-05-19T20:24:05Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf4731f-080a-4d59-8faf-e7d7898f530c", "record_id": "flaws_cloudtrail:0000074:cdf4731f-080a-4d59-8faf-e7d7898f530c", "row_index": 74, "timestamp": "2019-05-19T20:24:18Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAM88OK6LIOES6RXWH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "108.83.95.178", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 531, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf4731f-080a-4d59-8faf-e7d7898f530c", "eventTime": "2019-05-19T20:24:18Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "108.83.95.178", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAM88OK6LIOES6RXWH", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180284a1-7612-441f-9512-1f7062ee0d01", "record_id": "flaws_cloudtrail:0000075:180284a1-7612-441f-9512-1f7062ee0d01", "row_index": 75, "timestamp": "2019-05-19T20:26:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180284a1-7612-441f-9512-1f7062ee0d01", "eventTime": "2019-05-19T20:26:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8213b548-4537-4312-883e-47908d095f99", "record_id": "flaws_cloudtrail:0000076:8213b548-4537-4312-883e-47908d095f99", "row_index": 76, "timestamp": "2019-05-19T20:26:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8213b548-4537-4312-883e-47908d095f99", "eventTime": "2019-05-19T20:26:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee373ba9-9e9d-43fa-a6c3-39128d87", "record_id": "flaws_cloudtrail:0000077:ee373ba9-9e9d-43fa-a6c3-39128d87", "row_index": 77, "timestamp": "2019-05-19T20:26:34Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee373ba9-9e9d-43fa-a6c3-39128d87", "eventTime": "2019-05-19T20:26:34Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180284a1-7612-441f-9512-1f7062ee0d01", "record_id": "flaws_cloudtrail:0000078:180284a1-7612-441f-9512-1f7062ee0d01", "row_index": 78, "timestamp": "2019-05-19T20:26:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180284a1-7612-441f-9512-1f7062ee0d01", "eventTime": "2019-05-19T20:26:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8213b548-4537-4312-883e-47908d095f99", "record_id": "flaws_cloudtrail:0000079:8213b548-4537-4312-883e-47908d095f99", "row_index": 79, "timestamp": "2019-05-19T20:26:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8213b548-4537-4312-883e-47908d095f99", "eventTime": "2019-05-19T20:26:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee373ba9-9e9d-43fa-a6c3-39128d87", "record_id": "flaws_cloudtrail:0000080:ee373ba9-9e9d-43fa-a6c3-39128d87", "row_index": 80, "timestamp": "2019-05-19T20:26:34Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee373ba9-9e9d-43fa-a6c3-39128d87", "eventTime": "2019-05-19T20:26:34Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63e13f83-a540-4d27-9476-31adb00e0dfb", "record_id": "flaws_cloudtrail:0000081:63e13f83-a540-4d27-9476-31adb00e0dfb", "row_index": 81, "timestamp": "2019-05-19T20:26:42Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63e13f83-a540-4d27-9476-31adb00e0dfb", "eventTime": "2019-05-19T20:26:42Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017e5917-f412-478c-b900-76b62cf91e24", "record_id": "flaws_cloudtrail:0000082:017e5917-f412-478c-b900-76b62cf91e24", "row_index": 82, "timestamp": "2019-05-19T20:26:42Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017e5917-f412-478c-b900-76b62cf91e24", "eventTime": "2019-05-19T20:26:42Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "638ae302-568f-48e5-a665-ac646733fffb6", "record_id": "flaws_cloudtrail:0000083:638ae302-568f-48e5-a665-ac646733fffb6", "row_index": 83, "timestamp": "2019-05-19T20:26:42Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "638ae302-568f-48e5-a665-ac646733fffb6", "eventTime": "2019-05-19T20:26:42Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63e13f83-a540-4d27-9476-31adb00e0dfb", "record_id": "flaws_cloudtrail:0000084:63e13f83-a540-4d27-9476-31adb00e0dfb", "row_index": 84, "timestamp": "2019-05-19T20:26:42Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63e13f83-a540-4d27-9476-31adb00e0dfb", "eventTime": "2019-05-19T20:26:42Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017e5917-f412-478c-b900-76b62cf91e24", "record_id": "flaws_cloudtrail:0000085:017e5917-f412-478c-b900-76b62cf91e24", "row_index": 85, "timestamp": "2019-05-19T20:26:42Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017e5917-f412-478c-b900-76b62cf91e24", "eventTime": "2019-05-19T20:26:42Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "638ae302-568f-48e5-a665-ac646733fffb6", "record_id": "flaws_cloudtrail:0000086:638ae302-568f-48e5-a665-ac646733fffb6", "row_index": 86, "timestamp": "2019-05-19T20:26:42Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "638ae302-568f-48e5-a665-ac646733fffb6", "eventTime": "2019-05-19T20:26:42Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ccd08a6-16b2-49cb-8451-f67e43d200bc", "record_id": "flaws_cloudtrail:0000087:2ccd08a6-16b2-49cb-8451-f67e43d200bc", "row_index": 87, "timestamp": "2019-05-19T20:26:49Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ccd08a6-16b2-49cb-8451-f67e43d200bc", "eventTime": "2019-05-19T20:26:49Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "record_id": "flaws_cloudtrail:0000088:52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "row_index": 88, "timestamp": "2019-05-19T20:26:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "eventTime": "2019-05-19T20:26:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ccd08a6-16b2-49cb-8451-f67e43d200bc", "record_id": "flaws_cloudtrail:0000089:2ccd08a6-16b2-49cb-8451-f67e43d200bc", "row_index": 89, "timestamp": "2019-05-19T20:26:49Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ccd08a6-16b2-49cb-8451-f67e43d200bc", "eventTime": "2019-05-19T20:26:49Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "record_id": "flaws_cloudtrail:0000090:52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "row_index": 90, "timestamp": "2019-05-19T20:26:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a028e1-dee8-4cc5-a247-d1c3a3bd3461", "eventTime": "2019-05-19T20:26:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d34c47-747b-4af7-819f-b1aea597298f", "record_id": "flaws_cloudtrail:0000091:32d34c47-747b-4af7-819f-b1aea597298f", "row_index": 91, "timestamp": "2019-05-19T20:26:50Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d34c47-747b-4af7-819f-b1aea597298f", "eventTime": "2019-05-19T20:26:50Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d34c47-747b-4af7-819f-b1aea597298f", "record_id": "flaws_cloudtrail:0000092:32d34c47-747b-4af7-819f-b1aea597298f", "row_index": 92, "timestamp": "2019-05-19T20:26:50Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d34c47-747b-4af7-819f-b1aea597298f", "eventTime": "2019-05-19T20:26:50Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0625c00-e27f-43ff-8a86-e693a32b7157", "record_id": "flaws_cloudtrail:0000093:b0625c00-e27f-43ff-8a86-e693a32b7157", "row_index": 93, "timestamp": "2019-05-19T20:27:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0625c00-e27f-43ff-8a86-e693a32b7157", "eventTime": "2019-05-19T20:27:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0625c00-e27f-43ff-8a86-e693a32b7157", "record_id": "flaws_cloudtrail:0000094:b0625c00-e27f-43ff-8a86-e693a32b7157", "row_index": 94, "timestamp": "2019-05-19T20:27:49Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0625c00-e27f-43ff-8a86-e693a32b7157", "eventTime": "2019-05-19T20:27:49Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc03aaa-ec05-4e29-b727-6bffe73de044", "record_id": "flaws_cloudtrail:0000095:1cc03aaa-ec05-4e29-b727-6bffe73de044", "row_index": 95, "timestamp": "2019-05-19T20:27:50Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc03aaa-ec05-4e29-b727-6bffe73de044", "eventTime": "2019-05-19T20:27:50Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "012456ecd-bc6e-46b5-a96e-01d3df04cc56", "record_id": "flaws_cloudtrail:0000096:012456ecd-bc6e-46b5-a96e-01d3df04cc56", "row_index": 96, "timestamp": "2019-05-19T20:27:50Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "012456ecd-bc6e-46b5-a96e-01d3df04cc56", "eventTime": "2019-05-19T20:27:50Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc03aaa-ec05-4e29-b727-6bffe73de044", "record_id": "flaws_cloudtrail:0000097:1cc03aaa-ec05-4e29-b727-6bffe73de044", "row_index": 97, "timestamp": "2019-05-19T20:27:50Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc03aaa-ec05-4e29-b727-6bffe73de044", "eventTime": "2019-05-19T20:27:50Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "012456ecd-bc6e-46b5-a96e-01d3df04cc56", "record_id": "flaws_cloudtrail:0000098:012456ecd-bc6e-46b5-a96e-01d3df04cc56", "row_index": 98, "timestamp": "2019-05-19T20:27:50Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "012456ecd-bc6e-46b5-a96e-01d3df04cc56", "eventTime": "2019-05-19T20:27:50Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31beb4b-3d8f-4909-9baa-911f7bb914e3", "record_id": "flaws_cloudtrail:0000099:b31beb4b-3d8f-4909-9baa-911f7bb914e3", "row_index": 99, "timestamp": "2019-05-19T20:28:12Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31beb4b-3d8f-4909-9baa-911f7bb914e3", "eventTime": "2019-05-19T20:28:12Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0409ff-91f3-404a-ace0-4474df48f647", "record_id": "flaws_cloudtrail:0000100:5e0409ff-91f3-404a-ace0-4474df48f647", "row_index": 100, "timestamp": "2019-05-19T20:28:12Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0409ff-91f3-404a-ace0-4474df48f647", "eventTime": "2019-05-19T20:28:12Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ada08a-5745-4f47-972b-9bd3595c190e", "record_id": "flaws_cloudtrail:0000101:59ada08a-5745-4f47-972b-9bd3595c190e", "row_index": 101, "timestamp": "2019-05-19T20:28:12Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ada08a-5745-4f47-972b-9bd3595c190e", "eventTime": "2019-05-19T20:28:12Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31beb4b-3d8f-4909-9baa-911f7bb914e3", "record_id": "flaws_cloudtrail:0000102:b31beb4b-3d8f-4909-9baa-911f7bb914e3", "row_index": 102, "timestamp": "2019-05-19T20:28:12Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31beb4b-3d8f-4909-9baa-911f7bb914e3", "eventTime": "2019-05-19T20:28:12Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0409ff-91f3-404a-ace0-4474df48f647", "record_id": "flaws_cloudtrail:0000103:5e0409ff-91f3-404a-ace0-4474df48f647", "row_index": 103, "timestamp": "2019-05-19T20:28:12Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0409ff-91f3-404a-ace0-4474df48f647", "eventTime": "2019-05-19T20:28:12Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ada08a-5745-4f47-972b-9bd3595c190e", "record_id": "flaws_cloudtrail:0000104:59ada08a-5745-4f47-972b-9bd3595c190e", "row_index": 104, "timestamp": "2019-05-19T20:28:12Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ada08a-5745-4f47-972b-9bd3595c190e", "eventTime": "2019-05-19T20:28:12Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "422ca820-cdfd-492f-afc1-57a6f2bfabae", "record_id": "flaws_cloudtrail:0000105:422ca820-cdfd-492f-afc1-57a6f2bfabae", "row_index": 105, "timestamp": "2019-05-19T20:28:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "422ca820-cdfd-492f-afc1-57a6f2bfabae", "eventTime": "2019-05-19T20:28:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa32626-7ad1-4752-be87-a358746f02b9a", "record_id": "flaws_cloudtrail:0000106:fa32626-7ad1-4752-be87-a358746f02b9a", "row_index": 106, "timestamp": "2019-05-19T20:28:19Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa32626-7ad1-4752-be87-a358746f02b9a", "eventTime": "2019-05-19T20:28:19Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89ac504-54c6-49c0-b71c-4da271aeffaf", "record_id": "flaws_cloudtrail:0000107:e89ac504-54c6-49c0-b71c-4da271aeffaf", "row_index": 107, "timestamp": "2019-05-19T20:28:19Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89ac504-54c6-49c0-b71c-4da271aeffaf", "eventTime": "2019-05-19T20:28:19Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "422ca820-cdfd-492f-afc1-57a6f2bfabae", "record_id": "flaws_cloudtrail:0000108:422ca820-cdfd-492f-afc1-57a6f2bfabae", "row_index": 108, "timestamp": "2019-05-19T20:28:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "422ca820-cdfd-492f-afc1-57a6f2bfabae", "eventTime": "2019-05-19T20:28:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa32626-7ad1-4752-be87-a358746f02b9a", "record_id": "flaws_cloudtrail:0000109:fa32626-7ad1-4752-be87-a358746f02b9a", "row_index": 109, "timestamp": "2019-05-19T20:28:19Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa32626-7ad1-4752-be87-a358746f02b9a", "eventTime": "2019-05-19T20:28:19Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89ac504-54c6-49c0-b71c-4da271aeffaf", "record_id": "flaws_cloudtrail:0000110:e89ac504-54c6-49c0-b71c-4da271aeffaf", "row_index": 110, "timestamp": "2019-05-19T20:28:19Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89ac504-54c6-49c0-b71c-4da271aeffaf", "eventTime": "2019-05-19T20:28:19Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df2ae879-b631-451b-99d7-7f54e28977ea", "record_id": "flaws_cloudtrail:0000111:df2ae879-b631-451b-99d7-7f54e28977ea", "row_index": 111, "timestamp": "2019-05-19T20:42:09Z", "event_type": "ListApplications", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df2ae879-b631-451b-99d7-7f54e28977ea", "eventTime": "2019-05-19T20:42:09Z", "eventName": "ListApplications", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df2ae879-b631-451b-99d7-7f54e28977ea", "record_id": "flaws_cloudtrail:0000112:df2ae879-b631-451b-99d7-7f54e28977ea", "row_index": 112, "timestamp": "2019-05-19T20:42:09Z", "event_type": "ListApplications", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df2ae879-b631-451b-99d7-7f54e28977ea", "eventTime": "2019-05-19T20:42:09Z", "eventName": "ListApplications", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41339d0d-ffdb-493f-8795-36dedaf0483f", "record_id": "flaws_cloudtrail:0000113:41339d0d-ffdb-493f-8795-36dedaf0483f", "row_index": 113, "timestamp": "2019-05-19T20:54:39Z", "event_type": "ListGeoLocations", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41339d0d-ffdb-493f-8795-36dedaf0483f", "eventTime": "2019-05-19T20:54:39Z", "eventName": "ListGeoLocations", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41339d0d-ffdb-493f-8795-36dedaf0483f", "record_id": "flaws_cloudtrail:0000114:41339d0d-ffdb-493f-8795-36dedaf0483f", "row_index": 114, "timestamp": "2019-05-19T20:54:39Z", "event_type": "ListGeoLocations", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41339d0d-ffdb-493f-8795-36dedaf0483f", "eventTime": "2019-05-19T20:54:39Z", "eventName": "ListGeoLocations", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47daa222-44f7-45f3-967a-974cbf2280f0", "record_id": "flaws_cloudtrail:0000115:47daa222-44f7-45f3-967a-974cbf2280f0", "row_index": 115, "timestamp": "2019-05-19T20:55:06Z", "event_type": "ListHealthChecks", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47daa222-44f7-45f3-967a-974cbf2280f0", "eventTime": "2019-05-19T20:55:06Z", "eventName": "ListHealthChecks", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47daa222-44f7-45f3-967a-974cbf2280f0", "record_id": "flaws_cloudtrail:0000116:47daa222-44f7-45f3-967a-974cbf2280f0", "row_index": 116, "timestamp": "2019-05-19T20:55:06Z", "event_type": "ListHealthChecks", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47daa222-44f7-45f3-967a-974cbf2280f0", "eventTime": "2019-05-19T20:55:06Z", "eventName": "ListHealthChecks", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501b7fc2-4f2f-44da-9f45-7d419ae648c8", "record_id": "flaws_cloudtrail:0000117:501b7fc2-4f2f-44da-9f45-7d419ae648c8", "row_index": 117, "timestamp": "2019-05-19T20:55:13Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501b7fc2-4f2f-44da-9f45-7d419ae648c8", "eventTime": "2019-05-19T20:55:13Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501b7fc2-4f2f-44da-9f45-7d419ae648c8", "record_id": "flaws_cloudtrail:0000118:501b7fc2-4f2f-44da-9f45-7d419ae648c8", "row_index": 118, "timestamp": "2019-05-19T20:55:13Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501b7fc2-4f2f-44da-9f45-7d419ae648c8", "eventTime": "2019-05-19T20:55:13Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "record_id": "flaws_cloudtrail:0000119:ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "row_index": 119, "timestamp": "2019-05-19T20:55:53Z", "event_type": "ListTrafficPolicyInstances", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "eventTime": "2019-05-19T20:55:53Z", "eventName": "ListTrafficPolicyInstances", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "record_id": "flaws_cloudtrail:0000120:ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "row_index": 120, "timestamp": "2019-05-19T20:55:53Z", "event_type": "ListTrafficPolicyInstances", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce871bcf-08d2-40a2-8adf-0a4ceac653e4", "eventTime": "2019-05-19T20:55:53Z", "eventName": "ListTrafficPolicyInstances", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709970-72a1-4c74-a314-63b5df8b86fb", "record_id": "flaws_cloudtrail:0000121:709970-72a1-4c74-a314-63b5df8b86fb", "row_index": 121, "timestamp": "2019-05-19T20:57:34Z", "event_type": "ListTrafficPolicies", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709970-72a1-4c74-a314-63b5df8b86fb", "eventTime": "2019-05-19T20:57:34Z", "eventName": "ListTrafficPolicies", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709970-72a1-4c74-a314-63b5df8b86fb", "record_id": "flaws_cloudtrail:0000122:709970-72a1-4c74-a314-63b5df8b86fb", "row_index": 122, "timestamp": "2019-05-19T20:57:34Z", "event_type": "ListTrafficPolicies", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709970-72a1-4c74-a314-63b5df8b86fb", "eventTime": "2019-05-19T20:57:34Z", "eventName": "ListTrafficPolicies", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "record_id": "flaws_cloudtrail:0000123:ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "row_index": 123, "timestamp": "2019-05-19T20:57:59Z", "event_type": "ListQueryLoggingConfigs", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "eventTime": "2019-05-19T20:57:59Z", "eventName": "ListQueryLoggingConfigs", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "record_id": "flaws_cloudtrail:0000124:ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "row_index": 124, "timestamp": "2019-05-19T20:57:59Z", "event_type": "ListQueryLoggingConfigs", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2c0e15-bd44-4ebf-b26d-23441e2f9358", "eventTime": "2019-05-19T20:57:59Z", "eventName": "ListQueryLoggingConfigs", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7744b3d1-f256-4e41-adc0-78d9d4264fe0", "record_id": "flaws_cloudtrail:0000125:7744b3d1-f256-4e41-adc0-78d9d4264fe0", "row_index": 125, "timestamp": "2019-05-19T21:00:04Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7744b3d1-f256-4e41-adc0-78d9d4264fe0", "eventTime": "2019-05-19T21:00:04Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7744b3d1-f256-4e41-adc0-78d9d4264fe0", "record_id": "flaws_cloudtrail:0000126:7744b3d1-f256-4e41-adc0-78d9d4264fe0", "row_index": 126, "timestamp": "2019-05-19T21:00:04Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7744b3d1-f256-4e41-adc0-78d9d4264fe0", "eventTime": "2019-05-19T21:00:04Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c202ff-1213-44ae-8c02-3dd68dfb2676", "record_id": "flaws_cloudtrail:0000127:31c202ff-1213-44ae-8c02-3dd68dfb2676", "row_index": 127, "timestamp": "2019-05-19T21:01:26Z", "event_type": "GetHostedZoneCount", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c202ff-1213-44ae-8c02-3dd68dfb2676", "eventTime": "2019-05-19T21:01:26Z", "eventName": "GetHostedZoneCount", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c202ff-1213-44ae-8c02-3dd68dfb2676", "record_id": "flaws_cloudtrail:0000128:31c202ff-1213-44ae-8c02-3dd68dfb2676", "row_index": 128, "timestamp": "2019-05-19T21:01:26Z", "event_type": "GetHostedZoneCount", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c202ff-1213-44ae-8c02-3dd68dfb2676", "eventTime": "2019-05-19T21:01:26Z", "eventName": "GetHostedZoneCount", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b550faf3-90c3-4793-abbd-c1a2b17e97fe", "record_id": "flaws_cloudtrail:0000129:b550faf3-90c3-4793-abbd-c1a2b17e97fe", "row_index": 129, "timestamp": "2019-05-19T21:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b550faf3-90c3-4793-abbd-c1a2b17e97fe", "eventTime": "2019-05-19T21:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5G2FG6ILZJNEAR75", "expiration": "May 20, 2019 3:18:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b550faf3-90c3-4793-abbd-c1a2b17e97fe", "record_id": "flaws_cloudtrail:0000130:b550faf3-90c3-4793-abbd-c1a2b17e97fe", "row_index": 130, "timestamp": "2019-05-19T21:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b550faf3-90c3-4793-abbd-c1a2b17e97fe", "eventTime": "2019-05-19T21:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5G2FG6ILZJNEAR75", "expiration": "May 20, 2019 3:18:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4968d13-aa7a-447b-b178-6fc92741", "record_id": "flaws_cloudtrail:0000131:e4968d13-aa7a-447b-b178-6fc92741", "row_index": 131, "timestamp": "2019-05-19T21:09:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4968d13-aa7a-447b-b178-6fc92741", "eventTime": "2019-05-19T21:09:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4968d13-aa7a-447b-b178-6fc92741", "record_id": "flaws_cloudtrail:0000132:e4968d13-aa7a-447b-b178-6fc92741", "row_index": 132, "timestamp": "2019-05-19T21:09:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4968d13-aa7a-447b-b178-6fc92741", "eventTime": "2019-05-19T21:09:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da67c89-f551-4d10-802a-92205def826f", "record_id": "flaws_cloudtrail:0000133:8da67c89-f551-4d10-802a-92205def826f", "row_index": 133, "timestamp": "2019-05-19T21:12:37Z", "event_type": "ListHealthChecks", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da67c89-f551-4d10-802a-92205def826f", "eventTime": "2019-05-19T21:12:37Z", "eventName": "ListHealthChecks", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da67c89-f551-4d10-802a-92205def826f", "record_id": "flaws_cloudtrail:0000134:8da67c89-f551-4d10-802a-92205def826f", "row_index": 134, "timestamp": "2019-05-19T21:12:37Z", "event_type": "ListHealthChecks", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da67c89-f551-4d10-802a-92205def826f", "eventTime": "2019-05-19T21:12:37Z", "eventName": "ListHealthChecks", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9991b230-d261-4ba9-80f2-46a665480fe", "record_id": "flaws_cloudtrail:0000135:9991b230-d261-4ba9-80f2-46a665480fe", "row_index": 135, "timestamp": "2019-05-19T21:14:54Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9991b230-d261-4ba9-80f2-46a665480fe", "eventTime": "2019-05-19T21:14:54Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9991b230-d261-4ba9-80f2-46a665480fe", "record_id": "flaws_cloudtrail:0000136:9991b230-d261-4ba9-80f2-46a665480fe", "row_index": 136, "timestamp": "2019-05-19T21:14:54Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9991b230-d261-4ba9-80f2-46a665480fe", "eventTime": "2019-05-19T21:14:54Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "record_id": "flaws_cloudtrail:0000137:ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "row_index": 137, "timestamp": "2019-05-19T21:15:04Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "eventTime": "2019-05-19T21:15:04Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "record_id": "flaws_cloudtrail:0000138:ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "row_index": 138, "timestamp": "2019-05-19T21:15:04Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee909dc7-3f59-4ce5-87f5-a47e727f81c4", "eventTime": "2019-05-19T21:15:04Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "record_id": "flaws_cloudtrail:0000139:ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "row_index": 139, "timestamp": "2019-05-19T21:16:11Z", "event_type": "ListCloudFrontOriginAccessIdentities", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "eventTime": "2019-05-19T21:16:11Z", "eventName": "ListCloudFrontOriginAccessIdentities", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "record_id": "flaws_cloudtrail:0000140:ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "row_index": 140, "timestamp": "2019-05-19T21:16:11Z", "event_type": "ListCloudFrontOriginAccessIdentities", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1dad77-7f99-4cca-8aa1-d60769cdbaca", "eventTime": "2019-05-19T21:16:11Z", "eventName": "ListCloudFrontOriginAccessIdentities", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "791072fa-885b-4b3b-a763-1f307fa7b942", "record_id": "flaws_cloudtrail:0000141:791072fa-885b-4b3b-a763-1f307fa7b942", "row_index": 141, "timestamp": "2019-05-19T21:18:30Z", "event_type": "ListBuilds", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "791072fa-885b-4b3b-a763-1f307fa7b942", "eventTime": "2019-05-19T21:18:30Z", "eventName": "ListBuilds", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: codebuild:ListBuilds", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "791072fa-885b-4b3b-a763-1f307fa7b942", "record_id": "flaws_cloudtrail:0000142:791072fa-885b-4b3b-a763-1f307fa7b942", "row_index": 142, "timestamp": "2019-05-19T21:18:30Z", "event_type": "ListBuilds", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "791072fa-885b-4b3b-a763-1f307fa7b942", "eventTime": "2019-05-19T21:18:30Z", "eventName": "ListBuilds", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: codebuild:ListBuilds", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d2d95a7-f959-4a98-9b32-e1021bae6345", "record_id": "flaws_cloudtrail:0000143:4d2d95a7-f959-4a98-9b32-e1021bae6345", "row_index": 143, "timestamp": "2019-05-19T21:18:42Z", "event_type": "ListProjects", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d2d95a7-f959-4a98-9b32-e1021bae6345", "eventTime": "2019-05-19T21:18:42Z", "eventName": "ListProjects", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"awsActId": "811596193553", "payerId": ":1:d2:bcd3:pid12:396373515955ee", "userArn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d2d95a7-f959-4a98-9b32-e1021bae6345", "record_id": "flaws_cloudtrail:0000144:4d2d95a7-f959-4a98-9b32-e1021bae6345", "row_index": 144, "timestamp": "2019-05-19T21:18:42Z", "event_type": "ListProjects", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d2d95a7-f959-4a98-9b32-e1021bae6345", "eventTime": "2019-05-19T21:18:42Z", "eventName": "ListProjects", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"awsActId": "811596193553", "payerId": ":1:d2:bcd3:pid12:396373515955ee", "userArn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "839e1da6-c36f-4ddb-abc5-014ee7c4110f", "record_id": "flaws_cloudtrail:0000145:839e1da6-c36f-4ddb-abc5-014ee7c4110f", "row_index": 145, "timestamp": "2019-05-19T21:21:35Z", "event_type": "ListDirectories", "event_source": "clouddirectory.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "839e1da6-c36f-4ddb-abc5-014ee7c4110f", "eventTime": "2019-05-19T21:21:35Z", "eventName": "ListDirectories", "eventSource": "clouddirectory.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "839e1da6-c36f-4ddb-abc5-014ee7c4110f", "record_id": "flaws_cloudtrail:0000146:839e1da6-c36f-4ddb-abc5-014ee7c4110f", "row_index": 146, "timestamp": "2019-05-19T21:21:35Z", "event_type": "ListDirectories", "event_source": "clouddirectory.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "839e1da6-c36f-4ddb-abc5-014ee7c4110f", "eventTime": "2019-05-19T21:21:35Z", "eventName": "ListDirectories", "eventSource": "clouddirectory.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8634ed54-dbb3-4d00-94e1-226f2fd639db", "record_id": "flaws_cloudtrail:0000147:8634ed54-dbb3-4d00-94e1-226f2fd639db", "row_index": 147, "timestamp": "2019-05-19T21:24:47Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8634ed54-dbb3-4d00-94e1-226f2fd639db", "eventTime": "2019-05-19T21:24:47Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8634ed54-dbb3-4d00-94e1-226f2fd639db", "record_id": "flaws_cloudtrail:0000148:8634ed54-dbb3-4d00-94e1-226f2fd639db", "row_index": 148, "timestamp": "2019-05-19T21:24:47Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8634ed54-dbb3-4d00-94e1-226f2fd639db", "eventTime": "2019-05-19T21:24:47Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0275e259-7d1c-4f10-a551-e4384ee16b7b", "record_id": "flaws_cloudtrail:0000149:0275e259-7d1c-4f10-a551-e4384ee16b7b", "row_index": 149, "timestamp": "2019-05-19T21:26:00Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0275e259-7d1c-4f10-a551-e4384ee16b7b", "eventTime": "2019-05-19T21:26:00Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0275e259-7d1c-4f10-a551-e4384ee16b7b", "record_id": "flaws_cloudtrail:0000150:0275e259-7d1c-4f10-a551-e4384ee16b7b", "row_index": 150, "timestamp": "2019-05-19T21:26:00Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0275e259-7d1c-4f10-a551-e4384ee16b7b", "eventTime": "2019-05-19T21:26:00Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bcfc13-a9b0-4939-8456-1d18b478d82e", "record_id": "flaws_cloudtrail:0000151:51bcfc13-a9b0-4939-8456-1d18b478d82e", "row_index": 151, "timestamp": "2019-05-19T21:27:10Z", "event_type": "DescribeDomains", "event_source": "cloudsearch.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bcfc13-a9b0-4939-8456-1d18b478d82e", "eventTime": "2019-05-19T21:27:10Z", "eventName": "DescribeDomains", "eventSource": "cloudsearch.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bcfc13-a9b0-4939-8456-1d18b478d82e", "record_id": "flaws_cloudtrail:0000152:51bcfc13-a9b0-4939-8456-1d18b478d82e", "row_index": 152, "timestamp": "2019-05-19T21:27:10Z", "event_type": "DescribeDomains", "event_source": "cloudsearch.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bcfc13-a9b0-4939-8456-1d18b478d82e", "eventTime": "2019-05-19T21:27:10Z", "eventName": "DescribeDomains", "eventSource": "cloudsearch.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742c7ed5-66d7-4bf9-b265-339799bd16c99", "record_id": "flaws_cloudtrail:0000153:742c7ed5-66d7-4bf9-b265-339799bd16c99", "row_index": 153, "timestamp": "2019-05-19T21:30:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742c7ed5-66d7-4bf9-b265-339799bd16c99", "eventTime": "2019-05-19T21:30:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742c7ed5-66d7-4bf9-b265-339799bd16c99", "record_id": "flaws_cloudtrail:0000154:742c7ed5-66d7-4bf9-b265-339799bd16c99", "row_index": 154, "timestamp": "2019-05-19T21:30:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742c7ed5-66d7-4bf9-b265-339799bd16c99", "eventTime": "2019-05-19T21:30:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d665915e-68c2-4b2f-a04b-386063e6d962", "record_id": "flaws_cloudtrail:0000155:d665915e-68c2-4b2f-a04b-386063e6d962", "row_index": 155, "timestamp": "2019-05-19T21:30:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d665915e-68c2-4b2f-a04b-386063e6d962", "eventTime": "2019-05-19T21:30:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d665915e-68c2-4b2f-a04b-386063e6d962", "record_id": "flaws_cloudtrail:0000156:d665915e-68c2-4b2f-a04b-386063e6d962", "row_index": 156, "timestamp": "2019-05-19T21:30:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d665915e-68c2-4b2f-a04b-386063e6d962", "eventTime": "2019-05-19T21:30:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "842ad35d-0db5-4836-b30f-d0a85ed25ae0", "record_id": "flaws_cloudtrail:0000157:842ad35d-0db5-4836-b30f-d0a85ed25ae0", "row_index": 157, "timestamp": "2019-05-19T21:31:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "842ad35d-0db5-4836-b30f-d0a85ed25ae0", "eventTime": "2019-05-19T21:31:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "842ad35d-0db5-4836-b30f-d0a85ed25ae0", "record_id": "flaws_cloudtrail:0000158:842ad35d-0db5-4836-b30f-d0a85ed25ae0", "row_index": 158, "timestamp": "2019-05-19T21:31:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "842ad35d-0db5-4836-b30f-d0a85ed25ae0", "eventTime": "2019-05-19T21:31:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab07fb78-1154-40bd-9d93-74a4c3955f9b", "record_id": "flaws_cloudtrail:0000159:ab07fb78-1154-40bd-9d93-74a4c3955f9b", "row_index": 159, "timestamp": "2019-05-19T21:31:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab07fb78-1154-40bd-9d93-74a4c3955f9b", "eventTime": "2019-05-19T21:31:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab07fb78-1154-40bd-9d93-74a4c3955f9b", "record_id": "flaws_cloudtrail:0000160:ab07fb78-1154-40bd-9d93-74a4c3955f9b", "row_index": 160, "timestamp": "2019-05-19T21:31:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab07fb78-1154-40bd-9d93-74a4c3955f9b", "eventTime": "2019-05-19T21:31:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07948acb-1d01-484e-96f6-f5d902fbd85e", "record_id": "flaws_cloudtrail:0000161:07948acb-1d01-484e-96f6-f5d902fbd85e", "row_index": 161, "timestamp": "2019-05-19T21:32:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07948acb-1d01-484e-96f6-f5d902fbd85e", "eventTime": "2019-05-19T21:32:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07948acb-1d01-484e-96f6-f5d902fbd85e", "record_id": "flaws_cloudtrail:0000162:07948acb-1d01-484e-96f6-f5d902fbd85e", "row_index": 162, "timestamp": "2019-05-19T21:32:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07948acb-1d01-484e-96f6-f5d902fbd85e", "eventTime": "2019-05-19T21:32:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "[Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7907e4a5-fe1b-4976-b633-6b349acd46a0", "record_id": "flaws_cloudtrail:0000163:7907e4a5-fe1b-4976-b633-6b349acd46a0", "row_index": 163, "timestamp": "2019-05-19T21:35:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7907e4a5-fe1b-4976-b633-6b349acd46a0", "eventTime": "2019-05-19T21:35:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:LookupEvents", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7907e4a5-fe1b-4976-b633-6b349acd46a0", "record_id": "flaws_cloudtrail:0000164:7907e4a5-fe1b-4976-b633-6b349acd46a0", "row_index": 164, "timestamp": "2019-05-19T21:35:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7907e4a5-fe1b-4976-b633-6b349acd46a0", "eventTime": "2019-05-19T21:35:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:LookupEvents", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "record_id": "flaws_cloudtrail:0000165:de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "row_index": 165, "timestamp": "2019-05-19T21:36:55Z", "event_type": "ListPublicKeys", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "eventTime": "2019-05-19T21:36:55Z", "eventName": "ListPublicKeys", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:ListPublicKeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "record_id": "flaws_cloudtrail:0000166:de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "row_index": 166, "timestamp": "2019-05-19T21:36:55Z", "event_type": "ListPublicKeys", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de32a0e8-4e59-44b5-be2b-a88dbe8b64ad", "eventTime": "2019-05-19T21:36:55Z", "eventName": "ListPublicKeys", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:ListPublicKeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eb4ab4d-9e19-44b7-bf05-4f60069b", "record_id": "flaws_cloudtrail:0000167:5eb4ab4d-9e19-44b7-bf05-4f60069b", "row_index": 167, "timestamp": "2019-05-19T21:56:34Z", "event_type": "DescribeAlarmHistory", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eb4ab4d-9e19-44b7-bf05-4f60069b", "eventTime": "2019-05-19T21:56:34Z", "eventName": "DescribeAlarmHistory", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eb4ab4d-9e19-44b7-bf05-4f60069b", "record_id": "flaws_cloudtrail:0000168:5eb4ab4d-9e19-44b7-bf05-4f60069b", "row_index": 168, "timestamp": "2019-05-19T21:56:34Z", "event_type": "DescribeAlarmHistory", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eb4ab4d-9e19-44b7-bf05-4f60069b", "eventTime": "2019-05-19T21:56:34Z", "eventName": "DescribeAlarmHistory", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "record_id": "flaws_cloudtrail:0000169:c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "row_index": 169, "timestamp": "2019-05-19T21:56:55Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "eventTime": "2019-05-19T21:56:55Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "record_id": "flaws_cloudtrail:0000170:c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "row_index": 170, "timestamp": "2019-05-19T21:56:55Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3db0081-d8fe-4001-bb63-0fbe42ee98c2", "eventTime": "2019-05-19T21:56:55Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "record_id": "flaws_cloudtrail:0000171:4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "row_index": 171, "timestamp": "2019-05-19T21:59:59Z", "event_type": "ListAgents", "event_source": "datasync.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "eventTime": "2019-05-19T21:59:59Z", "eventName": "ListAgents", "eventSource": "datasync.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "record_id": "flaws_cloudtrail:0000172:4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "row_index": 172, "timestamp": "2019-05-19T21:59:59Z", "event_type": "ListAgents", "event_source": "datasync.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb18e2c-ed6d-4816-a1ca-b6e6d9c9f8c7", "eventTime": "2019-05-19T21:59:59Z", "eventName": "ListAgents", "eventSource": "datasync.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10085b8-bbf8-4a45-b256-e2e5ad90d91a", "record_id": "flaws_cloudtrail:0000173:10085b8-bbf8-4a45-b256-e2e5ad90d91a", "row_index": 173, "timestamp": "2019-05-19T22:00:33Z", "event_type": "ListTasks", "event_source": "datasync.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10085b8-bbf8-4a45-b256-e2e5ad90d91a", "eventTime": "2019-05-19T22:00:33Z", "eventName": "ListTasks", "eventSource": "datasync.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10085b8-bbf8-4a45-b256-e2e5ad90d91a", "record_id": "flaws_cloudtrail:0000174:10085b8-bbf8-4a45-b256-e2e5ad90d91a", "row_index": 174, "timestamp": "2019-05-19T22:00:33Z", "event_type": "ListTasks", "event_source": "datasync.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10085b8-bbf8-4a45-b256-e2e5ad90d91a", "eventTime": "2019-05-19T22:00:33Z", "eventName": "ListTasks", "eventSource": "datasync.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4df9f9d-700a-4a77-a121-28a01e672d23", "record_id": "flaws_cloudtrail:0000175:b4df9f9d-700a-4a77-a121-28a01e672d23", "row_index": 175, "timestamp": "2019-05-19T22:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4df9f9d-700a-4a77-a121-28a01e672d23", "eventTime": "2019-05-19T22:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9Z2D6D0EW15OF6ZO", "expiration": "May 20, 2019 4:34:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4df9f9d-700a-4a77-a121-28a01e672d23", "record_id": "flaws_cloudtrail:0000176:b4df9f9d-700a-4a77-a121-28a01e672d23", "row_index": 176, "timestamp": "2019-05-19T22:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4df9f9d-700a-4a77-a121-28a01e672d23", "eventTime": "2019-05-19T22:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9Z2D6D0EW15OF6ZO", "expiration": "May 20, 2019 4:34:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "record_id": "flaws_cloudtrail:0000177:58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "row_index": 177, "timestamp": "2019-05-19T22:02:05Z", "event_type": "ListBackups", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "eventTime": "2019-05-19T22:02:05Z", "eventName": "ListBackups", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "record_id": "flaws_cloudtrail:0000178:58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "row_index": 178, "timestamp": "2019-05-19T22:02:05Z", "event_type": "ListBackups", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58a326cd-6f62-4c5d-947e-1d18d7db2ce7", "eventTime": "2019-05-19T22:02:05Z", "eventName": "ListBackups", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227fe1a1-2d76-4b0b-bb9b-142354605580", "record_id": "flaws_cloudtrail:0000179:227fe1a1-2d76-4b0b-bb9b-142354605580", "row_index": 179, "timestamp": "2019-05-19T22:02:26Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227fe1a1-2d76-4b0b-bb9b-142354605580", "eventTime": "2019-05-19T22:02:26Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227fe1a1-2d76-4b0b-bb9b-142354605580", "record_id": "flaws_cloudtrail:0000180:227fe1a1-2d76-4b0b-bb9b-142354605580", "row_index": 180, "timestamp": "2019-05-19T22:02:26Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227fe1a1-2d76-4b0b-bb9b-142354605580", "eventTime": "2019-05-19T22:02:26Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e47667-d995-46c2-8654-538591fe5089f", "record_id": "flaws_cloudtrail:0000181:8e47667-d995-46c2-8654-538591fe5089f", "row_index": 181, "timestamp": "2019-05-19T22:05:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e47667-d995-46c2-8654-538591fe5089f", "eventTime": "2019-05-19T22:05:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e47667-d995-46c2-8654-538591fe5089f", "record_id": "flaws_cloudtrail:0000182:8e47667-d995-46c2-8654-538591fe5089f", "row_index": 182, "timestamp": "2019-05-19T22:05:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e47667-d995-46c2-8654-538591fe5089f", "eventTime": "2019-05-19T22:05:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "record_id": "flaws_cloudtrail:0000183:f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "row_index": 183, "timestamp": "2019-05-19T22:06:20Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "eventTime": "2019-05-19T22:06:20Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "record_id": "flaws_cloudtrail:0000184:f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "row_index": 184, "timestamp": "2019-05-19T22:06:20Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f222d85c-0c4f-4eac-8ed6-1185d773a8dd", "eventTime": "2019-05-19T22:06:20Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f95bc484-5670-4021-9771-341b123fa2ff", "record_id": "flaws_cloudtrail:0000185:f95bc484-5670-4021-9771-341b123fa2ff", "row_index": 185, "timestamp": "2019-05-19T22:07:31Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f95bc484-5670-4021-9771-341b123fa2ff", "eventTime": "2019-05-19T22:07:31Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f95bc484-5670-4021-9771-341b123fa2ff", "record_id": "flaws_cloudtrail:0000186:f95bc484-5670-4021-9771-341b123fa2ff", "row_index": 186, "timestamp": "2019-05-19T22:07:31Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f95bc484-5670-4021-9771-341b123fa2ff", "eventTime": "2019-05-19T22:07:31Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "record_id": "flaws_cloudtrail:0000187:74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "row_index": 187, "timestamp": "2019-05-19T22:10:03Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "eventTime": "2019-05-19T22:10:03Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b82f05-73f4-48cc-8805-ba9bec8539db", "record_id": "flaws_cloudtrail:0000188:09b82f05-73f4-48cc-8805-ba9bec8539db", "row_index": 188, "timestamp": "2019-05-19T22:10:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b82f05-73f4-48cc-8805-ba9bec8539db", "eventTime": "2019-05-19T22:10:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af3f5048-745b-45b6-aa89-78420ac6d2", "record_id": "flaws_cloudtrail:0000189:af3f5048-745b-45b6-aa89-78420ac6d2", "row_index": 189, "timestamp": "2019-05-19T22:10:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af3f5048-745b-45b6-aa89-78420ac6d2", "eventTime": "2019-05-19T22:10:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5c1feb-a49c-489e-b2ef-b78009e927f6", "record_id": "flaws_cloudtrail:0000190:4e5c1feb-a49c-489e-b2ef-b78009e927f6", "row_index": 190, "timestamp": "2019-05-19T22:10:03Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5c1feb-a49c-489e-b2ef-b78009e927f6", "eventTime": "2019-05-19T22:10:03Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "record_id": "flaws_cloudtrail:0000191:74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "row_index": 191, "timestamp": "2019-05-19T22:10:03Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74ed89ea-4bae-4a76-9abb-4d3ffa971da3", "eventTime": "2019-05-19T22:10:03Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b82f05-73f4-48cc-8805-ba9bec8539db", "record_id": "flaws_cloudtrail:0000192:09b82f05-73f4-48cc-8805-ba9bec8539db", "row_index": 192, "timestamp": "2019-05-19T22:10:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b82f05-73f4-48cc-8805-ba9bec8539db", "eventTime": "2019-05-19T22:10:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af3f5048-745b-45b6-aa89-78420ac6d2", "record_id": "flaws_cloudtrail:0000193:af3f5048-745b-45b6-aa89-78420ac6d2", "row_index": 193, "timestamp": "2019-05-19T22:10:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af3f5048-745b-45b6-aa89-78420ac6d2", "eventTime": "2019-05-19T22:10:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5c1feb-a49c-489e-b2ef-b78009e927f6", "record_id": "flaws_cloudtrail:0000194:4e5c1feb-a49c-489e-b2ef-b78009e927f6", "row_index": 194, "timestamp": "2019-05-19T22:10:03Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5c1feb-a49c-489e-b2ef-b78009e927f6", "eventTime": "2019-05-19T22:10:03Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf7f6e5-5af6-419b-9f86-380501d082d82", "record_id": "flaws_cloudtrail:0000195:8cf7f6e5-5af6-419b-9f86-380501d082d82", "row_index": 195, "timestamp": "2019-05-19T22:11:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf7f6e5-5af6-419b-9f86-380501d082d82", "eventTime": "2019-05-19T22:11:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf7f6e5-5af6-419b-9f86-380501d082d82", "record_id": "flaws_cloudtrail:0000196:8cf7f6e5-5af6-419b-9f86-380501d082d82", "row_index": 196, "timestamp": "2019-05-19T22:11:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf7f6e5-5af6-419b-9f86-380501d082d82", "eventTime": "2019-05-19T22:11:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92f9dee3-f101-4170-8750-aa69d5490cd8", "record_id": "flaws_cloudtrail:0000197:92f9dee3-f101-4170-8750-aa69d5490cd8", "row_index": 197, "timestamp": "2019-05-19T22:12:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92f9dee3-f101-4170-8750-aa69d5490cd8", "eventTime": "2019-05-19T22:12:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628582d45-b5b7-49c1-b3c0-d2345fcfad36", "record_id": "flaws_cloudtrail:0000198:628582d45-b5b7-49c1-b3c0-d2345fcfad36", "row_index": 198, "timestamp": "2019-05-19T22:12:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628582d45-b5b7-49c1-b3c0-d2345fcfad36", "eventTime": "2019-05-19T22:12:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92f9dee3-f101-4170-8750-aa69d5490cd8", "record_id": "flaws_cloudtrail:0000199:92f9dee3-f101-4170-8750-aa69d5490cd8", "row_index": 199, "timestamp": "2019-05-19T22:12:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92f9dee3-f101-4170-8750-aa69d5490cd8", "eventTime": "2019-05-19T22:12:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628582d45-b5b7-49c1-b3c0-d2345fcfad36", "record_id": "flaws_cloudtrail:0000200:628582d45-b5b7-49c1-b3c0-d2345fcfad36", "row_index": 200, "timestamp": "2019-05-19T22:12:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628582d45-b5b7-49c1-b3c0-d2345fcfad36", "eventTime": "2019-05-19T22:12:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b63d5370-68c9-46ab-8305-2c6f957341a61", "record_id": "flaws_cloudtrail:0000201:b63d5370-68c9-46ab-8305-2c6f957341a61", "row_index": 201, "timestamp": "2019-05-19T22:12:35Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b63d5370-68c9-46ab-8305-2c6f957341a61", "eventTime": "2019-05-19T22:12:35Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "965a4090-0520-4b93-ab88-dedb7f7b5af9", "record_id": "flaws_cloudtrail:0000202:965a4090-0520-4b93-ab88-dedb7f7b5af9", "row_index": 202, "timestamp": "2019-05-19T22:12:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "965a4090-0520-4b93-ab88-dedb7f7b5af9", "eventTime": "2019-05-19T22:12:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b63d5370-68c9-46ab-8305-2c6f957341a61", "record_id": "flaws_cloudtrail:0000203:b63d5370-68c9-46ab-8305-2c6f957341a61", "row_index": 203, "timestamp": "2019-05-19T22:12:35Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b63d5370-68c9-46ab-8305-2c6f957341a61", "eventTime": "2019-05-19T22:12:35Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "965a4090-0520-4b93-ab88-dedb7f7b5af9", "record_id": "flaws_cloudtrail:0000204:965a4090-0520-4b93-ab88-dedb7f7b5af9", "row_index": 204, "timestamp": "2019-05-19T22:12:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "965a4090-0520-4b93-ab88-dedb7f7b5af9", "eventTime": "2019-05-19T22:12:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b03b31-dd41-4d22-b6a7-fa028f78665a", "record_id": "flaws_cloudtrail:0000205:31b03b31-dd41-4d22-b6a7-fa028f78665a", "row_index": 205, "timestamp": "2019-05-19T22:12:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b03b31-dd41-4d22-b6a7-fa028f78665a", "eventTime": "2019-05-19T22:12:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b03b31-dd41-4d22-b6a7-fa028f78665a", "record_id": "flaws_cloudtrail:0000206:31b03b31-dd41-4d22-b6a7-fa028f78665a", "row_index": 206, "timestamp": "2019-05-19T22:12:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b03b31-dd41-4d22-b6a7-fa028f78665a", "eventTime": "2019-05-19T22:12:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "record_id": "flaws_cloudtrail:0000207:8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "row_index": 207, "timestamp": "2019-05-19T22:14:52Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "eventTime": "2019-05-19T22:14:52Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "record_id": "flaws_cloudtrail:0000208:8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "row_index": 208, "timestamp": "2019-05-19T22:14:52Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ef6b2bf-dbf1-4d7d-98e8-12a51cd19581", "eventTime": "2019-05-19T22:14:52Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "record_id": "flaws_cloudtrail:0000209:9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "row_index": 209, "timestamp": "2019-05-19T22:16:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "eventTime": "2019-05-19T22:16:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:LookupEvents", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "record_id": "flaws_cloudtrail:0000210:9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "row_index": 210, "timestamp": "2019-05-19T22:16:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9795f1dd-ddef-4dce-9bf8-29878b8af8d2", "eventTime": "2019-05-19T22:16:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:LookupEvents", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767ed8a1-0061-49c7-966a-1e0ec199cff5", "record_id": "flaws_cloudtrail:0000211:767ed8a1-0061-49c7-966a-1e0ec199cff5", "row_index": 211, "timestamp": "2019-05-19T22:17:17Z", "event_type": "ListTags", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767ed8a1-0061-49c7-966a-1e0ec199cff5", "eventTime": "2019-05-19T22:17:17Z", "eventName": "ListTags", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceIdList": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767ed8a1-0061-49c7-966a-1e0ec199cff5", "record_id": "flaws_cloudtrail:0000212:767ed8a1-0061-49c7-966a-1e0ec199cff5", "row_index": 212, "timestamp": "2019-05-19T22:17:17Z", "event_type": "ListTags", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767ed8a1-0061-49c7-966a-1e0ec199cff5", "eventTime": "2019-05-19T22:17:17Z", "eventName": "ListTags", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceIdList": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71eaade-de95-4b50-ba07-7dbd0a118804", "record_id": "flaws_cloudtrail:0000213:b71eaade-de95-4b50-ba07-7dbd0a118804", "row_index": 213, "timestamp": "2019-05-19T22:18:33Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71eaade-de95-4b50-ba07-7dbd0a118804", "eventTime": "2019-05-19T22:18:33Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236736-1816-4308-aac9-79eea1fb3230", "record_id": "flaws_cloudtrail:0000214:236736-1816-4308-aac9-79eea1fb3230", "row_index": 214, "timestamp": "2019-05-19T22:18:33Z", "event_type": "ListTags", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236736-1816-4308-aac9-79eea1fb3230", "eventTime": "2019-05-19T22:18:33Z", "eventName": "ListTags", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceIdList": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71eaade-de95-4b50-ba07-7dbd0a118804", "record_id": "flaws_cloudtrail:0000215:b71eaade-de95-4b50-ba07-7dbd0a118804", "row_index": 215, "timestamp": "2019-05-19T22:18:33Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71eaade-de95-4b50-ba07-7dbd0a118804", "eventTime": "2019-05-19T22:18:33Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236736-1816-4308-aac9-79eea1fb3230", "record_id": "flaws_cloudtrail:0000216:236736-1816-4308-aac9-79eea1fb3230", "row_index": 216, "timestamp": "2019-05-19T22:18:33Z", "event_type": "ListTags", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236736-1816-4308-aac9-79eea1fb3230", "eventTime": "2019-05-19T22:18:33Z", "eventName": "ListTags", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceIdList": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b5216be-fed7-4ae5-8793-81540defa", "record_id": "flaws_cloudtrail:0000217:4b5216be-fed7-4ae5-8793-81540defa", "row_index": 217, "timestamp": "2019-05-19T22:18:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b5216be-fed7-4ae5-8793-81540defa", "eventTime": "2019-05-19T22:18:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e72c764-daed-4088-be35-907a95b56bde", "record_id": "flaws_cloudtrail:0000218:1e72c764-daed-4088-be35-907a95b56bde", "row_index": 218, "timestamp": "2019-05-19T22:18:34Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e72c764-daed-4088-be35-907a95b56bde", "eventTime": "2019-05-19T22:18:34Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b5216be-fed7-4ae5-8793-81540defa", "record_id": "flaws_cloudtrail:0000219:4b5216be-fed7-4ae5-8793-81540defa", "row_index": 219, "timestamp": "2019-05-19T22:18:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b5216be-fed7-4ae5-8793-81540defa", "eventTime": "2019-05-19T22:18:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e72c764-daed-4088-be35-907a95b56bde", "record_id": "flaws_cloudtrail:0000220:1e72c764-daed-4088-be35-907a95b56bde", "row_index": 220, "timestamp": "2019-05-19T22:18:34Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e72c764-daed-4088-be35-907a95b56bde", "eventTime": "2019-05-19T22:18:34Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d953921d-139e-490c-963b-93c0d7c38d13", "record_id": "flaws_cloudtrail:0000221:4d953921d-139e-490c-963b-93c0d7c38d13", "row_index": 221, "timestamp": "2019-05-19T22:19:32Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d953921d-139e-490c-963b-93c0d7c38d13", "eventTime": "2019-05-19T22:19:32Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d953921d-139e-490c-963b-93c0d7c38d13", "record_id": "flaws_cloudtrail:0000222:4d953921d-139e-490c-963b-93c0d7c38d13", "row_index": 222, "timestamp": "2019-05-19T22:19:32Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d953921d-139e-490c-963b-93c0d7c38d13", "eventTime": "2019-05-19T22:19:32Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "record_id": "flaws_cloudtrail:0000223:c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "row_index": 223, "timestamp": "2019-05-19T22:19:33Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "eventTime": "2019-05-19T22:19:33Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72910-d92a-4d40-8bd7-8c6f83daa3cc", "record_id": "flaws_cloudtrail:0000224:72910-d92a-4d40-8bd7-8c6f83daa3cc", "row_index": 224, "timestamp": "2019-05-19T22:19:33Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72910-d92a-4d40-8bd7-8c6f83daa3cc", "eventTime": "2019-05-19T22:19:33Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "record_id": "flaws_cloudtrail:0000225:c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "row_index": 225, "timestamp": "2019-05-19T22:19:33Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a014b0-86a3-4b86-90a7-585e6ba5b4b4", "eventTime": "2019-05-19T22:19:33Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72910-d92a-4d40-8bd7-8c6f83daa3cc", "record_id": "flaws_cloudtrail:0000226:72910-d92a-4d40-8bd7-8c6f83daa3cc", "row_index": 226, "timestamp": "2019-05-19T22:19:33Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72910-d92a-4d40-8bd7-8c6f83daa3cc", "eventTime": "2019-05-19T22:19:33Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1750bee3-af30-4218-b3b1-70f59c9f84ae", "record_id": "flaws_cloudtrail:0000227:1750bee3-af30-4218-b3b1-70f59c9f84ae", "row_index": 227, "timestamp": "2019-05-19T22:23:43Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1750bee3-af30-4218-b3b1-70f59c9f84ae", "eventTime": "2019-05-19T22:23:43Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1750bee3-af30-4218-b3b1-70f59c9f84ae", "record_id": "flaws_cloudtrail:0000228:1750bee3-af30-4218-b3b1-70f59c9f84ae", "row_index": 228, "timestamp": "2019-05-19T22:23:43Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1750bee3-af30-4218-b3b1-70f59c9f84ae", "eventTime": "2019-05-19T22:23:43Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acca1a64-c44b-4593-aec5-0453cd8f7b11", "record_id": "flaws_cloudtrail:0000229:acca1a64-c44b-4593-aec5-0453cd8f7b11", "row_index": 229, "timestamp": "2019-05-19T22:24:38Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acca1a64-c44b-4593-aec5-0453cd8f7b11", "eventTime": "2019-05-19T22:24:38Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acca1a64-c44b-4593-aec5-0453cd8f7b11", "record_id": "flaws_cloudtrail:0000230:acca1a64-c44b-4593-aec5-0453cd8f7b11", "row_index": 230, "timestamp": "2019-05-19T22:24:38Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acca1a64-c44b-4593-aec5-0453cd8f7b11", "eventTime": "2019-05-19T22:24:38Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a840c5c7-f667-40c9-9644-893cdbdacdcf", "record_id": "flaws_cloudtrail:0000231:a840c5c7-f667-40c9-9644-893cdbdacdcf", "row_index": 231, "timestamp": "2019-05-19T22:27:24Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a840c5c7-f667-40c9-9644-893cdbdacdcf", "eventTime": "2019-05-19T22:27:24Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a840c5c7-f667-40c9-9644-893cdbdacdcf", "record_id": "flaws_cloudtrail:0000232:a840c5c7-f667-40c9-9644-893cdbdacdcf", "row_index": 232, "timestamp": "2019-05-19T22:27:24Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a840c5c7-f667-40c9-9644-893cdbdacdcf", "eventTime": "2019-05-19T22:27:24Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5502e853-a04c-4511-81d5-e650ce0bc8e4", "record_id": "flaws_cloudtrail:0000233:5502e853-a04c-4511-81d5-e650ce0bc8e4", "row_index": 233, "timestamp": "2019-05-19T22:27:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5502e853-a04c-4511-81d5-e650ce0bc8e4", "eventTime": "2019-05-19T22:27:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5502e853-a04c-4511-81d5-e650ce0bc8e4", "record_id": "flaws_cloudtrail:0000234:5502e853-a04c-4511-81d5-e650ce0bc8e4", "row_index": 234, "timestamp": "2019-05-19T22:27:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5502e853-a04c-4511-81d5-e650ce0bc8e4", "eventTime": "2019-05-19T22:27:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9425d9b5-f600-4a06-a350-fdddcbfee57c", "record_id": "flaws_cloudtrail:0000235:9425d9b5-f600-4a06-a350-fdddcbfee57c", "row_index": 235, "timestamp": "2019-05-19T22:28:22Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9425d9b5-f600-4a06-a350-fdddcbfee57c", "eventTime": "2019-05-19T22:28:22Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9425d9b5-f600-4a06-a350-fdddcbfee57c", "record_id": "flaws_cloudtrail:0000236:9425d9b5-f600-4a06-a350-fdddcbfee57c", "row_index": 236, "timestamp": "2019-05-19T22:28:22Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9425d9b5-f600-4a06-a350-fdddcbfee57c", "eventTime": "2019-05-19T22:28:22Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72aa682e-8977-418e-950b-f23e37c25194", "record_id": "flaws_cloudtrail:0000237:72aa682e-8977-418e-950b-f23e37c25194", "row_index": 237, "timestamp": "2019-05-19T22:30:40Z", "event_type": "ListServices", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72aa682e-8977-418e-950b-f23e37c25194", "eventTime": "2019-05-19T22:30:40Z", "eventName": "ListServices", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "ClientException", "errorMessage": "Cluster not found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72aa682e-8977-418e-950b-f23e37c25194", "record_id": "flaws_cloudtrail:0000238:72aa682e-8977-418e-950b-f23e37c25194", "row_index": 238, "timestamp": "2019-05-19T22:30:40Z", "event_type": "ListServices", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72aa682e-8977-418e-950b-f23e37c25194", "eventTime": "2019-05-19T22:30:40Z", "eventName": "ListServices", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "ClientException", "errorMessage": "Cluster not found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "record_id": "flaws_cloudtrail:0000239:4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "row_index": 239, "timestamp": "2019-05-19T22:31:22Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "eventTime": "2019-05-19T22:31:22Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "record_id": "flaws_cloudtrail:0000240:4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "row_index": 240, "timestamp": "2019-05-19T22:31:22Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3e9d97-a7ea-4995-b4bc-edf24ce6db11", "eventTime": "2019-05-19T22:31:22Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a45a708c-0b2c-44b8-ba4b-adb99f207849", "record_id": "flaws_cloudtrail:0000241:a45a708c-0b2c-44b8-ba4b-adb99f207849", "row_index": 241, "timestamp": "2019-05-19T22:33:22Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a45a708c-0b2c-44b8-ba4b-adb99f207849", "eventTime": "2019-05-19T22:33:22Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a45a708c-0b2c-44b8-ba4b-adb99f207849", "record_id": "flaws_cloudtrail:0000242:a45a708c-0b2c-44b8-ba4b-adb99f207849", "row_index": 242, "timestamp": "2019-05-19T22:33:22Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a45a708c-0b2c-44b8-ba4b-adb99f207849", "eventTime": "2019-05-19T22:33:22Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a612dfe-9abe-482f-9cd2-d190a76221", "record_id": "flaws_cloudtrail:0000243:8a612dfe-9abe-482f-9cd2-d190a76221", "row_index": 243, "timestamp": "2019-05-19T22:36:47Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a612dfe-9abe-482f-9cd2-d190a76221", "eventTime": "2019-05-19T22:36:47Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a612dfe-9abe-482f-9cd2-d190a76221", "record_id": "flaws_cloudtrail:0000244:8a612dfe-9abe-482f-9cd2-d190a76221", "row_index": 244, "timestamp": "2019-05-19T22:36:47Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a612dfe-9abe-482f-9cd2-d190a76221", "eventTime": "2019-05-19T22:36:47Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc9618df-d3fd-4613-8068-e029c7c294be", "record_id": "flaws_cloudtrail:0000245:dc9618df-d3fd-4613-8068-e029c7c294be", "row_index": 245, "timestamp": "2019-05-19T22:45:30Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc9618df-d3fd-4613-8068-e029c7c294be", "eventTime": "2019-05-19T22:45:30Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffd2db9c-32e1-4dae-a020-48a269d55c3c", "record_id": "flaws_cloudtrail:0000246:ffd2db9c-32e1-4dae-a020-48a269d55c3c", "row_index": 246, "timestamp": "2019-05-19T22:45:30Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffd2db9c-32e1-4dae-a020-48a269d55c3c", "eventTime": "2019-05-19T22:45:30Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bdf0522-24e3-4caf-b850-4c678ccb2e77", "record_id": "flaws_cloudtrail:0000247:1bdf0522-24e3-4caf-b850-4c678ccb2e77", "row_index": 247, "timestamp": "2019-05-19T22:45:30Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bdf0522-24e3-4caf-b850-4c678ccb2e77", "eventTime": "2019-05-19T22:45:30Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc9618df-d3fd-4613-8068-e029c7c294be", "record_id": "flaws_cloudtrail:0000248:dc9618df-d3fd-4613-8068-e029c7c294be", "row_index": 248, "timestamp": "2019-05-19T22:45:30Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc9618df-d3fd-4613-8068-e029c7c294be", "eventTime": "2019-05-19T22:45:30Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffd2db9c-32e1-4dae-a020-48a269d55c3c", "record_id": "flaws_cloudtrail:0000249:ffd2db9c-32e1-4dae-a020-48a269d55c3c", "row_index": 249, "timestamp": "2019-05-19T22:45:30Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffd2db9c-32e1-4dae-a020-48a269d55c3c", "eventTime": "2019-05-19T22:45:30Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bdf0522-24e3-4caf-b850-4c678ccb2e77", "record_id": "flaws_cloudtrail:0000250:1bdf0522-24e3-4caf-b850-4c678ccb2e77", "row_index": 250, "timestamp": "2019-05-19T22:45:30Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bdf0522-24e3-4caf-b850-4c678ccb2e77", "eventTime": "2019-05-19T22:45:30Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "record_id": "flaws_cloudtrail:0000251:a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "row_index": 251, "timestamp": "2019-05-19T22:52:14Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "eventTime": "2019-05-19T22:52:14Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "record_id": "flaws_cloudtrail:0000252:a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "row_index": 252, "timestamp": "2019-05-19T22:52:14Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a405c523-acc7-4cce-83e0-5f7cf5cb5fb1", "eventTime": "2019-05-19T22:52:14Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3abd3a91-3c58-4ea2-abb7-bfeb72316c", "record_id": "flaws_cloudtrail:0000253:3abd3a91-3c58-4ea2-abb7-bfeb72316c", "row_index": 253, "timestamp": "2019-05-19T22:52:29Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3abd3a91-3c58-4ea2-abb7-bfeb72316c", "eventTime": "2019-05-19T22:52:29Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3abd3a91-3c58-4ea2-abb7-bfeb72316c", "record_id": "flaws_cloudtrail:0000254:3abd3a91-3c58-4ea2-abb7-bfeb72316c", "row_index": 254, "timestamp": "2019-05-19T22:52:29Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3abd3a91-3c58-4ea2-abb7-bfeb72316c", "eventTime": "2019-05-19T22:52:29Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66253dd6-710c-43d6-ae63-443bf03a15e9", "record_id": "flaws_cloudtrail:0000255:66253dd6-710c-43d6-ae63-443bf03a15e9", "row_index": 255, "timestamp": "2019-05-19T22:52:30Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66253dd6-710c-43d6-ae63-443bf03a15e9", "eventTime": "2019-05-19T22:52:30Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e74235-cd45-4d82-adf5-d6f12a41c631", "record_id": "flaws_cloudtrail:0000256:e74235-cd45-4d82-adf5-d6f12a41c631", "row_index": 256, "timestamp": "2019-05-19T22:52:30Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e74235-cd45-4d82-adf5-d6f12a41c631", "eventTime": "2019-05-19T22:52:30Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66253dd6-710c-43d6-ae63-443bf03a15e9", "record_id": "flaws_cloudtrail:0000257:66253dd6-710c-43d6-ae63-443bf03a15e9", "row_index": 257, "timestamp": "2019-05-19T22:52:30Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66253dd6-710c-43d6-ae63-443bf03a15e9", "eventTime": "2019-05-19T22:52:30Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e74235-cd45-4d82-adf5-d6f12a41c631", "record_id": "flaws_cloudtrail:0000258:e74235-cd45-4d82-adf5-d6f12a41c631", "row_index": 258, "timestamp": "2019-05-19T22:52:30Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e74235-cd45-4d82-adf5-d6f12a41c631", "eventTime": "2019-05-19T22:52:30Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01adb95-2242-4682-8941-3f6f9b3af0f0", "record_id": "flaws_cloudtrail:0000259:d01adb95-2242-4682-8941-3f6f9b3af0f0", "row_index": 259, "timestamp": "2019-05-19T22:52:35Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01adb95-2242-4682-8941-3f6f9b3af0f0", "eventTime": "2019-05-19T22:52:35Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01adb95-2242-4682-8941-3f6f9b3af0f0", "record_id": "flaws_cloudtrail:0000260:d01adb95-2242-4682-8941-3f6f9b3af0f0", "row_index": 260, "timestamp": "2019-05-19T22:52:35Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01adb95-2242-4682-8941-3f6f9b3af0f0", "eventTime": "2019-05-19T22:52:35Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33110d5-abb1-4a5e-8000-ac98df472750b", "record_id": "flaws_cloudtrail:0000261:d33110d5-abb1-4a5e-8000-ac98df472750b", "row_index": 261, "timestamp": "2019-05-19T22:52:36Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33110d5-abb1-4a5e-8000-ac98df472750b", "eventTime": "2019-05-19T22:52:36Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c7b0439-b91a-4280-a463-a033ff00db65", "record_id": "flaws_cloudtrail:0000262:0c7b0439-b91a-4280-a463-a033ff00db65", "row_index": 262, "timestamp": "2019-05-19T22:52:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c7b0439-b91a-4280-a463-a033ff00db65", "eventTime": "2019-05-19T22:52:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33110d5-abb1-4a5e-8000-ac98df472750b", "record_id": "flaws_cloudtrail:0000263:d33110d5-abb1-4a5e-8000-ac98df472750b", "row_index": 263, "timestamp": "2019-05-19T22:52:36Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33110d5-abb1-4a5e-8000-ac98df472750b", "eventTime": "2019-05-19T22:52:36Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c7b0439-b91a-4280-a463-a033ff00db65", "record_id": "flaws_cloudtrail:0000264:0c7b0439-b91a-4280-a463-a033ff00db65", "row_index": 264, "timestamp": "2019-05-19T22:52:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c7b0439-b91a-4280-a463-a033ff00db65", "eventTime": "2019-05-19T22:52:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13cf473e-2df8-48f7-afad-3f39156a3959", "record_id": "flaws_cloudtrail:0000265:13cf473e-2df8-48f7-afad-3f39156a3959", "row_index": 265, "timestamp": "2019-05-19T22:53:51Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13cf473e-2df8-48f7-afad-3f39156a3959", "eventTime": "2019-05-19T22:53:51Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13cf473e-2df8-48f7-afad-3f39156a3959", "record_id": "flaws_cloudtrail:0000266:13cf473e-2df8-48f7-afad-3f39156a3959", "row_index": 266, "timestamp": "2019-05-19T22:53:51Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13cf473e-2df8-48f7-afad-3f39156a3959", "eventTime": "2019-05-19T22:53:51Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "aws-cli/1.16.150 Python/3.7.3 Darwin/18.5.0 botocore/1.12.140", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "record_id": "flaws_cloudtrail:0000267:d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "row_index": 267, "timestamp": "2019-05-19T22:57:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "eventTime": "2019-05-19T22:57:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cf293841-0f30-45f3-96a4-597d3301b705", "record_id": "flaws_cloudtrail:0000268:6cf293841-0f30-45f3-96a4-597d3301b705", "row_index": 268, "timestamp": "2019-05-19T22:57:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cf293841-0f30-45f3-96a4-597d3301b705", "eventTime": "2019-05-19T22:57:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "record_id": "flaws_cloudtrail:0000269:d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "row_index": 269, "timestamp": "2019-05-19T22:57:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fda1f5-6783-4c37-9aba-1b1bffecd9de", "eventTime": "2019-05-19T22:57:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cf293841-0f30-45f3-96a4-597d3301b705", "record_id": "flaws_cloudtrail:0000270:6cf293841-0f30-45f3-96a4-597d3301b705", "row_index": 270, "timestamp": "2019-05-19T22:57:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cf293841-0f30-45f3-96a4-597d3301b705", "eventTime": "2019-05-19T22:57:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "record_id": "flaws_cloudtrail:0000271:a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "row_index": 271, "timestamp": "2019-05-19T22:57:35Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "eventTime": "2019-05-19T22:57:35Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "record_id": "flaws_cloudtrail:0000272:a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "row_index": 272, "timestamp": "2019-05-19T22:57:35Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7ad941d-37f0-4ba8-873a-901e2dba3ca5", "eventTime": "2019-05-19T22:57:35Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a80a675-df69-4127-bbb5-724b032455be", "record_id": "flaws_cloudtrail:0000273:9a80a675-df69-4127-bbb5-724b032455be", "row_index": 273, "timestamp": "2019-05-19T22:57:59Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a80a675-df69-4127-bbb5-724b032455be", "eventTime": "2019-05-19T22:57:59Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a80a675-df69-4127-bbb5-724b032455be", "record_id": "flaws_cloudtrail:0000274:9a80a675-df69-4127-bbb5-724b032455be", "row_index": 274, "timestamp": "2019-05-19T22:57:59Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a80a675-df69-4127-bbb5-724b032455be", "eventTime": "2019-05-19T22:57:59Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de77b591-cffc-418b-bc32-6e7edc42ffeb", "record_id": "flaws_cloudtrail:0000275:de77b591-cffc-418b-bc32-6e7edc42ffeb", "row_index": 275, "timestamp": "2019-05-19T23:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de77b591-cffc-418b-bc32-6e7edc42ffeb", "eventTime": "2019-05-19T23:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACMQJELJ0OM6A5D00", "expiration": "May 20, 2019 5:22:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de77b591-cffc-418b-bc32-6e7edc42ffeb", "record_id": "flaws_cloudtrail:0000276:de77b591-cffc-418b-bc32-6e7edc42ffeb", "row_index": 276, "timestamp": "2019-05-19T23:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de77b591-cffc-418b-bc32-6e7edc42ffeb", "eventTime": "2019-05-19T23:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACMQJELJ0OM6A5D00", "expiration": "May 20, 2019 5:22:42 AM", "sessionToken": "AgoJb3JpZ2luX2VjEF8aCXVzLXdlc3QtMiJHMEUCIDIdMQlsQwBqgWLOP3JweYc0sQVebBSjCk+FUUKTtkoEAiEA0QCmeadm0R/1vwU2sXhAxVFNH5IjFzQyS6neNvMHwT8q2gMIaBAAGgw5NzU0MjYyNjIwMjkiDLaTLOgSxS/CHzKLqCq3Azern3aX8pNyi1cCUJk8j5tGQcIwkM33V9Rk6uhXpj3DtuarKfH9b9OE7ZPFJDIWCWkxGAk9crln7AiuniOOzPGsDIIDEZX8Z7NnC11+xCsUewglm6txVT2bQwaXiMlWUUgpzRjcQUfRX27RtqSQDo9Uy2Aam4w2cl9zZLMz1LE3MTQtkyPEE57TxR5amPoODCxU7nhNd2AhVgw1uYikTcmT1DQM0eKnlv8Kry0p9MC9lqYW7gGtqinVfC9T9v/FozDhLmPsm5P4FO7T3e1AyvnyNFjvH46pnAAR4ZZVxjtSVZpcGM7eAVDmEh3b2LLmYV9wBJql1whFduhtw/AfI5yE++EFiKacT6iNptLct8a9hPLCCZE9p2PMdTIUq5CGkYt8pmBmuIKWpwl/WGueg/05TThLIBS9HP5wU/hasGJfAuBv6hn+wlCmcN3VsaUFMFaazVly5NgePGLLYPvqRBiHhp1o6u7GtWN0XMFZR4FuewWLwkxB5sixSp/TbZmMuPg0YXGy6/UmBm+PCj76kl+1ToirFeXFyZ6UdmTjeHEUG9tdjfflPSpWuH4RlDL3qqJTc6hOt0Ew2sCH5wU6tAEj8nZY3f4gWs1FmGZ0rE3aTGZ6dA459EsIXwRJxdAfMX477crq9xElJ5Ckxf0F4EZYfEjGdGjuirOKCG64BA3GK7tnU71AgL9DRMql/NHq2EMLv/R8Pt73ugaO61LPJUJNp4hDIsdVgjxFt6TBXiO+9LorV6pYvzm8eM4AyfG3Ds5n/o5N0gx2nOI7HOnSJ61lzWKhzeWeG465WKDv46DqXokQPiXXA7YRAAxlFtWI9mJeduk="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a59938c6-dcdc-4170-a9d2-dc3d84332c21", "record_id": "flaws_cloudtrail:0000277:a59938c6-dcdc-4170-a9d2-dc3d84332c21", "row_index": 277, "timestamp": "2019-05-19T23:02:24Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a59938c6-dcdc-4170-a9d2-dc3d84332c21", "eventTime": "2019-05-19T23:02:24Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09681f59-eadf-42c2-9c19-15f665026f6fa", "record_id": "flaws_cloudtrail:0000278:09681f59-eadf-42c2-9c19-15f665026f6fa", "row_index": 278, "timestamp": "2019-05-19T23:02:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09681f59-eadf-42c2-9c19-15f665026f6fa", "eventTime": "2019-05-19T23:02:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12f4d450-2b1e-453a-bc87-9cec0e4fb789", "record_id": "flaws_cloudtrail:0000279:12f4d450-2b1e-453a-bc87-9cec0e4fb789", "row_index": 279, "timestamp": "2019-05-19T23:02:24Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12f4d450-2b1e-453a-bc87-9cec0e4fb789", "eventTime": "2019-05-19T23:02:24Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a59938c6-dcdc-4170-a9d2-dc3d84332c21", "record_id": "flaws_cloudtrail:0000280:a59938c6-dcdc-4170-a9d2-dc3d84332c21", "row_index": 280, "timestamp": "2019-05-19T23:02:24Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a59938c6-dcdc-4170-a9d2-dc3d84332c21", "eventTime": "2019-05-19T23:02:24Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09681f59-eadf-42c2-9c19-15f665026f6fa", "record_id": "flaws_cloudtrail:0000281:09681f59-eadf-42c2-9c19-15f665026f6fa", "row_index": 281, "timestamp": "2019-05-19T23:02:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09681f59-eadf-42c2-9c19-15f665026f6fa", "eventTime": "2019-05-19T23:02:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12f4d450-2b1e-453a-bc87-9cec0e4fb789", "record_id": "flaws_cloudtrail:0000282:12f4d450-2b1e-453a-bc87-9cec0e4fb789", "row_index": 282, "timestamp": "2019-05-19T23:02:24Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12f4d450-2b1e-453a-bc87-9cec0e4fb789", "eventTime": "2019-05-19T23:02:24Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b995176-e0b2-4d96-bb14-940283c17d1b3", "record_id": "flaws_cloudtrail:0000283:e9b995176-e0b2-4d96-bb14-940283c17d1b3", "row_index": 283, "timestamp": "2019-05-19T23:02:28Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b995176-e0b2-4d96-bb14-940283c17d1b3", "eventTime": "2019-05-19T23:02:28Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d884a8e5-6246-46a0-a96b-a21d1b86c887", "record_id": "flaws_cloudtrail:0000284:d884a8e5-6246-46a0-a96b-a21d1b86c887", "row_index": 284, "timestamp": "2019-05-19T23:02:28Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d884a8e5-6246-46a0-a96b-a21d1b86c887", "eventTime": "2019-05-19T23:02:28Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b995176-e0b2-4d96-bb14-940283c17d1b3", "record_id": "flaws_cloudtrail:0000285:e9b995176-e0b2-4d96-bb14-940283c17d1b3", "row_index": 285, "timestamp": "2019-05-19T23:02:28Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b995176-e0b2-4d96-bb14-940283c17d1b3", "eventTime": "2019-05-19T23:02:28Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d884a8e5-6246-46a0-a96b-a21d1b86c887", "record_id": "flaws_cloudtrail:0000286:d884a8e5-6246-46a0-a96b-a21d1b86c887", "row_index": 286, "timestamp": "2019-05-19T23:02:28Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d884a8e5-6246-46a0-a96b-a21d1b86c887", "eventTime": "2019-05-19T23:02:28Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18edfae1-83c2-4a67-957e-e7d00c61fa46", "record_id": "flaws_cloudtrail:0000287:18edfae1-83c2-4a67-957e-e7d00c61fa46", "row_index": 287, "timestamp": "2019-05-19T23:02:29Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18edfae1-83c2-4a67-957e-e7d00c61fa46", "eventTime": "2019-05-19T23:02:29Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18edfae1-83c2-4a67-957e-e7d00c61fa46", "record_id": "flaws_cloudtrail:0000288:18edfae1-83c2-4a67-957e-e7d00c61fa46", "row_index": 288, "timestamp": "2019-05-19T23:02:29Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18edfae1-83c2-4a67-957e-e7d00c61fa46", "eventTime": "2019-05-19T23:02:29Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "record_id": "flaws_cloudtrail:0000289:2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "row_index": 289, "timestamp": "2019-05-19T23:02:32Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "eventTime": "2019-05-19T23:02:32Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d343a6-2935-408d-8dbe-07ab47218396", "record_id": "flaws_cloudtrail:0000290:34d343a6-2935-408d-8dbe-07ab47218396", "row_index": 290, "timestamp": "2019-05-19T23:02:32Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d343a6-2935-408d-8dbe-07ab47218396", "eventTime": "2019-05-19T23:02:32Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ec24573-8097-451b-8167-329422c04b3df", "record_id": "flaws_cloudtrail:0000291:9ec24573-8097-451b-8167-329422c04b3df", "row_index": 291, "timestamp": "2019-05-19T23:02:32Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ec24573-8097-451b-8167-329422c04b3df", "eventTime": "2019-05-19T23:02:32Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "record_id": "flaws_cloudtrail:0000292:2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "row_index": 292, "timestamp": "2019-05-19T23:02:32Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6129c2-9b7b-4e9f-acc7-d886fbb1bce3", "eventTime": "2019-05-19T23:02:32Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d343a6-2935-408d-8dbe-07ab47218396", "record_id": "flaws_cloudtrail:0000293:34d343a6-2935-408d-8dbe-07ab47218396", "row_index": 293, "timestamp": "2019-05-19T23:02:32Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d343a6-2935-408d-8dbe-07ab47218396", "eventTime": "2019-05-19T23:02:32Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ec24573-8097-451b-8167-329422c04b3df", "record_id": "flaws_cloudtrail:0000294:9ec24573-8097-451b-8167-329422c04b3df", "row_index": 294, "timestamp": "2019-05-19T23:02:32Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ec24573-8097-451b-8167-329422c04b3df", "eventTime": "2019-05-19T23:02:32Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d53929-f145-4420-a3c4-ac592efa16fc", "record_id": "flaws_cloudtrail:0000295:1d53929-f145-4420-a3c4-ac592efa16fc", "row_index": 295, "timestamp": "2019-05-19T23:03:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d53929-f145-4420-a3c4-ac592efa16fc", "eventTime": "2019-05-19T23:03:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5abfaaec-0b12-49ea-8628-fa6fefd97e24", "record_id": "flaws_cloudtrail:0000296:5abfaaec-0b12-49ea-8628-fa6fefd97e24", "row_index": 296, "timestamp": "2019-05-19T23:03:43Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5abfaaec-0b12-49ea-8628-fa6fefd97e24", "eventTime": "2019-05-19T23:03:43Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1d9022-8aaa-461f-8764-befe5be71486", "record_id": "flaws_cloudtrail:0000297:2e1d9022-8aaa-461f-8764-befe5be71486", "row_index": 297, "timestamp": "2019-05-19T23:03:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1d9022-8aaa-461f-8764-befe5be71486", "eventTime": "2019-05-19T23:03:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d53929-f145-4420-a3c4-ac592efa16fc", "record_id": "flaws_cloudtrail:0000298:1d53929-f145-4420-a3c4-ac592efa16fc", "row_index": 298, "timestamp": "2019-05-19T23:03:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d53929-f145-4420-a3c4-ac592efa16fc", "eventTime": "2019-05-19T23:03:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5abfaaec-0b12-49ea-8628-fa6fefd97e24", "record_id": "flaws_cloudtrail:0000299:5abfaaec-0b12-49ea-8628-fa6fefd97e24", "row_index": 299, "timestamp": "2019-05-19T23:03:43Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5abfaaec-0b12-49ea-8628-fa6fefd97e24", "eventTime": "2019-05-19T23:03:43Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1d9022-8aaa-461f-8764-befe5be71486", "record_id": "flaws_cloudtrail:0000300:2e1d9022-8aaa-461f-8764-befe5be71486", "row_index": 300, "timestamp": "2019-05-19T23:03:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1d9022-8aaa-461f-8764-befe5be71486", "eventTime": "2019-05-19T23:03:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4df2931-9732-419d-9c7f-71c61da77f11", "record_id": "flaws_cloudtrail:0000301:c4df2931-9732-419d-9c7f-71c61da77f11", "row_index": 301, "timestamp": "2019-05-19T23:04:44Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4df2931-9732-419d-9c7f-71c61da77f11", "eventTime": "2019-05-19T23:04:44Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4df2931-9732-419d-9c7f-71c61da77f11", "record_id": "flaws_cloudtrail:0000302:c4df2931-9732-419d-9c7f-71c61da77f11", "row_index": 302, "timestamp": "2019-05-19T23:04:44Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4df2931-9732-419d-9c7f-71c61da77f11", "eventTime": "2019-05-19T23:04:44Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41b8397-f2fd-4193-92f0-5b2d04b7f458", "record_id": "flaws_cloudtrail:0000303:b41b8397-f2fd-4193-92f0-5b2d04b7f458", "row_index": 303, "timestamp": "2019-05-19T23:04:45Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41b8397-f2fd-4193-92f0-5b2d04b7f458", "eventTime": "2019-05-19T23:04:45Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "record_id": "flaws_cloudtrail:0000304:4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "row_index": 304, "timestamp": "2019-05-19T23:04:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "eventTime": "2019-05-19T23:04:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41b8397-f2fd-4193-92f0-5b2d04b7f458", "record_id": "flaws_cloudtrail:0000305:b41b8397-f2fd-4193-92f0-5b2d04b7f458", "row_index": 305, "timestamp": "2019-05-19T23:04:45Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41b8397-f2fd-4193-92f0-5b2d04b7f458", "eventTime": "2019-05-19T23:04:45Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "record_id": "flaws_cloudtrail:0000306:4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "row_index": 306, "timestamp": "2019-05-19T23:04:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dccfbc7-feb4-4aaf-b1ea-2991475014e8", "eventTime": "2019-05-19T23:04:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23d2e26c-c0e8-426d-822d-84df5190e10c", "record_id": "flaws_cloudtrail:0000307:23d2e26c-c0e8-426d-822d-84df5190e10c", "row_index": 307, "timestamp": "2019-05-19T23:05:16Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23d2e26c-c0e8-426d-822d-84df5190e10c", "eventTime": "2019-05-19T23:05:16Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc19d08a-e38d-4749-9e70-246ce21b6d9b", "record_id": "flaws_cloudtrail:0000308:fc19d08a-e38d-4749-9e70-246ce21b6d9b", "row_index": 308, "timestamp": "2019-05-19T23:05:16Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc19d08a-e38d-4749-9e70-246ce21b6d9b", "eventTime": "2019-05-19T23:05:16Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e00de07-f796-4bf3-8f72-53665cb3e", "record_id": "flaws_cloudtrail:0000309:5e00de07-f796-4bf3-8f72-53665cb3e", "row_index": 309, "timestamp": "2019-05-19T23:05:16Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e00de07-f796-4bf3-8f72-53665cb3e", "eventTime": "2019-05-19T23:05:16Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23d2e26c-c0e8-426d-822d-84df5190e10c", "record_id": "flaws_cloudtrail:0000310:23d2e26c-c0e8-426d-822d-84df5190e10c", "row_index": 310, "timestamp": "2019-05-19T23:05:16Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23d2e26c-c0e8-426d-822d-84df5190e10c", "eventTime": "2019-05-19T23:05:16Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc19d08a-e38d-4749-9e70-246ce21b6d9b", "record_id": "flaws_cloudtrail:0000311:fc19d08a-e38d-4749-9e70-246ce21b6d9b", "row_index": 311, "timestamp": "2019-05-19T23:05:16Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc19d08a-e38d-4749-9e70-246ce21b6d9b", "eventTime": "2019-05-19T23:05:16Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e00de07-f796-4bf3-8f72-53665cb3e", "record_id": "flaws_cloudtrail:0000312:5e00de07-f796-4bf3-8f72-53665cb3e", "row_index": 312, "timestamp": "2019-05-19T23:05:16Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e00de07-f796-4bf3-8f72-53665cb3e", "eventTime": "2019-05-19T23:05:16Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6e49de6-28da-4129-ab9d-20b97cf73105", "record_id": "flaws_cloudtrail:0000313:e6e49de6-28da-4129-ab9d-20b97cf73105", "row_index": 313, "timestamp": "2019-05-19T23:06:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6e49de6-28da-4129-ab9d-20b97cf73105", "eventTime": "2019-05-19T23:06:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6e49de6-28da-4129-ab9d-20b97cf73105", "record_id": "flaws_cloudtrail:0000314:e6e49de6-28da-4129-ab9d-20b97cf73105", "row_index": 314, "timestamp": "2019-05-19T23:06:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6e49de6-28da-4129-ab9d-20b97cf73105", "eventTime": "2019-05-19T23:06:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa97497-3a19-46ad-8ed3-38e0fe2e320b", "record_id": "flaws_cloudtrail:0000315:fa97497-3a19-46ad-8ed3-38e0fe2e320b", "row_index": 315, "timestamp": "2019-05-19T23:06:02Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa97497-3a19-46ad-8ed3-38e0fe2e320b", "eventTime": "2019-05-19T23:06:02Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38edd977-b4f5-4014-a915-34386b716279b", "record_id": "flaws_cloudtrail:0000316:38edd977-b4f5-4014-a915-34386b716279b", "row_index": 316, "timestamp": "2019-05-19T23:06:02Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38edd977-b4f5-4014-a915-34386b716279b", "eventTime": "2019-05-19T23:06:02Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa97497-3a19-46ad-8ed3-38e0fe2e320b", "record_id": "flaws_cloudtrail:0000317:fa97497-3a19-46ad-8ed3-38e0fe2e320b", "row_index": 317, "timestamp": "2019-05-19T23:06:02Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa97497-3a19-46ad-8ed3-38e0fe2e320b", "eventTime": "2019-05-19T23:06:02Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38edd977-b4f5-4014-a915-34386b716279b", "record_id": "flaws_cloudtrail:0000318:38edd977-b4f5-4014-a915-34386b716279b", "row_index": 318, "timestamp": "2019-05-19T23:06:02Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38edd977-b4f5-4014-a915-34386b716279b", "eventTime": "2019-05-19T23:06:02Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "record_id": "flaws_cloudtrail:0000319:4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "row_index": 319, "timestamp": "2019-05-19T23:06:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "eventTime": "2019-05-19T23:06:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "record_id": "flaws_cloudtrail:0000320:b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "row_index": 320, "timestamp": "2019-05-19T23:06:36Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "eventTime": "2019-05-19T23:06:36Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a5ab9dd-6311-4014-ac98-38422adb8", "record_id": "flaws_cloudtrail:0000321:3a5ab9dd-6311-4014-ac98-38422adb8", "row_index": 321, "timestamp": "2019-05-19T23:06:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a5ab9dd-6311-4014-ac98-38422adb8", "eventTime": "2019-05-19T23:06:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "record_id": "flaws_cloudtrail:0000322:4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "row_index": 322, "timestamp": "2019-05-19T23:06:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d38094-5ca8-4ce3-abc3-0fdda07f23a1", "eventTime": "2019-05-19T23:06:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "record_id": "flaws_cloudtrail:0000323:b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "row_index": 323, "timestamp": "2019-05-19T23:06:36Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b64e899f-9ca8-470c-8ba0-b11ce72f4af5", "eventTime": "2019-05-19T23:06:36Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a5ab9dd-6311-4014-ac98-38422adb8", "record_id": "flaws_cloudtrail:0000324:3a5ab9dd-6311-4014-ac98-38422adb8", "row_index": 324, "timestamp": "2019-05-19T23:06:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a5ab9dd-6311-4014-ac98-38422adb8", "eventTime": "2019-05-19T23:06:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2933ecae-0961-4735-b75f-7e5b523020bf", "record_id": "flaws_cloudtrail:0000325:2933ecae-0961-4735-b75f-7e5b523020bf", "row_index": 325, "timestamp": "2019-05-19T23:12:36Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2933ecae-0961-4735-b75f-7e5b523020bf", "eventTime": "2019-05-19T23:12:36Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2933ecae-0961-4735-b75f-7e5b523020bf", "record_id": "flaws_cloudtrail:0000326:2933ecae-0961-4735-b75f-7e5b523020bf", "row_index": 326, "timestamp": "2019-05-19T23:12:36Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2933ecae-0961-4735-b75f-7e5b523020bf", "eventTime": "2019-05-19T23:12:36Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba423d79-0d12-4c64-a4df-a9ffe8f06242", "record_id": "flaws_cloudtrail:0000327:ba423d79-0d12-4c64-a4df-a9ffe8f06242", "row_index": 327, "timestamp": "2019-05-19T23:14:31Z", "event_type": "GetGatewayResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba423d79-0d12-4c64-a4df-a9ffe8f06242", "eventTime": "2019-05-19T23:14:31Z", "eventName": "GetGatewayResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "responseType": "INVALID_API_KEY", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba423d79-0d12-4c64-a4df-a9ffe8f06242", "record_id": "flaws_cloudtrail:0000328:ba423d79-0d12-4c64-a4df-a9ffe8f06242", "row_index": 328, "timestamp": "2019-05-19T23:14:31Z", "event_type": "GetGatewayResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba423d79-0d12-4c64-a4df-a9ffe8f06242", "eventTime": "2019-05-19T23:14:31Z", "eventName": "GetGatewayResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "responseType": "INVALID_API_KEY", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc092e8-138a-4faf-b281-fc01df10ade0", "record_id": "flaws_cloudtrail:0000329:8bc092e8-138a-4faf-b281-fc01df10ade0", "row_index": 329, "timestamp": "2019-05-19T23:15:50Z", "event_type": "GetGatewayResponses", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc092e8-138a-4faf-b281-fc01df10ade0", "eventTime": "2019-05-19T23:15:50Z", "eventName": "GetGatewayResponses", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc092e8-138a-4faf-b281-fc01df10ade0", "record_id": "flaws_cloudtrail:0000330:8bc092e8-138a-4faf-b281-fc01df10ade0", "row_index": 330, "timestamp": "2019-05-19T23:15:50Z", "event_type": "GetGatewayResponses", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc092e8-138a-4faf-b281-fc01df10ade0", "eventTime": "2019-05-19T23:15:50Z", "eventName": "GetGatewayResponses", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f08bde6d-653c-4d86-8473-e2ce285e6fa4", "record_id": "flaws_cloudtrail:0000331:f08bde6d-653c-4d86-8473-e2ce285e6fa4", "row_index": 331, "timestamp": "2019-05-19T23:30:10Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f08bde6d-653c-4d86-8473-e2ce285e6fa4", "eventTime": "2019-05-19T23:30:10Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f08bde6d-653c-4d86-8473-e2ce285e6fa4", "record_id": "flaws_cloudtrail:0000332:f08bde6d-653c-4d86-8473-e2ce285e6fa4", "row_index": 332, "timestamp": "2019-05-19T23:30:10Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f08bde6d-653c-4d86-8473-e2ce285e6fa4", "eventTime": "2019-05-19T23:30:10Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a39ae95f-0912-4b7b-b4cf-198fed40184d", "record_id": "flaws_cloudtrail:0000333:a39ae95f-0912-4b7b-b4cf-198fed40184d", "row_index": 333, "timestamp": "2019-05-19T23:30:54Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a39ae95f-0912-4b7b-b4cf-198fed40184d", "eventTime": "2019-05-19T23:30:54Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a39ae95f-0912-4b7b-b4cf-198fed40184d", "record_id": "flaws_cloudtrail:0000334:a39ae95f-0912-4b7b-b4cf-198fed40184d", "row_index": 334, "timestamp": "2019-05-19T23:30:54Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a39ae95f-0912-4b7b-b4cf-198fed40184d", "eventTime": "2019-05-19T23:30:54Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "record_id": "flaws_cloudtrail:0000335:cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "row_index": 335, "timestamp": "2019-05-19T23:33:08Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "eventTime": "2019-05-19T23:33:08Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad299936-b9c6-4e50-a352-8a08c6ec3224", "record_id": "flaws_cloudtrail:0000336:2ad299936-b9c6-4e50-a352-8a08c6ec3224", "row_index": 336, "timestamp": "2019-05-19T23:33:08Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad299936-b9c6-4e50-a352-8a08c6ec3224", "eventTime": "2019-05-19T23:33:08Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad299936-b9c6-4e50-a352-8a08c6ec3224", "record_id": "flaws_cloudtrail:0000337:2ad299936-b9c6-4e50-a352-8a08c6ec3224", "row_index": 337, "timestamp": "2019-05-19T23:33:08Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad299936-b9c6-4e50-a352-8a08c6ec3224", "eventTime": "2019-05-19T23:33:08Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "record_id": "flaws_cloudtrail:0000338:cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "row_index": 338, "timestamp": "2019-05-19T23:33:08Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbb219e6-ba6a-4f77-8241-b48ed254ea6e", "eventTime": "2019-05-19T23:33:08Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfee539f-ad41-4f0c-84be-64958747eb72", "record_id": "flaws_cloudtrail:0000339:dfee539f-ad41-4f0c-84be-64958747eb72", "row_index": 339, "timestamp": "2019-05-19T23:50:11Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfee539f-ad41-4f0c-84be-64958747eb72", "eventTime": "2019-05-19T23:50:11Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:puspzvwgb6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfee539f-ad41-4f0c-84be-64958747eb72", "record_id": "flaws_cloudtrail:0000340:dfee539f-ad41-4f0c-84be-64958747eb72", "row_index": 340, "timestamp": "2019-05-19T23:50:11Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfee539f-ad41-4f0c-84be-64958747eb72", "eventTime": "2019-05-19T23:50:11Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:puspzvwgb6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "record_id": "flaws_cloudtrail:0000341:bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "row_index": 341, "timestamp": "2019-05-19T23:50:27Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "eventTime": "2019-05-19T23:50:27Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "record_id": "flaws_cloudtrail:0000342:bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "row_index": 342, "timestamp": "2019-05-19T23:50:27Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcaa763c-0f76-43b5-95d9-cb7ed6c812f3", "eventTime": "2019-05-19T23:50:27Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "record_id": "flaws_cloudtrail:0000343:47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "row_index": 343, "timestamp": "2019-05-19T23:55:25Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "eventTime": "2019-05-19T23:55:25Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "record_id": "flaws_cloudtrail:0000344:47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "row_index": 344, "timestamp": "2019-05-19T23:55:25Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f2bde7-fb9d-41f3-8cb8-1952a74bed4a", "eventTime": "2019-05-19T23:55:25Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "record_id": "flaws_cloudtrail:0000345:3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "row_index": 345, "timestamp": "2019-05-19T23:57:10Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "eventTime": "2019-05-19T23:57:10Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "record_id": "flaws_cloudtrail:0000346:3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "row_index": 346, "timestamp": "2019-05-19T23:57:10Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c6d5c67-c5c2-4c6c-ab94-c409e2f64853", "eventTime": "2019-05-19T23:57:10Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35018-0267-4007-b391-117fca3eff31", "record_id": "flaws_cloudtrail:0000347:35018-0267-4007-b391-117fca3eff31", "row_index": 347, "timestamp": "2019-05-19T23:58:38Z", "event_type": "GetMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35018-0267-4007-b391-117fca3eff31", "eventTime": "2019-05-19T23:58:38Z", "eventName": "GetMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "httpMethod": "GET", "resourceId": "6m5gni", "statusCode": "200", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35018-0267-4007-b391-117fca3eff31", "record_id": "flaws_cloudtrail:0000348:35018-0267-4007-b391-117fca3eff31", "row_index": 348, "timestamp": "2019-05-19T23:58:38Z", "event_type": "GetMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35018-0267-4007-b391-117fca3eff31", "eventTime": "2019-05-19T23:58:38Z", "eventName": "GetMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "httpMethod": "GET", "resourceId": "6m5gni", "statusCode": "200", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e032e5-d5d8-4970-a088-b2b608512fba4", "record_id": "flaws_cloudtrail:0000349:64e032e5-d5d8-4970-a088-b2b608512fba4", "row_index": 349, "timestamp": "2019-05-19T23:58:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e032e5-d5d8-4970-a088-b2b608512fba4", "eventTime": "2019-05-19T23:58:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e032e5-d5d8-4970-a088-b2b608512fba4", "record_id": "flaws_cloudtrail:0000350:64e032e5-d5d8-4970-a088-b2b608512fba4", "row_index": 350, "timestamp": "2019-05-19T23:58:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e032e5-d5d8-4970-a088-b2b608512fba4", "eventTime": "2019-05-19T23:58:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "record_id": "flaws_cloudtrail:0000351:43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "row_index": 351, "timestamp": "2019-05-19T23:59:36Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "eventTime": "2019-05-19T23:59:36Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Resource identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "y8nk5v2z1h", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "record_id": "flaws_cloudtrail:0000352:43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "row_index": 352, "timestamp": "2019-05-19T23:59:36Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43be9b2c-d7a3-4dd7-aa42-739ff7a2e57a", "eventTime": "2019-05-19T23:59:36Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Resource identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "y8nk5v2z1h", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "record_id": "flaws_cloudtrail:0000353:0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "row_index": 353, "timestamp": "2019-05-19T23:59:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "eventTime": "2019-05-19T23:59:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "y8nk5v2z1h", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "record_id": "flaws_cloudtrail:0000354:0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "row_index": 354, "timestamp": "2019-05-19T23:59:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a97007a-5e79-4e1b-819e-eb1d3942f2d3", "eventTime": "2019-05-19T23:59:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "y8nk5v2z1h", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed3c872-be08-449d-825c-fd45490c9dac", "record_id": "flaws_cloudtrail:0000355:aed3c872-be08-449d-825c-fd45490c9dac", "row_index": 355, "timestamp": "2019-05-19T23:59:58Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed3c872-be08-449d-825c-fd45490c9dac", "eventTime": "2019-05-19T23:59:58Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed3c872-be08-449d-825c-fd45490c9dac", "record_id": "flaws_cloudtrail:0000356:aed3c872-be08-449d-825c-fd45490c9dac", "row_index": 356, "timestamp": "2019-05-19T23:59:58Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed3c872-be08-449d-825c-fd45490c9dac", "eventTime": "2019-05-19T23:59:58Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83de3900-9138-4dbd-b44d-541090b5b04b", "record_id": "flaws_cloudtrail:0000357:83de3900-9138-4dbd-b44d-541090b5b04b", "row_index": 357, "timestamp": "2019-05-20T00:00:26Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83de3900-9138-4dbd-b44d-541090b5b04b", "eventTime": "2019-05-20T00:00:26Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "y8nk5v2z1h", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83de3900-9138-4dbd-b44d-541090b5b04b", "record_id": "flaws_cloudtrail:0000358:83de3900-9138-4dbd-b44d-541090b5b04b", "row_index": 358, "timestamp": "2019-05-20T00:00:26Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83de3900-9138-4dbd-b44d-541090b5b04b", "eventTime": "2019-05-20T00:00:26Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "y8nk5v2z1h", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d26d1fd5-f451-4895-85c4-25201a1c3569", "record_id": "flaws_cloudtrail:0000359:d26d1fd5-f451-4895-85c4-25201a1c3569", "row_index": 359, "timestamp": "2019-05-20T00:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d26d1fd5-f451-4895-85c4-25201a1c3569", "eventTime": "2019-05-20T00:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABV8U7331XO6KF6ZC", "expiration": "May 20, 2019 6:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d26d1fd5-f451-4895-85c4-25201a1c3569", "record_id": "flaws_cloudtrail:0000360:d26d1fd5-f451-4895-85c4-25201a1c3569", "row_index": 360, "timestamp": "2019-05-20T00:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d26d1fd5-f451-4895-85c4-25201a1c3569", "eventTime": "2019-05-20T00:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABV8U7331XO6KF6ZC", "expiration": "May 20, 2019 6:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33653f0-36ad-4636-b3a8-aeaac3d9879b", "record_id": "flaws_cloudtrail:0000361:e33653f0-36ad-4636-b3a8-aeaac3d9879b", "row_index": 361, "timestamp": "2019-05-20T00:02:32Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33653f0-36ad-4636-b3a8-aeaac3d9879b", "eventTime": "2019-05-20T00:02:32Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33653f0-36ad-4636-b3a8-aeaac3d9879b", "record_id": "flaws_cloudtrail:0000362:e33653f0-36ad-4636-b3a8-aeaac3d9879b", "row_index": 362, "timestamp": "2019-05-20T00:02:32Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33653f0-36ad-4636-b3a8-aeaac3d9879b", "eventTime": "2019-05-20T00:02:32Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ed8709d-52a6-4ded-8780-5fba3822fa6f", "record_id": "flaws_cloudtrail:0000363:2ed8709d-52a6-4ded-8780-5fba3822fa6f", "row_index": 363, "timestamp": "2019-05-20T00:04:47Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ed8709d-52a6-4ded-8780-5fba3822fa6f", "eventTime": "2019-05-20T00:04:47Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ed8709d-52a6-4ded-8780-5fba3822fa6f", "record_id": "flaws_cloudtrail:0000364:2ed8709d-52a6-4ded-8780-5fba3822fa6f", "row_index": 364, "timestamp": "2019-05-20T00:04:47Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ed8709d-52a6-4ded-8780-5fba3822fa6f", "eventTime": "2019-05-20T00:04:47Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f014c85-c4e6-4d60-9d38-d0cf176c491e", "record_id": "flaws_cloudtrail:0000365:3f014c85-c4e6-4d60-9d38-d0cf176c491e", "row_index": 365, "timestamp": "2019-05-20T00:09:26Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f014c85-c4e6-4d60-9d38-d0cf176c491e", "eventTime": "2019-05-20T00:09:26Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f014c85-c4e6-4d60-9d38-d0cf176c491e", "record_id": "flaws_cloudtrail:0000366:3f014c85-c4e6-4d60-9d38-d0cf176c491e", "row_index": 366, "timestamp": "2019-05-20T00:09:26Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f014c85-c4e6-4d60-9d38-d0cf176c491e", "eventTime": "2019-05-20T00:09:26Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7faceaf0-024e-493b-b046-7a6ea4a729b1", "record_id": "flaws_cloudtrail:0000367:7faceaf0-024e-493b-b046-7a6ea4a729b1", "row_index": 367, "timestamp": "2019-05-20T00:09:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7faceaf0-024e-493b-b046-7a6ea4a729b1", "eventTime": "2019-05-20T00:09:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7faceaf0-024e-493b-b046-7a6ea4a729b1", "record_id": "flaws_cloudtrail:0000368:7faceaf0-024e-493b-b046-7a6ea4a729b1", "row_index": 368, "timestamp": "2019-05-20T00:09:54Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7faceaf0-024e-493b-b046-7a6ea4a729b1", "eventTime": "2019-05-20T00:09:54Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91d8ce9a-4ef9-4289-904a-add674bf3754", "record_id": "flaws_cloudtrail:0000369:91d8ce9a-4ef9-4289-904a-add674bf3754", "row_index": 369, "timestamp": "2019-05-20T00:13:57Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91d8ce9a-4ef9-4289-904a-add674bf3754", "eventTime": "2019-05-20T00:13:57Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91d8ce9a-4ef9-4289-904a-add674bf3754", "record_id": "flaws_cloudtrail:0000370:91d8ce9a-4ef9-4289-904a-add674bf3754", "row_index": 370, "timestamp": "2019-05-20T00:13:57Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91d8ce9a-4ef9-4289-904a-add674bf3754", "eventTime": "2019-05-20T00:13:57Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "record_id": "flaws_cloudtrail:0000371:12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "row_index": 371, "timestamp": "2019-05-20T00:18:19Z", "event_type": "GetRequestValidators", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "eventTime": "2019-05-20T00:18:19Z", "eventName": "GetRequestValidators", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "record_id": "flaws_cloudtrail:0000372:12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "row_index": 372, "timestamp": "2019-05-20T00:18:19Z", "event_type": "GetRequestValidators", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12569d-8a9a-4fa5-bbaf-2b4e9ef88bb3", "eventTime": "2019-05-20T00:18:19Z", "eventName": "GetRequestValidators", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485932d-906d-4cda-a205-d00981a48815", "record_id": "flaws_cloudtrail:0000373:485932d-906d-4cda-a205-d00981a48815", "row_index": 373, "timestamp": "2019-05-20T00:18:58Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485932d-906d-4cda-a205-d00981a48815", "eventTime": "2019-05-20T00:18:58Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485932d-906d-4cda-a205-d00981a48815", "record_id": "flaws_cloudtrail:0000374:485932d-906d-4cda-a205-d00981a48815", "row_index": 374, "timestamp": "2019-05-20T00:18:58Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485932d-906d-4cda-a205-d00981a48815", "eventTime": "2019-05-20T00:18:58Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "record_id": "flaws_cloudtrail:0000375:e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "row_index": 375, "timestamp": "2019-05-20T00:21:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "eventTime": "2019-05-20T00:21:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "record_id": "flaws_cloudtrail:0000376:e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "row_index": 376, "timestamp": "2019-05-20T00:21:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04f8192-a6e9-43cb-9240-bc4c5541c6d5", "eventTime": "2019-05-20T00:21:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4240c8e9-f0c3-4cba-b1e1-8f304283a", "record_id": "flaws_cloudtrail:0000377:4240c8e9-f0c3-4cba-b1e1-8f304283a", "row_index": 377, "timestamp": "2019-05-20T00:21:43Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4240c8e9-f0c3-4cba-b1e1-8f304283a", "eventTime": "2019-05-20T00:21:43Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4240c8e9-f0c3-4cba-b1e1-8f304283a", "record_id": "flaws_cloudtrail:0000378:4240c8e9-f0c3-4cba-b1e1-8f304283a", "row_index": 378, "timestamp": "2019-05-20T00:21:43Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4240c8e9-f0c3-4cba-b1e1-8f304283a", "eventTime": "2019-05-20T00:21:43Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "6m5gni", "httpMethod": "GET", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "record_id": "flaws_cloudtrail:0000379:80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "row_index": 379, "timestamp": "2019-05-20T00:22:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "eventTime": "2019-05-20T00:22:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVF5MW95ISTHV01NI", "expiration": "May 20, 2019 1:22:00 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "record_id": "flaws_cloudtrail:0000380:80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "row_index": 380, "timestamp": "2019-05-20T00:22:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80b5cd3e-591e-4ed3-8eb4-460ae4bc9ed4", "eventTime": "2019-05-20T00:22:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVF5MW95ISTHV01NI", "expiration": "May 20, 2019 1:22:00 AM", "sessionToken": "AgoGb3JpZ2luELT//////////wEaCXVzLXdlc3QtMiKAAh9A3DwA9upnQjaA6WywPsfe96Zjbp50AL15eF4UYWGGYS7cEcoJ600wswv6rfJkrGXbzpx+ziQ6808IS1BBv57/aLkL7FkN5vwfWL0BzHufoadzSGo1lZXo55QdqA1huZ1mzoWmedKcIULSsoxtkR49reaZYAGUzymm6HfcBV/AzFLn8u/8IklqLpmvr21xN8NAoAdlXGTUi5a8Gf8W/DSLgWiIDLvHdObzzB90NbQQk6xzYVbkSP30BMJXrFVhBL7k08yVYQLG7iRymmG/ziZkAn8gkU9hb6UoqQI14LIa2Gf8jKHzLZqfI2dU4xiGzzJ4r2jHHWd2uC8QXKYWdwQq6AIIahAAGgw5NzU0MjYyNjIwMjkiDOWlh4Jyx8q5QelmrSrFAi9RQp+rWeHxqTSLjLnADmIJB3QImkoJ/9KADn1Ft5MpvKgL67K3nm3EtMWCbuADLxwT4RLjNauq1HpEUhSDw/nGoUVq/qFtBDL1XOilUrBu0jyTCAVQxHvhw1T2lp4ogk4spQFLmIURz6q2ZTbQkidj3zbZmehMn9i5Vh5ivZE+MybUp0ek0PyeIT1Kgi+AfqlLgeJsXejQg4JJDDmoHwTZX9DZRNH7cdpu9gWh363HvOlyPcv04G+P/bUqEcJikxH00GWIY0LSW8FO15l0/CB61vTd2hncvqXD3kD52eSrScRwCwOgCcUYW8bFGSIGDboSv9y96tKJ/ytkkDC1Wz8XSlVV6sWKKQNXNzXWLDeEtYS7VCohm23LNyOvBFT1VGjJAc0eim042bhs770pmJXKA8ABHUO1IJi7qAb3teEOkKewpKQwqOaH5wU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33c368a8-8a2c-48d4-9086-2dc286966", "record_id": "flaws_cloudtrail:0000381:33c368a8-8a2c-48d4-9086-2dc286966", "row_index": 381, "timestamp": "2019-05-20T00:24:19Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33c368a8-8a2c-48d4-9086-2dc286966", "eventTime": "2019-05-20T00:24:19Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33c368a8-8a2c-48d4-9086-2dc286966", "record_id": "flaws_cloudtrail:0000382:33c368a8-8a2c-48d4-9086-2dc286966", "row_index": 382, "timestamp": "2019-05-20T00:24:19Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33c368a8-8a2c-48d4-9086-2dc286966", "eventTime": "2019-05-20T00:24:19Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7869ba45-fff7-4dce-b0dc-09ffc315a400", "record_id": "flaws_cloudtrail:0000383:7869ba45-fff7-4dce-b0dc-09ffc315a400", "row_index": 383, "timestamp": "2019-05-20T01:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7869ba45-fff7-4dce-b0dc-09ffc315a400", "eventTime": "2019-05-20T01:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALXK64FN2TLJ20LTN", "expiration": "May 20, 2019 7:05:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7869ba45-fff7-4dce-b0dc-09ffc315a400", "record_id": "flaws_cloudtrail:0000384:7869ba45-fff7-4dce-b0dc-09ffc315a400", "row_index": 384, "timestamp": "2019-05-20T01:01:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7869ba45-fff7-4dce-b0dc-09ffc315a400", "eventTime": "2019-05-20T01:01:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALXK64FN2TLJ20LTN", "expiration": "May 20, 2019 7:05:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce3021a0-0691-429b-bf18-83d81886cc10", "record_id": "flaws_cloudtrail:0000385:ce3021a0-0691-429b-bf18-83d81886cc10", "row_index": 385, "timestamp": "2019-05-20T01:06:00Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce3021a0-0691-429b-bf18-83d81886cc10", "eventTime": "2019-05-20T01:06:00Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce3021a0-0691-429b-bf18-83d81886cc10", "record_id": "flaws_cloudtrail:0000386:ce3021a0-0691-429b-bf18-83d81886cc10", "row_index": 386, "timestamp": "2019-05-20T01:06:00Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce3021a0-0691-429b-bf18-83d81886cc10", "eventTime": "2019-05-20T01:06:00Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "record_id": "flaws_cloudtrail:0000387:20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "row_index": 387, "timestamp": "2019-05-20T01:08:09Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "eventTime": "2019-05-20T01:08:09Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "record_id": "flaws_cloudtrail:0000388:20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "row_index": 388, "timestamp": "2019-05-20T01:08:09Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d7d2a3-d5b5-4cff-a1fc-6da8ebe8bf5c", "eventTime": "2019-05-20T01:08:09Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04eb520-648d-452d-9deb-f97d2e8e5f8f", "record_id": "flaws_cloudtrail:0000389:a04eb520-648d-452d-9deb-f97d2e8e5f8f", "row_index": 389, "timestamp": "2019-05-20T01:08:13Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04eb520-648d-452d-9deb-f97d2e8e5f8f", "eventTime": "2019-05-20T01:08:13Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04eb520-648d-452d-9deb-f97d2e8e5f8f", "record_id": "flaws_cloudtrail:0000390:a04eb520-648d-452d-9deb-f97d2e8e5f8f", "row_index": 390, "timestamp": "2019-05-20T01:08:13Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04eb520-648d-452d-9deb-f97d2e8e5f8f", "eventTime": "2019-05-20T01:08:13Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d1eb737-c16e-4b53-a76e-96b2ef944481", "record_id": "flaws_cloudtrail:0000391:3d1eb737-c16e-4b53-a76e-96b2ef944481", "row_index": 391, "timestamp": "2019-05-20T01:08:55Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d1eb737-c16e-4b53-a76e-96b2ef944481", "eventTime": "2019-05-20T01:08:55Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d1eb737-c16e-4b53-a76e-96b2ef944481", "record_id": "flaws_cloudtrail:0000392:3d1eb737-c16e-4b53-a76e-96b2ef944481", "row_index": 392, "timestamp": "2019-05-20T01:08:55Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d1eb737-c16e-4b53-a76e-96b2ef944481", "eventTime": "2019-05-20T01:08:55Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "record_id": "flaws_cloudtrail:0000393:844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "row_index": 393, "timestamp": "2019-05-20T01:11:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "eventTime": "2019-05-20T01:11:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "record_id": "flaws_cloudtrail:0000394:844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "row_index": 394, "timestamp": "2019-05-20T01:11:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844de1f7-a49e-4fcc-a78b-50c73d5c62c2", "eventTime": "2019-05-20T01:11:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f75ef3de-0be8-4701-aa01-d0e1e93420d6", "record_id": "flaws_cloudtrail:0000395:f75ef3de-0be8-4701-aa01-d0e1e93420d6", "row_index": 395, "timestamp": "2019-05-20T01:13:19Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f75ef3de-0be8-4701-aa01-d0e1e93420d6", "eventTime": "2019-05-20T01:13:19Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f75ef3de-0be8-4701-aa01-d0e1e93420d6", "record_id": "flaws_cloudtrail:0000396:f75ef3de-0be8-4701-aa01-d0e1e93420d6", "row_index": 396, "timestamp": "2019-05-20T01:13:19Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f75ef3de-0be8-4701-aa01-d0e1e93420d6", "eventTime": "2019-05-20T01:13:19Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "record_id": "flaws_cloudtrail:0000397:3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "row_index": 397, "timestamp": "2019-05-20T01:13:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "eventTime": "2019-05-20T01:13:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "record_id": "flaws_cloudtrail:0000398:3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "row_index": 398, "timestamp": "2019-05-20T01:13:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c228b49-b0c5-4d43-bc87-8d7f2a0e3518", "eventTime": "2019-05-20T01:13:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c89681-4241-412a-9f16-dca47934e735", "record_id": "flaws_cloudtrail:0000399:50c89681-4241-412a-9f16-dca47934e735", "row_index": 399, "timestamp": "2019-05-20T01:14:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c89681-4241-412a-9f16-dca47934e735", "eventTime": "2019-05-20T01:14:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c89681-4241-412a-9f16-dca47934e735", "record_id": "flaws_cloudtrail:0000400:50c89681-4241-412a-9f16-dca47934e735", "row_index": 400, "timestamp": "2019-05-20T01:14:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c89681-4241-412a-9f16-dca47934e735", "eventTime": "2019-05-20T01:14:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f883d2-30ce-4a7e-9772-3c5bdf139718", "record_id": "flaws_cloudtrail:0000401:e5f883d2-30ce-4a7e-9772-3c5bdf139718", "row_index": 401, "timestamp": "2019-05-20T01:18:28Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f883d2-30ce-4a7e-9772-3c5bdf139718", "eventTime": "2019-05-20T01:18:28Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f883d2-30ce-4a7e-9772-3c5bdf139718", "record_id": "flaws_cloudtrail:0000402:e5f883d2-30ce-4a7e-9772-3c5bdf139718", "row_index": 402, "timestamp": "2019-05-20T01:18:28Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f883d2-30ce-4a7e-9772-3c5bdf139718", "eventTime": "2019-05-20T01:18:28Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6491ff70-76cf-44e0-a31f-4ab1d8477369", "record_id": "flaws_cloudtrail:0000403:6491ff70-76cf-44e0-a31f-4ab1d8477369", "row_index": 403, "timestamp": "2019-05-20T01:18:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6491ff70-76cf-44e0-a31f-4ab1d8477369", "eventTime": "2019-05-20T01:18:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6491ff70-76cf-44e0-a31f-4ab1d8477369", "record_id": "flaws_cloudtrail:0000404:6491ff70-76cf-44e0-a31f-4ab1d8477369", "row_index": 404, "timestamp": "2019-05-20T01:18:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6491ff70-76cf-44e0-a31f-4ab1d8477369", "eventTime": "2019-05-20T01:18:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7522a50-8f12-4d30-97cd-9a3e78f90505", "record_id": "flaws_cloudtrail:0000405:a7522a50-8f12-4d30-97cd-9a3e78f90505", "row_index": 405, "timestamp": "2019-05-20T01:18:57Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7522a50-8f12-4d30-97cd-9a3e78f90505", "eventTime": "2019-05-20T01:18:57Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43bc45e8-304b-452e-9b13-b588c73323", "record_id": "flaws_cloudtrail:0000406:43bc45e8-304b-452e-9b13-b588c73323", "row_index": 406, "timestamp": "2019-05-20T01:18:57Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43bc45e8-304b-452e-9b13-b588c73323", "eventTime": "2019-05-20T01:18:57Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7522a50-8f12-4d30-97cd-9a3e78f90505", "record_id": "flaws_cloudtrail:0000407:a7522a50-8f12-4d30-97cd-9a3e78f90505", "row_index": 407, "timestamp": "2019-05-20T01:18:57Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7522a50-8f12-4d30-97cd-9a3e78f90505", "eventTime": "2019-05-20T01:18:57Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43bc45e8-304b-452e-9b13-b588c73323", "record_id": "flaws_cloudtrail:0000408:43bc45e8-304b-452e-9b13-b588c73323", "row_index": 408, "timestamp": "2019-05-20T01:18:57Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43bc45e8-304b-452e-9b13-b588c73323", "eventTime": "2019-05-20T01:18:57Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "record_id": "flaws_cloudtrail:0000409:2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "row_index": 409, "timestamp": "2019-05-20T01:19:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "eventTime": "2019-05-20T01:19:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "record_id": "flaws_cloudtrail:0000410:340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "row_index": 410, "timestamp": "2019-05-20T01:19:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "eventTime": "2019-05-20T01:19:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "record_id": "flaws_cloudtrail:0000411:2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "row_index": 411, "timestamp": "2019-05-20T01:19:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bffbf3c-1296-4a07-b80c-a9af9530c9d0", "eventTime": "2019-05-20T01:19:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "record_id": "flaws_cloudtrail:0000412:340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "row_index": 412, "timestamp": "2019-05-20T01:19:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340f8971-19dd-45e0-89d0-9bdd0ed0f1b4", "eventTime": "2019-05-20T01:19:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd9266c-44de-47bd-9993-69612e9d40f9", "record_id": "flaws_cloudtrail:0000413:8bd9266c-44de-47bd-9993-69612e9d40f9", "row_index": 413, "timestamp": "2019-05-20T01:19:04Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd9266c-44de-47bd-9993-69612e9d40f9", "eventTime": "2019-05-20T01:19:04Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd9266c-44de-47bd-9993-69612e9d40f9", "record_id": "flaws_cloudtrail:0000414:8bd9266c-44de-47bd-9993-69612e9d40f9", "row_index": 414, "timestamp": "2019-05-20T01:19:04Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd9266c-44de-47bd-9993-69612e9d40f9", "eventTime": "2019-05-20T01:19:04Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab194df-d7b6-4b4c-8712-6ffc85aa2350", "record_id": "flaws_cloudtrail:0000415:dab194df-d7b6-4b4c-8712-6ffc85aa2350", "row_index": 415, "timestamp": "2019-05-20T01:19:16Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab194df-d7b6-4b4c-8712-6ffc85aa2350", "eventTime": "2019-05-20T01:19:16Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab194df-d7b6-4b4c-8712-6ffc85aa2350", "record_id": "flaws_cloudtrail:0000416:dab194df-d7b6-4b4c-8712-6ffc85aa2350", "row_index": 416, "timestamp": "2019-05-20T01:19:16Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab194df-d7b6-4b4c-8712-6ffc85aa2350", "eventTime": "2019-05-20T01:19:16Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "record_id": "flaws_cloudtrail:0000417:37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "row_index": 417, "timestamp": "2019-05-20T01:19:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "eventTime": "2019-05-20T01:19:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945195ee3-b534-4147-b63e-3ba7dff936bd", "record_id": "flaws_cloudtrail:0000418:945195ee3-b534-4147-b63e-3ba7dff936bd", "row_index": 418, "timestamp": "2019-05-20T01:19:17Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945195ee3-b534-4147-b63e-3ba7dff936bd", "eventTime": "2019-05-20T01:19:17Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "record_id": "flaws_cloudtrail:0000419:37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "row_index": 419, "timestamp": "2019-05-20T01:19:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d9ea94-31d7-49c2-87fb-0b8fbe625fc4", "eventTime": "2019-05-20T01:19:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945195ee3-b534-4147-b63e-3ba7dff936bd", "record_id": "flaws_cloudtrail:0000420:945195ee3-b534-4147-b63e-3ba7dff936bd", "row_index": 420, "timestamp": "2019-05-20T01:19:17Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945195ee3-b534-4147-b63e-3ba7dff936bd", "eventTime": "2019-05-20T01:19:17Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "850934-7633-42f1-97a3-f72abfa5bd8a", "record_id": "flaws_cloudtrail:0000421:850934-7633-42f1-97a3-f72abfa5bd8a", "row_index": 421, "timestamp": "2019-05-20T01:19:27Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "850934-7633-42f1-97a3-f72abfa5bd8a", "eventTime": "2019-05-20T01:19:27Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "850934-7633-42f1-97a3-f72abfa5bd8a", "record_id": "flaws_cloudtrail:0000422:850934-7633-42f1-97a3-f72abfa5bd8a", "row_index": 422, "timestamp": "2019-05-20T01:19:27Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "850934-7633-42f1-97a3-f72abfa5bd8a", "eventTime": "2019-05-20T01:19:27Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d428e9-343c-4b42-b061-2befb7f749a3", "record_id": "flaws_cloudtrail:0000423:f9d428e9-343c-4b42-b061-2befb7f749a3", "row_index": 423, "timestamp": "2019-05-20T01:19:28Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d428e9-343c-4b42-b061-2befb7f749a3", "eventTime": "2019-05-20T01:19:28Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "118d5deb-1176-4398-a5b0-12d8c717b995", "record_id": "flaws_cloudtrail:0000424:118d5deb-1176-4398-a5b0-12d8c717b995", "row_index": 424, "timestamp": "2019-05-20T01:19:28Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "118d5deb-1176-4398-a5b0-12d8c717b995", "eventTime": "2019-05-20T01:19:28Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d428e9-343c-4b42-b061-2befb7f749a3", "record_id": "flaws_cloudtrail:0000425:f9d428e9-343c-4b42-b061-2befb7f749a3", "row_index": 425, "timestamp": "2019-05-20T01:19:28Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d428e9-343c-4b42-b061-2befb7f749a3", "eventTime": "2019-05-20T01:19:28Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filter": ["LocalManagedPolicy"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "118d5deb-1176-4398-a5b0-12d8c717b995", "record_id": "flaws_cloudtrail:0000426:118d5deb-1176-4398-a5b0-12d8c717b995", "row_index": 426, "timestamp": "2019-05-20T01:19:28Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "118d5deb-1176-4398-a5b0-12d8c717b995", "eventTime": "2019-05-20T01:19:28Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3087aa7e-0ead-4f84-8bcf-5c168f32193b", "record_id": "flaws_cloudtrail:0000427:3087aa7e-0ead-4f84-8bcf-5c168f32193b", "row_index": 427, "timestamp": "2019-05-20T01:19:56Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3087aa7e-0ead-4f84-8bcf-5c168f32193b", "eventTime": "2019-05-20T01:19:56Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3087aa7e-0ead-4f84-8bcf-5c168f32193b", "record_id": "flaws_cloudtrail:0000428:3087aa7e-0ead-4f84-8bcf-5c168f32193b", "row_index": 428, "timestamp": "2019-05-20T01:19:56Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "69.134.82.165", "user_agent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3087aa7e-0ead-4f84-8bcf-5c168f32193b", "eventTime": "2019-05-20T01:19:56Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "69.134.82.165", "userAgent": "Boto3/1.9.149 Python/2.7.10 Darwin/18.5.0 Botocore/1.12.149 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fabd7bc-b796-477a-83ea-b19930903bc3", "record_id": "flaws_cloudtrail:0000429:2fabd7bc-b796-477a-83ea-b19930903bc3", "row_index": 429, "timestamp": "2019-05-20T01:21:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fabd7bc-b796-477a-83ea-b19930903bc3", "eventTime": "2019-05-20T01:21:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fabd7bc-b796-477a-83ea-b19930903bc3", "record_id": "flaws_cloudtrail:0000430:2fabd7bc-b796-477a-83ea-b19930903bc3", "row_index": 430, "timestamp": "2019-05-20T01:21:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fabd7bc-b796-477a-83ea-b19930903bc3", "eventTime": "2019-05-20T01:21:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9659ca2a-4f5d-4640-a301-feba2ec3cc55", "record_id": "flaws_cloudtrail:0000431:9659ca2a-4f5d-4640-a301-feba2ec3cc55", "row_index": 431, "timestamp": "2019-05-20T01:21:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9659ca2a-4f5d-4640-a301-feba2ec3cc55", "eventTime": "2019-05-20T01:21:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpc1RNZTYzS1N1TWk5SU02aGxaRWJ1aVluQTFMU240UmpjdHcvMlhnZlNka2xVUmljd2NDd3kxc1c5NDhrdWg2TXkvcllHV2xSV2JaME9tckJnZi9JUkN0YWRlTk13U0QyeXBGRWlHK1A3RHJldjc5Z1dveDJ4a1UrV0FrUHl6b0M4RDRMZ2N1OG5uRHhOR3pCSGxCd1pvVW43VE5TcWZ1RkUwV3NScmFVdDA4THNHWjRla1JFQTJUMXBEcXJjMDhmbktheGZPdUlHM28vUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9659ca2a-4f5d-4640-a301-feba2ec3cc55", "record_id": "flaws_cloudtrail:0000432:9659ca2a-4f5d-4640-a301-feba2ec3cc55", "row_index": 432, "timestamp": "2019-05-20T01:21:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9659ca2a-4f5d-4640-a301-feba2ec3cc55", "eventTime": "2019-05-20T01:21:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpc1RNZTYzS1N1TWk5SU02aGxaRWJ1aVluQTFMU240UmpjdHcvMlhnZlNka2xVUmljd2NDd3kxc1c5NDhrdWg2TXkvcllHV2xSV2JaME9tckJnZi9JUkN0YWRlTk13U0QyeXBGRWlHK1A3RHJldjc5Z1dveDJ4a1UrV0FrUHl6b0M4RDRMZ2N1OG5uRHhOR3pCSGxCd1pvVW43VE5TcWZ1RkUwV3NScmFVdDA4THNHWjRla1JFQTJUMXBEcXJjMDhmbktheGZPdUlHM28vUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f23ce67-ac00-4dd0-803c-81149a2c13c6", "record_id": "flaws_cloudtrail:0000433:8f23ce67-ac00-4dd0-803c-81149a2c13c6", "row_index": 433, "timestamp": "2019-05-20T01:21:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f23ce67-ac00-4dd0-803c-81149a2c13c6", "eventTime": "2019-05-20T01:21:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEdkdETVppcklkQ0Y3WGNQclU4dERFNCtQYUx1S3d0K1gza1prM2ZLN2VCNGhkbGw1NHl3Sy9IOW1VeTkzalhWVGFQS2R4bkgvRTM1Q25JdVFMTEk0Uzh3WGZsbHZ5MW85MXFWbFlQNUhQT3krOGs4ajVlVElDVGxNdmNON2VUeGZZU0kvMVZtM3ErYlFETUs0WTY0WENiSmpjb1kxQzQxS3JreldNck9rZDcyQWxIQ2JtYTdCMDVYNDlkbEMwblh0VnB5K0d0MmlTV3pPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "100ea7d4-d8a9-4d15-9484-782f92bfae67", "record_id": "flaws_cloudtrail:0000434:100ea7d4-d8a9-4d15-9484-782f92bfae67", "row_index": 434, "timestamp": "2019-05-20T01:21:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "100ea7d4-d8a9-4d15-9484-782f92bfae67", "eventTime": "2019-05-20T01:21:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaXpacnVjM0U5V1FLWHVkOUNvUkZtUFdUanhWN2RMbFFROXJISDl4alFla1VVQ092VHFuYmtUSjNrYXlMQjREcExnR3Q4ZzVqMGZFdE5yanhKTXM1TEVTbjYwMmp5a0s5V0p4cGxDVVN0MlkzanpjZDlVUGZudUMyckl6N2xUOVFUVmlESXZTYmx0VGN5aE9TdElSckJnS2pRZldCSlJKK3dheTEwWkU5bU9nVnQ0RTlSY3QralZ1QzdYekdjWjg3ZkhVYjJwb0lpcnBHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f23ce67-ac00-4dd0-803c-81149a2c13c6", "record_id": "flaws_cloudtrail:0000435:8f23ce67-ac00-4dd0-803c-81149a2c13c6", "row_index": 435, "timestamp": "2019-05-20T01:21:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f23ce67-ac00-4dd0-803c-81149a2c13c6", "eventTime": "2019-05-20T01:21:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEdkdETVppcklkQ0Y3WGNQclU4dERFNCtQYUx1S3d0K1gza1prM2ZLN2VCNGhkbGw1NHl3Sy9IOW1VeTkzalhWVGFQS2R4bkgvRTM1Q25JdVFMTEk0Uzh3WGZsbHZ5MW85MXFWbFlQNUhQT3krOGs4ajVlVElDVGxNdmNON2VUeGZZU0kvMVZtM3ErYlFETUs0WTY0WENiSmpjb1kxQzQxS3JreldNck9rZDcyQWxIQ2JtYTdCMDVYNDlkbEMwblh0VnB5K0d0MmlTV3pPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "100ea7d4-d8a9-4d15-9484-782f92bfae67", "record_id": "flaws_cloudtrail:0000436:100ea7d4-d8a9-4d15-9484-782f92bfae67", "row_index": 436, "timestamp": "2019-05-20T01:21:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "100ea7d4-d8a9-4d15-9484-782f92bfae67", "eventTime": "2019-05-20T01:21:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaXpacnVjM0U5V1FLWHVkOUNvUkZtUFdUanhWN2RMbFFROXJISDl4alFla1VVQ092VHFuYmtUSjNrYXlMQjREcExnR3Q4ZzVqMGZFdE5yanhKTXM1TEVTbjYwMmp5a0s5V0p4cGxDVVN0MlkzanpjZDlVUGZudUMyckl6N2xUOVFUVmlESXZTYmx0VGN5aE9TdElSckJnS2pRZldCSlJKK3dheTEwWkU5bU9nVnQ0RTlSY3QralZ1QzdYekdjWjg3ZkhVYjJwb0lpcnBHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f3fe42-ae68-4761-ac85-4ee04428dac", "record_id": "flaws_cloudtrail:0000437:47f3fe42-ae68-4761-ac85-4ee04428dac", "row_index": 437, "timestamp": "2019-05-20T01:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f3fe42-ae68-4761-ac85-4ee04428dac", "eventTime": "2019-05-20T01:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WjVOM3lGQ2xXVzdSVXByR2JoMk13R3NuZGltNi9CV1gya0tMRGZaNE5CSkEySE9tTGhCVk43QTh2S1daZlJtdjlLMjd0RXZGbmovVk90THljcFFmaGdWdGpKeVFMa0VnaTMwR2lnVVV2aW5Sd25ZRStwek1hZUtyNno5RlhHZVlxeGJ1b09ud0xwMTVtWFhXb1U3Tzd4eVVPamdGRHFBMnNtMXJ3d01xdWxoSFBWeFRiWWNSVklaSGl1d2llN2o5TEU4UWpXVlQ0bTNmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f3fe42-ae68-4761-ac85-4ee04428dac", "record_id": "flaws_cloudtrail:0000438:47f3fe42-ae68-4761-ac85-4ee04428dac", "row_index": 438, "timestamp": "2019-05-20T01:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f3fe42-ae68-4761-ac85-4ee04428dac", "eventTime": "2019-05-20T01:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WjVOM3lGQ2xXVzdSVXByR2JoMk13R3NuZGltNi9CV1gya0tMRGZaNE5CSkEySE9tTGhCVk43QTh2S1daZlJtdjlLMjd0RXZGbmovVk90THljcFFmaGdWdGpKeVFMa0VnaTMwR2lnVVV2aW5Sd25ZRStwek1hZUtyNno5RlhHZVlxeGJ1b09ud0xwMTVtWFhXb1U3Tzd4eVVPamdGRHFBMnNtMXJ3d01xdWxoSFBWeFRiWWNSVklaSGl1d2llN2o5TEU4UWpXVlQ0bTNmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed36b89c-6eed-4f35-855e-78067f825d6f", "record_id": "flaws_cloudtrail:0000439:ed36b89c-6eed-4f35-855e-78067f825d6f", "row_index": 439, "timestamp": "2019-05-20T01:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed36b89c-6eed-4f35-855e-78067f825d6f", "eventTime": "2019-05-20T01:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQUZwa2R5ZzRvV0JoUDZWdStsVitxeXBrR2NoZ243d1VrZXZtNHYvOSs1aGNldjlVUVZKcnNGb2FoUVQ1NFh0OEc3d1d6Qm1JUTYrS2xpbDc5WTlIVzQwdkp4K3BjbDZtRHNlWEkzZ25teHFWZjBVSlU1UnVDSWxHaVY5OGlpUjQzcXYvM1lOYnN5dElXcm5vbVRyTHA2cGQvZHRDR3JYNWdsQUw5QUlBeDIza0NYQ2t4UHQwbndDS2w0N0JBTWY3d3YwRitrL25IUEU4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "record_id": "flaws_cloudtrail:0000440:3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "row_index": 440, "timestamp": "2019-05-20T01:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "eventTime": "2019-05-20T01:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTSVNic3ZKa3Z3RzNRTTkrdWdjaU9TeHB5enhBa3B1WVM2Qkg4b3owdEREeEszQ2U1c1RQSVc0YW9waW9XRFRRMWI4S3NuRmcyUTVIYm00ZjNDOExqUXB3eFJwcUovblZXY3BWZm5mSm9WVHVmczU4SXJnSmR5SXJNSFkxcjRaMzdqQkR5TUp5MG9jRFEvSlRLdTBCbnVKWkoveGNUd29pVGwzOVNGeFoxcER1QkhEWURrT3EreXc3M3gxdlE1NzFGZzRzTHhyaWhYKzd2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed36b89c-6eed-4f35-855e-78067f825d6f", "record_id": "flaws_cloudtrail:0000441:ed36b89c-6eed-4f35-855e-78067f825d6f", "row_index": 441, "timestamp": "2019-05-20T01:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed36b89c-6eed-4f35-855e-78067f825d6f", "eventTime": "2019-05-20T01:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQUZwa2R5ZzRvV0JoUDZWdStsVitxeXBrR2NoZ243d1VrZXZtNHYvOSs1aGNldjlVUVZKcnNGb2FoUVQ1NFh0OEc3d1d6Qm1JUTYrS2xpbDc5WTlIVzQwdkp4K3BjbDZtRHNlWEkzZ25teHFWZjBVSlU1UnVDSWxHaVY5OGlpUjQzcXYvM1lOYnN5dElXcm5vbVRyTHA2cGQvZHRDR3JYNWdsQUw5QUlBeDIza0NYQ2t4UHQwbndDS2w0N0JBTWY3d3YwRitrL25IUEU4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "record_id": "flaws_cloudtrail:0000442:3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "row_index": 442, "timestamp": "2019-05-20T01:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ebf1e35-f52f-4bb7-b1ac-8ed621959195", "eventTime": "2019-05-20T01:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTSVNic3ZKa3Z3RzNRTTkrdWdjaU9TeHB5enhBa3B1WVM2Qkg4b3owdEREeEszQ2U1c1RQSVc0YW9waW9XRFRRMWI4S3NuRmcyUTVIYm00ZjNDOExqUXB3eFJwcUovblZXY3BWZm5mSm9WVHVmczU4SXJnSmR5SXJNSFkxcjRaMzdqQkR5TUp5MG9jRFEvSlRLdTBCbnVKWkoveGNUd29pVGwzOVNGeFoxcER1QkhEWURrT3EreXc3M3gxdlE1NzFGZzRzTHhyaWhYKzd2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7dc98b-c522-4885-9ae3-d5b4b64258bb", "record_id": "flaws_cloudtrail:0000443:db7dc98b-c522-4885-9ae3-d5b4b64258bb", "row_index": 443, "timestamp": "2019-05-20T01:21:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7dc98b-c522-4885-9ae3-d5b4b64258bb", "eventTime": "2019-05-20T01:21:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvaXp3L1VFTzQ5bi8xVE1EeDB1dWRUWTZrWHBESWYycksyS0lpaDdSUW5IdUtHdWFyTTZZTU5TaDNoZkVUc2llQlU0clloTVVrc0U2RzlrOWZmSmhNRU1KMUw2SE51NUVDTHEzbHB0QldWNnRjQmRHbVd1K3E1cmJhaTdIQko1anN4U2NiTkgyOWswRXBxR1JLd1p4aWttdUZReG1KdlhvMlZmNExkRERDVG5NM2wxMGRGWHpid0J1Nk55L1dnL0ZuOHpvNVB2bThvb0xWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7dc98b-c522-4885-9ae3-d5b4b64258bb", "record_id": "flaws_cloudtrail:0000444:db7dc98b-c522-4885-9ae3-d5b4b64258bb", "row_index": 444, "timestamp": "2019-05-20T01:21:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7dc98b-c522-4885-9ae3-d5b4b64258bb", "eventTime": "2019-05-20T01:21:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvaXp3L1VFTzQ5bi8xVE1EeDB1dWRUWTZrWHBESWYycksyS0lpaDdSUW5IdUtHdWFyTTZZTU5TaDNoZkVUc2llQlU0clloTVVrc0U2RzlrOWZmSmhNRU1KMUw2SE51NUVDTHEzbHB0QldWNnRjQmRHbVd1K3E1cmJhaTdIQko1anN4U2NiTkgyOWswRXBxR1JLd1p4aWttdUZReG1KdlhvMlZmNExkRERDVG5NM2wxMGRGWHpid0J1Nk55L1dnL0ZuOHpvNVB2bThvb0xWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcb759ea-604a-45bc-b958-aea4fb4aa528", "record_id": "flaws_cloudtrail:0000445:bcb759ea-604a-45bc-b958-aea4fb4aa528", "row_index": 445, "timestamp": "2019-05-20T01:21:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcb759ea-604a-45bc-b958-aea4fb4aa528", "eventTime": "2019-05-20T01:21:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsRGREc1lkRXpDK3J6THVLZWt3VythRGcrSmdsT3JhcEI2TytURE9hcHJsdTMwc3d2UjRoblZzam9WRmNmSThjNmxndnlEUEFSZjBqWVNpd3dta1NLUG5sVlVOeWRkb293Z0JHckFWM2RkeG1LTktlL1dkUzZyUFRGOExxdGRqQ0ZFQ3ByNWZuNG05b3loMDNkdUJkUDBFakxteTFzNnFIdCtkZW42cXdaTUtlYU9lNlEvWklLLytHZWpwaDJ4OVYzeFhhZktDQjZ0VFFHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcb759ea-604a-45bc-b958-aea4fb4aa528", "record_id": "flaws_cloudtrail:0000446:bcb759ea-604a-45bc-b958-aea4fb4aa528", "row_index": 446, "timestamp": "2019-05-20T01:21:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcb759ea-604a-45bc-b958-aea4fb4aa528", "eventTime": "2019-05-20T01:21:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsRGREc1lkRXpDK3J6THVLZWt3VythRGcrSmdsT3JhcEI2TytURE9hcHJsdTMwc3d2UjRoblZzam9WRmNmSThjNmxndnlEUEFSZjBqWVNpd3dta1NLUG5sVlVOeWRkb293Z0JHckFWM2RkeG1LTktlL1dkUzZyUFRGOExxdGRqQ0ZFQ3ByNWZuNG05b3loMDNkdUJkUDBFakxteTFzNnFIdCtkZW42cXdaTUtlYU9lNlEvWklLLytHZWpwaDJ4OVYzeFhhZktDQjZ0VFFHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "record_id": "flaws_cloudtrail:0000447:fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "row_index": 447, "timestamp": "2019-05-20T01:21:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "eventTime": "2019-05-20T01:21:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqcG1PZVhtMDIrbFdzRGNxQXg3UXY5SDdFZTlYZW1SUVJBblVRaHp5Ynl5Ni8rNytIMDlXVHJTWTlCZW9TTmROT1lHOUt6aktqcFNOdFNyWkQ1TTQ3YmlNVWtNb29yaDIzQk9JVkRpRFppa010VE1BNThpdFd0WTI5NnJFOW9veGtuNTlRM2FRWXJycDdKL0l6Qlg5MlpMRDdzS3NjRUdxWERsY0RRenYwK01zbk5qZ3FQMW5GZU5lZW03MXJlS2tqUnlIcmVTTnNaak9Qdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "record_id": "flaws_cloudtrail:0000448:fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "row_index": 448, "timestamp": "2019-05-20T01:21:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcaac4ff-787b-4bb5-a389-0a5fc2eee4a2", "eventTime": "2019-05-20T01:21:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqcG1PZVhtMDIrbFdzRGNxQXg3UXY5SDdFZTlYZW1SUVJBblVRaHp5Ynl5Ni8rNytIMDlXVHJTWTlCZW9TTmROT1lHOUt6aktqcFNOdFNyWkQ1TTQ3YmlNVWtNb29yaDIzQk9JVkRpRFppa010VE1BNThpdFd0WTI5NnJFOW9veGtuNTlRM2FRWXJycDdKL0l6Qlg5MlpMRDdzS3NjRUdxWERsY0RRenYwK01zbk5qZ3FQMW5GZU5lZW03MXJlS2tqUnlIcmVTTnNaak9Qdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "record_id": "flaws_cloudtrail:0000449:8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "row_index": 449, "timestamp": "2019-05-20T01:21:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "eventTime": "2019-05-20T01:21:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpamtrakFFbFpOcXA1czNRTS9pSVpHYjl4UTRxY3pGYWRRVy8xcUE2aGFHaFJHenhOd2UxZDc1LzZlVVpicU4zZEdRRmRUWmJrSkdMY1BjYjdzWVJUZ0o2aysxTzZiZVQ0dHZEM2c2a2o4SDh0K1UvNERESDgrQWpWRHJmMkJmazVHWDBpMlVFZmMyM3hUSitsY3E1OHdEcTlMNHA4dEVvTlMzNU0xd2FyMnJsM1gxVmlXM2VrSTRKQnlyM05zZUx4NElIMTZMU04wQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "record_id": "flaws_cloudtrail:0000450:8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "row_index": 450, "timestamp": "2019-05-20T01:21:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee07cf5-64dc-4371-932b-1f8f5a84bb26", "eventTime": "2019-05-20T01:21:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpamtrakFFbFpOcXA1czNRTS9pSVpHYjl4UTRxY3pGYWRRVy8xcUE2aGFHaFJHenhOd2UxZDc1LzZlVVpicU4zZEdRRmRUWmJrSkdMY1BjYjdzWVJUZ0o2aysxTzZiZVQ0dHZEM2c2a2o4SDh0K1UvNERESDgrQWpWRHJmMkJmazVHWDBpMlVFZmMyM3hUSitsY3E1OHdEcTlMNHA4dEVvTlMzNU0xd2FyMnJsM1gxVmlXM2VrSTRKQnlyM05zZUx4NElIMTZMU04wQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2cfa54f-c23a-443c-96b0-a6d733774fc", "record_id": "flaws_cloudtrail:0000451:b2cfa54f-c23a-443c-96b0-a6d733774fc", "row_index": 451, "timestamp": "2019-05-20T01:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2cfa54f-c23a-443c-96b0-a6d733774fc", "eventTime": "2019-05-20T01:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6anlYSVIvNUdRcjVwbGVzU3V2aGJmNTBVVTBMSVJnYVlUQ1BqV2N6eTU2VTlCeWR2RlhWWHRvU2FvS0hiTkc0VUgydFNONDNEektlaEhTTFJ3WkkxdHRraXRaeVF6TytEQUliRGJVZ1ZMQ0FQYW9IeFUxSGNWSm8rbFlqV0J3K1FtREVGT1FuUWE2S2dZRVRIVS9yN3BjM255eUF6dkZDaEFhRUlPYzJqR1hEM204Mk1HOWsyd1lmaWp0YU5pMktyL29ZUFgxZDZKVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3600a920-0465-4f37-9530-4011bc62fa30", "record_id": "flaws_cloudtrail:0000452:3600a920-0465-4f37-9530-4011bc62fa30", "row_index": 452, "timestamp": "2019-05-20T01:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3600a920-0465-4f37-9530-4011bc62fa30", "eventTime": "2019-05-20T01:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeVdUNzBVK0doZnJsaDdObzk1ZmoxM1QzdlZaeDgvcGlHRXdsTTRMT1JEbHFZTGFCT2FQc3ZWNXVhcWQ3REtmd3RvV0NEcjY0Q3llMnBHbTBkb3RoRExJTTB5cDc1a0VKUjZhUEhvRmN6L2lFQm1KTDJyU2xSeVllTnRMQ3JucDIwNFZSVHhKTzFvSDNsRk5RV25PMHk4M2c4NEd5dDhyRzlGMHk1bmlHTFdJa3pKZlV4Sml3T0gxV0RwRCtBRnIyRld6ZEppM0tXWUxtdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2cfa54f-c23a-443c-96b0-a6d733774fc", "record_id": "flaws_cloudtrail:0000453:b2cfa54f-c23a-443c-96b0-a6d733774fc", "row_index": 453, "timestamp": "2019-05-20T01:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2cfa54f-c23a-443c-96b0-a6d733774fc", "eventTime": "2019-05-20T01:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6anlYSVIvNUdRcjVwbGVzU3V2aGJmNTBVVTBMSVJnYVlUQ1BqV2N6eTU2VTlCeWR2RlhWWHRvU2FvS0hiTkc0VUgydFNONDNEektlaEhTTFJ3WkkxdHRraXRaeVF6TytEQUliRGJVZ1ZMQ0FQYW9IeFUxSGNWSm8rbFlqV0J3K1FtREVGT1FuUWE2S2dZRVRIVS9yN3BjM255eUF6dkZDaEFhRUlPYzJqR1hEM204Mk1HOWsyd1lmaWp0YU5pMktyL29ZUFgxZDZKVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3600a920-0465-4f37-9530-4011bc62fa30", "record_id": "flaws_cloudtrail:0000454:3600a920-0465-4f37-9530-4011bc62fa30", "row_index": 454, "timestamp": "2019-05-20T01:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3600a920-0465-4f37-9530-4011bc62fa30", "eventTime": "2019-05-20T01:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeVdUNzBVK0doZnJsaDdObzk1ZmoxM1QzdlZaeDgvcGlHRXdsTTRMT1JEbHFZTGFCT2FQc3ZWNXVhcWQ3REtmd3RvV0NEcjY0Q3llMnBHbTBkb3RoRExJTTB5cDc1a0VKUjZhUEhvRmN6L2lFQm1KTDJyU2xSeVllTnRMQ3JucDIwNFZSVHhKTzFvSDNsRk5RV25PMHk4M2c4NEd5dDhyRzlGMHk1bmlHTFdJa3pKZlV4Sml3T0gxV0RwRCtBRnIyRld6ZEppM0tXWUxtdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "record_id": "flaws_cloudtrail:0000455:481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "row_index": 455, "timestamp": "2019-05-20T01:21:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "eventTime": "2019-05-20T01:21:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNVRVZ3cvMXZKblppbDYvN1k3WURkdnpTdVFFeGRPbnVOc3lBU09MQ29wTWVkSUN6cFFVNWlzTkJqNWJYdFRhMVgxSlpoL0ZUM1VNd3ltUHBWcyt0VFkyRTVLRklYY1JEcXBHVGZJUlArOEVtaHFKczNnV1NDM3dWNVRFdFB1TGVPMWExK2FVWWtVVjlSakZvZkhFV1YrZGhaVzFXOUZURE5XOXhjT3JyOWhQWlE0NVM1SmpyMVQ5aURRenFWMUNWcy9tZjl3a25IT25NUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "record_id": "flaws_cloudtrail:0000456:481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "row_index": 456, "timestamp": "2019-05-20T01:21:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481ef1e0-52de-4eb2-9f0e-b07c6de606a0", "eventTime": "2019-05-20T01:21:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNVRVZ3cvMXZKblppbDYvN1k3WURkdnpTdVFFeGRPbnVOc3lBU09MQ29wTWVkSUN6cFFVNWlzTkJqNWJYdFRhMVgxSlpoL0ZUM1VNd3ltUHBWcyt0VFkyRTVLRklYY1JEcXBHVGZJUlArOEVtaHFKczNnV1NDM3dWNVRFdFB1TGVPMWExK2FVWWtVVjlSakZvZkhFV1YrZGhaVzFXOUZURE5XOXhjT3JyOWhQWlE0NVM1SmpyMVQ5aURRenFWMUNWcy9tZjl3a25IT25NUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "454928-56e6-4c9f-b600-523de242601a2", "record_id": "flaws_cloudtrail:0000457:454928-56e6-4c9f-b600-523de242601a2", "row_index": 457, "timestamp": "2019-05-20T01:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "454928-56e6-4c9f-b600-523de242601a2", "eventTime": "2019-05-20T01:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzS2xGU1dVWXZSSWllMkgwK1pyM3VhdVZhem1OaVZNSkpNZy9lS2xsWFdLS0ZjVkJ3K290ei94Vjg3OStINlRCNTkvck9IUkpuK0xmVG42akRMSjJpclROYUU5UUxsSlVma012QzAwb202czJhYTRBNk5Od2I2cDFZeExuK2g1U0tycUtoYXpqQkF0NGp4M0IwR2Ntc1ZwRFVKdlM0SmYrRXFJdTY5RVJDSXRTMHZnd3h6ai9zbFg5SGs0SzFvUFQ0ZXhMZFYxZ0E1bHciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "454928-56e6-4c9f-b600-523de242601a2", "record_id": "flaws_cloudtrail:0000458:454928-56e6-4c9f-b600-523de242601a2", "row_index": 458, "timestamp": "2019-05-20T01:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "454928-56e6-4c9f-b600-523de242601a2", "eventTime": "2019-05-20T01:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzS2xGU1dVWXZSSWllMkgwK1pyM3VhdVZhem1OaVZNSkpNZy9lS2xsWFdLS0ZjVkJ3K290ei94Vjg3OStINlRCNTkvck9IUkpuK0xmVG42akRMSjJpclROYUU5UUxsSlVma012QzAwb202czJhYTRBNk5Od2I2cDFZeExuK2g1U0tycUtoYXpqQkF0NGp4M0IwR2Ntc1ZwRFVKdlM0SmYrRXFJdTY5RVJDSXRTMHZnd3h6ai9zbFg5SGs0SzFvUFQ0ZXhMZFYxZ0E1bHciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d518e4-cac6-44a1-9625-1d55bcdb3041", "record_id": "flaws_cloudtrail:0000459:50d518e4-cac6-44a1-9625-1d55bcdb3041", "row_index": 459, "timestamp": "2019-05-20T01:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d518e4-cac6-44a1-9625-1d55bcdb3041", "eventTime": "2019-05-20T01:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUDVpUm1ZTTRnN3QwTFJRZnJDamlueVYrbE1DdEVpY2g0MkMrcG5HOFRFVFlmSzY0bWFNTHA4R09HYllvalZOeEs2NGExd29hMmhTdW9GSmZRVmRBK0xsdEdMRlYwS2wyMVl4b3U1dHJrUnJPM1VzRklyd3l3b1FSN21LN0FxNmdsejd1NlFZQzhJdU5Bazczd3JpUWFwa0lVNkpJeERDYTlocW85a1FVQUNuSmQrV1MwaGhwRkR4S2xzWTloenZpblg0clkvOFVWRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d518e4-cac6-44a1-9625-1d55bcdb3041", "record_id": "flaws_cloudtrail:0000460:50d518e4-cac6-44a1-9625-1d55bcdb3041", "row_index": 460, "timestamp": "2019-05-20T01:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d518e4-cac6-44a1-9625-1d55bcdb3041", "eventTime": "2019-05-20T01:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUDVpUm1ZTTRnN3QwTFJRZnJDamlueVYrbE1DdEVpY2g0MkMrcG5HOFRFVFlmSzY0bWFNTHA4R09HYllvalZOeEs2NGExd29hMmhTdW9GSmZRVmRBK0xsdEdMRlYwS2wyMVl4b3U1dHJrUnJPM1VzRklyd3l3b1FSN21LN0FxNmdsejd1NlFZQzhJdU5Bazczd3JpUWFwa0lVNkpJeERDYTlocW85a1FVQUNuSmQrV1MwaGhwRkR4S2xzWTloenZpblg0clkvOFVWRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "record_id": "flaws_cloudtrail:0000461:535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "row_index": 461, "timestamp": "2019-05-20T01:21:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "eventTime": "2019-05-20T01:21:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlN29qcFNQVzUrVWg5RXlzNk1xa0Q5azhaQjQ5Z0VkOWlLRDBzeXZtL1dLOENnSEtWc0pyVm1CR1RrM1NTYTR6bDJTdDlRaEVyTzlnMHd0Y1VLbG0rQjRpWnh2M0VMejZnYmN3YURPOWZCcERZU2VRUnN5dkpCWm44SmluQjhDTkVEdmxvNWU0b2I5OGd5SFVBWTdHT05NQXBVNldCMjlBZVc3Qnh5cVBhejJaenIvTzVmNy8xVTVBekY0L1R4K0lZUFFUMUVLWjV4cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "record_id": "flaws_cloudtrail:0000462:535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "row_index": 462, "timestamp": "2019-05-20T01:21:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535c6733-a4cc-47d8-8674-57dcc3eb9cfd", "eventTime": "2019-05-20T01:21:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlN29qcFNQVzUrVWg5RXlzNk1xa0Q5azhaQjQ5Z0VkOWlLRDBzeXZtL1dLOENnSEtWc0pyVm1CR1RrM1NTYTR6bDJTdDlRaEVyTzlnMHd0Y1VLbG0rQjRpWnh2M0VMejZnYmN3YURPOWZCcERZU2VRUnN5dkpCWm44SmluQjhDTkVEdmxvNWU0b2I5OGd5SFVBWTdHT05NQXBVNldCMjlBZVc3Qnh5cVBhejJaenIvTzVmNy8xVTVBekY0L1R4K0lZUFFUMUVLWjV4cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514c7da0-892a-49c5-aabb-99756ebf6a55", "record_id": "flaws_cloudtrail:0000463:514c7da0-892a-49c5-aabb-99756ebf6a55", "row_index": 463, "timestamp": "2019-05-20T01:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514c7da0-892a-49c5-aabb-99756ebf6a55", "eventTime": "2019-05-20T01:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJZzdQcXVrRDY3a1BISzlrLytTZkJoa2VyNURKTkgzbGUwMHpVMGpyRUVCSTg1bERRZDZOOTFDMUVMZEdFNTFrZlljUHJWZC9MZ04zdHZEVTdZSWJOcDNxUkd5SWZyQmd3Y1FlM0JVOVdjNk1RYkV6bDVSMFRpTzlwTE9aK3hZdmMrS0hvNjBOTDlHSUVZZFpqN3ZMei9sdWZkQlhIVmtueFdzRFlUZkd3Y001RjkzOVR1Q1lIWUNBS0FXRERDNVRYR3FsTElSRy84Zm5mZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b068bdcf-deb0-4316-97e7-5031bbdfafb2", "record_id": "flaws_cloudtrail:0000464:b068bdcf-deb0-4316-97e7-5031bbdfafb2", "row_index": 464, "timestamp": "2019-05-20T01:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b068bdcf-deb0-4316-97e7-5031bbdfafb2", "eventTime": "2019-05-20T01:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEM1VVMlJmL2J1RVhMTllkazQrRVhNamk1U3pNaUNuUFNsWXFsNVNMRFJJaFJjZ1MzaFZmOVRtb3FycFhyeVBaaVVjaVFFamdMRlJVbnlhZHpDeGFLbzl0dm0wa0syeFIxVHpudUtIdnppOWJOYUdYZVIxR2dRRXhmamUyT1lucUtBckFjTDdkekZGMnJQWU1GNXNiR2VzYzhRVXNnbVpadjhlNmhFclBRaDcyTVZ2SEVWU0htY29aNzVxT2lBYTlSUm03SW1wMi9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514c7da0-892a-49c5-aabb-99756ebf6a55", "record_id": "flaws_cloudtrail:0000465:514c7da0-892a-49c5-aabb-99756ebf6a55", "row_index": 465, "timestamp": "2019-05-20T01:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514c7da0-892a-49c5-aabb-99756ebf6a55", "eventTime": "2019-05-20T01:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJZzdQcXVrRDY3a1BISzlrLytTZkJoa2VyNURKTkgzbGUwMHpVMGpyRUVCSTg1bERRZDZOOTFDMUVMZEdFNTFrZlljUHJWZC9MZ04zdHZEVTdZSWJOcDNxUkd5SWZyQmd3Y1FlM0JVOVdjNk1RYkV6bDVSMFRpTzlwTE9aK3hZdmMrS0hvNjBOTDlHSUVZZFpqN3ZMei9sdWZkQlhIVmtueFdzRFlUZkd3Y001RjkzOVR1Q1lIWUNBS0FXRERDNVRYR3FsTElSRy84Zm5mZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b068bdcf-deb0-4316-97e7-5031bbdfafb2", "record_id": "flaws_cloudtrail:0000466:b068bdcf-deb0-4316-97e7-5031bbdfafb2", "row_index": 466, "timestamp": "2019-05-20T01:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b068bdcf-deb0-4316-97e7-5031bbdfafb2", "eventTime": "2019-05-20T01:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEM1VVMlJmL2J1RVhMTllkazQrRVhNamk1U3pNaUNuUFNsWXFsNVNMRFJJaFJjZ1MzaFZmOVRtb3FycFhyeVBaaVVjaVFFamdMRlJVbnlhZHpDeGFLbzl0dm0wa0syeFIxVHpudUtIdnppOWJOYUdYZVIxR2dRRXhmamUyT1lucUtBckFjTDdkekZGMnJQWU1GNXNiR2VzYzhRVXNnbVpadjhlNmhFclBRaDcyTVZ2SEVWU0htY29aNzVxT2lBYTlSUm03SW1wMi9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "record_id": "flaws_cloudtrail:0000467:fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "row_index": 467, "timestamp": "2019-05-20T01:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "eventTime": "2019-05-20T01:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2Nnd0MlZYc0txM1J6RGh5MFd2Mk5PeWpkWTJxMVBHUG1wNkFDVUNJbG5LOWJuQ08vajNXWkhFK0JLMUVnRU1wa3ZRVFdQSmIvVkxuOTFaZ2tra2tYRWlrUHRXYW1Id09XYnJkeWE2T1VxZkdvQ2kxL0dyZHhCMm1Kc1BoUUx2SzN3ZG9BK2dLOUdUeDJCK3RhK3E0WWU4eHkxQWEyMVF1OWZYdk9zNTFySnl4enI0aklpdnFxdmJjYnh5S1pOa0FTa1N0UVRJSXc0VmFyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "record_id": "flaws_cloudtrail:0000468:fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "row_index": 468, "timestamp": "2019-05-20T01:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd12824-8735-4b44-83ce-a2d8a2cb3c0e", "eventTime": "2019-05-20T01:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2Nnd0MlZYc0txM1J6RGh5MFd2Mk5PeWpkWTJxMVBHUG1wNkFDVUNJbG5LOWJuQ08vajNXWkhFK0JLMUVnRU1wa3ZRVFdQSmIvVkxuOTFaZ2tra2tYRWlrUHRXYW1Id09XYnJkeWE2T1VxZkdvQ2kxL0dyZHhCMm1Kc1BoUUx2SzN3ZG9BK2dLOUdUeDJCK3RhK3E0WWU4eHkxQWEyMVF1OWZYdk9zNTFySnl4enI0aklpdnFxdmJjYnh5S1pOa0FTa1N0UVRJSXc0VmFyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "record_id": "flaws_cloudtrail:0000469:3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "row_index": 469, "timestamp": "2019-05-20T01:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "eventTime": "2019-05-20T01:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS3N4dVIraWpMUU9RRUw4SU5qUFYzL3VyeEFoYTFEU2d5YWlzTW56bXBsSFVtRGpIVmpWMUYwOWJLT3hjcmFNeHZsdXN1eTZvdWZmbzd1RC84QjVpT1QwSTQyOWZpZ0hZejhWcjk5OTcyZjAwUjl6Z01FbGFBS0M1WnZ2ellmMC94TEwvaWU1Mm1SeDVFdVlOOVlkd0lwRVNRdVFkV2RjckxmeHQ4R0xQS1ZRWVNpc2lRWXEyMGhSQ3RWR0oyMGQzRnd3QUJmRjBYSEJOQW93UDU4dStvYWZaNUhiVm80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bcb6972-82a6-41b4-9258-04d118359b2e9", "record_id": "flaws_cloudtrail:0000470:1bcb6972-82a6-41b4-9258-04d118359b2e9", "row_index": 470, "timestamp": "2019-05-20T01:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bcb6972-82a6-41b4-9258-04d118359b2e9", "eventTime": "2019-05-20T01:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1SlFMTDlVc0N1bUtKd2VlZWx4Q1BhZFJISzRMN08wb2QxVmxBRDJ3eTdrYlNkQ0VWSVpxVkFReUpvanJ5aGh2MS9td0pwazg0RDFiWWVNSmZkTkNEVlZ1UXpnbWVyb1F1eHZCUVVFLzV3VEVNVlhYMkpxbW04L3hWTDRZS2V1VExZYUtsb3loaTRRaGVCNnJIWndOSExLc3YvbGZMaUhna2ZheUtERHNURmdLUkJ3Y1ZJTExNUTNNTlVpb1hES01wR0p1V2RRTGdPST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "record_id": "flaws_cloudtrail:0000471:3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "row_index": 471, "timestamp": "2019-05-20T01:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a97d32f-2207-4b6c-ab80-f21b4ea1e28b", "eventTime": "2019-05-20T01:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS3N4dVIraWpMUU9RRUw4SU5qUFYzL3VyeEFoYTFEU2d5YWlzTW56bXBsSFVtRGpIVmpWMUYwOWJLT3hjcmFNeHZsdXN1eTZvdWZmbzd1RC84QjVpT1QwSTQyOWZpZ0hZejhWcjk5OTcyZjAwUjl6Z01FbGFBS0M1WnZ2ellmMC94TEwvaWU1Mm1SeDVFdVlOOVlkd0lwRVNRdVFkV2RjckxmeHQ4R0xQS1ZRWVNpc2lRWXEyMGhSQ3RWR0oyMGQzRnd3QUJmRjBYSEJOQW93UDU4dStvYWZaNUhiVm80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bcb6972-82a6-41b4-9258-04d118359b2e9", "record_id": "flaws_cloudtrail:0000472:1bcb6972-82a6-41b4-9258-04d118359b2e9", "row_index": 472, "timestamp": "2019-05-20T01:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bcb6972-82a6-41b4-9258-04d118359b2e9", "eventTime": "2019-05-20T01:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1SlFMTDlVc0N1bUtKd2VlZWx4Q1BhZFJISzRMN08wb2QxVmxBRDJ3eTdrYlNkQ0VWSVpxVkFReUpvanJ5aGh2MS9td0pwazg0RDFiWWVNSmZkTkNEVlZ1UXpnbWVyb1F1eHZCUVVFLzV3VEVNVlhYMkpxbW04L3hWTDRZS2V1VExZYUtsb3loaTRRaGVCNnJIWndOSExLc3YvbGZMaUhna2ZheUtERHNURmdLUkJ3Y1ZJTExNUTNNTlVpb1hES01wR0p1V2RRTGdPST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551725-c5f9-466a-a8d6-562d189471", "record_id": "flaws_cloudtrail:0000473:551725-c5f9-466a-a8d6-562d189471", "row_index": 473, "timestamp": "2019-05-20T01:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551725-c5f9-466a-a8d6-562d189471", "eventTime": "2019-05-20T01:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCVVVpRVhORjhMREtNVDlWRTBmL1VyZ0dSQ1NMaDJBZDFtVzZyUzNhMGRuRWhYamVZRWUwV3VKNFoxTGkzcVhKbm0vbzE4MHpNbFVDYThsdGlHMXc4Uk91T3R6Y1NhQk9ZWWw0T2pPNE9MbTRBSnRBcFVoYVNmYW1ra0EyK0hLZmVaaG91R3lvLzFTcW5LMW1xaTF5WGNldnZ2RkJ1ZVVCN2dYbmE0UHhPbW5sb25NV0tlU085TGhVbktseVJWK3FFUjdzMFlDZ1ZHT1JHSS9EUlMvWENxYVhjOVV5OHVrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "record_id": "flaws_cloudtrail:0000474:d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "row_index": 474, "timestamp": "2019-05-20T01:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "eventTime": "2019-05-20T01:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwanVyZzNlc0wrK1orSTZxWkJRK05LM2hrM0UvY3V1eWhieXE2d1hBYkVVaHNEWitwOVZ0Sng2ZkVjZGhON3FBaEN1enpSZ21SL0ZJZ1Z2N3BTUkZtaE82QXF1a2g3STB1UkQ1Y2NKalFmMlBUbVZsbUIxZ3crRSs4QU52ckNicmcyQkpwS2ZhQ1FTMEdsSFlvU2FLbDJNSlBFN1d1RXJSSkVBbFAwYVc4QW9JRWpxZS9CMTV2WUd2RHllcG1CN3R3eERxMUlUdFZUWUdpcVRxT1M3ejZpNzdwZDRpYjN3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551725-c5f9-466a-a8d6-562d189471", "record_id": "flaws_cloudtrail:0000475:551725-c5f9-466a-a8d6-562d189471", "row_index": 475, "timestamp": "2019-05-20T01:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551725-c5f9-466a-a8d6-562d189471", "eventTime": "2019-05-20T01:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCVVVpRVhORjhMREtNVDlWRTBmL1VyZ0dSQ1NMaDJBZDFtVzZyUzNhMGRuRWhYamVZRWUwV3VKNFoxTGkzcVhKbm0vbzE4MHpNbFVDYThsdGlHMXc4Uk91T3R6Y1NhQk9ZWWw0T2pPNE9MbTRBSnRBcFVoYVNmYW1ra0EyK0hLZmVaaG91R3lvLzFTcW5LMW1xaTF5WGNldnZ2RkJ1ZVVCN2dYbmE0UHhPbW5sb25NV0tlU085TGhVbktseVJWK3FFUjdzMFlDZ1ZHT1JHSS9EUlMvWENxYVhjOVV5OHVrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "record_id": "flaws_cloudtrail:0000476:d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "row_index": 476, "timestamp": "2019-05-20T01:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8c8d635-d8e7-47ed-8ba6-a94aa2f21e11", "eventTime": "2019-05-20T01:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwanVyZzNlc0wrK1orSTZxWkJRK05LM2hrM0UvY3V1eWhieXE2d1hBYkVVaHNEWitwOVZ0Sng2ZkVjZGhON3FBaEN1enpSZ21SL0ZJZ1Z2N3BTUkZtaE82QXF1a2g3STB1UkQ1Y2NKalFmMlBUbVZsbUIxZ3crRSs4QU52ckNicmcyQkpwS2ZhQ1FTMEdsSFlvU2FLbDJNSlBFN1d1RXJSSkVBbFAwYVc4QW9JRWpxZS9CMTV2WUd2RHllcG1CN3R3eERxMUlUdFZUWUdpcVRxT1M3ejZpNzdwZDRpYjN3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650fdbee-5d51-426a-9406-013b96ecb419", "record_id": "flaws_cloudtrail:0000477:650fdbee-5d51-426a-9406-013b96ecb419", "row_index": 477, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650fdbee-5d51-426a-9406-013b96ecb419", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0UVJLL3E2U2pOQXZzY2lTckFrOFkvd3IzaXAwMk9KNlZPRnBBSWlWbGhjUFBreTZaVFVxZktGVzFuS2diM0poWFNmVENsUkVhQkNIYXh2UE1TcjhDVXYyZ2t5NUtaOXZXemE3SllPbWcyRVNMSFpxTGZWS2NOaEQ4YmhRWksrWGlTU2lsRE5BZHZMRHFLcnVWVFl2Nnl2TU1obXhrTkFpUXVBdTNVQ2kya256QVo5cDNIMmxsazM5MjlkTDZiZ0dmUi9FeUNMcWRJY2xGZUVPYk5JSStneko2aEdhNVZzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94f200b4-bce5-4d38-9686-7ccbb74a04ae", "record_id": "flaws_cloudtrail:0000478:94f200b4-bce5-4d38-9686-7ccbb74a04ae", "row_index": 478, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94f200b4-bce5-4d38-9686-7ccbb74a04ae", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFWk14S1BZenBPay9MckR5UnhLT00yQXczRlhobDdSZjFxdUo2aTRYSnd6Q3kyTkM0MHI2OWJJaklWM2pqU3hsS1hrWS9ZNzVGQlNqaUdnSkhXcFVydGVxYXpsb3NPb3lwNnJNZXo5ZHVvZFdsQXNWWFN2MTI0UVhDZmpnaHJSTWMwMTAxRWNETnVhN2M3UExqbWFEN1VnMmEzZnRsSjc0L3VBd3R0SnNPaEVJRmxwOTg1MFZ4Z3QwbjNnUUtyd1NqY2xKaEx1bVBUWVdlcG5UN3JZOXJkRkZFL3IrVWNrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "215e585b-7db6-4d73-8639-0244b3f4e5d7", "record_id": "flaws_cloudtrail:0000479:215e585b-7db6-4d73-8639-0244b3f4e5d7", "row_index": 479, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "215e585b-7db6-4d73-8639-0244b3f4e5d7", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ZFd3R0VUcWNYV0I5NlkzY1lnTWM5bkRVMmJLOWxwdFRuVytRNEJVMTZWcGVOOWRSbU9hUTVJZUl1ODVmUzJyOW1QU1ZTdE9ZL0NzUjlzc3FscDdtdHROTTZuSUNiWU1tZFkyOHJsN1I1YVdMdFFDZHkzYU5IU2w1V1g2aWUrUGIzRkNTZkdURm9rTktnbEhtUW9WTk8zaW9lYnQ0Zi9KTy9zYzVzS0svNnZncWJhbGM2a2tjMEVET0R3S2tTMnFHUzQ1K1lQV1J5dXk3ckQ2TTg2VlNpKzVPRUNKVFprPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650fdbee-5d51-426a-9406-013b96ecb419", "record_id": "flaws_cloudtrail:0000480:650fdbee-5d51-426a-9406-013b96ecb419", "row_index": 480, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650fdbee-5d51-426a-9406-013b96ecb419", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0UVJLL3E2U2pOQXZzY2lTckFrOFkvd3IzaXAwMk9KNlZPRnBBSWlWbGhjUFBreTZaVFVxZktGVzFuS2diM0poWFNmVENsUkVhQkNIYXh2UE1TcjhDVXYyZ2t5NUtaOXZXemE3SllPbWcyRVNMSFpxTGZWS2NOaEQ4YmhRWksrWGlTU2lsRE5BZHZMRHFLcnVWVFl2Nnl2TU1obXhrTkFpUXVBdTNVQ2kya256QVo5cDNIMmxsazM5MjlkTDZiZ0dmUi9FeUNMcWRJY2xGZUVPYk5JSStneko2aEdhNVZzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94f200b4-bce5-4d38-9686-7ccbb74a04ae", "record_id": "flaws_cloudtrail:0000481:94f200b4-bce5-4d38-9686-7ccbb74a04ae", "row_index": 481, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94f200b4-bce5-4d38-9686-7ccbb74a04ae", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFWk14S1BZenBPay9MckR5UnhLT00yQXczRlhobDdSZjFxdUo2aTRYSnd6Q3kyTkM0MHI2OWJJaklWM2pqU3hsS1hrWS9ZNzVGQlNqaUdnSkhXcFVydGVxYXpsb3NPb3lwNnJNZXo5ZHVvZFdsQXNWWFN2MTI0UVhDZmpnaHJSTWMwMTAxRWNETnVhN2M3UExqbWFEN1VnMmEzZnRsSjc0L3VBd3R0SnNPaEVJRmxwOTg1MFZ4Z3QwbjNnUUtyd1NqY2xKaEx1bVBUWVdlcG5UN3JZOXJkRkZFL3IrVWNrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "215e585b-7db6-4d73-8639-0244b3f4e5d7", "record_id": "flaws_cloudtrail:0000482:215e585b-7db6-4d73-8639-0244b3f4e5d7", "row_index": 482, "timestamp": "2019-05-20T01:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "215e585b-7db6-4d73-8639-0244b3f4e5d7", "eventTime": "2019-05-20T01:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ZFd3R0VUcWNYV0I5NlkzY1lnTWM5bkRVMmJLOWxwdFRuVytRNEJVMTZWcGVOOWRSbU9hUTVJZUl1ODVmUzJyOW1QU1ZTdE9ZL0NzUjlzc3FscDdtdHROTTZuSUNiWU1tZFkyOHJsN1I1YVdMdFFDZHkzYU5IU2w1V1g2aWUrUGIzRkNTZkdURm9rTktnbEhtUW9WTk8zaW9lYnQ0Zi9KTy9zYzVzS0svNnZncWJhbGM2a2tjMEVET0R3S2tTMnFHUzQ1K1lQV1J5dXk3ckQ2TTg2VlNpKzVPRUNKVFprPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "080d8daa-9603-4d56-ab3e-b25095952bcf", "record_id": "flaws_cloudtrail:0000483:080d8daa-9603-4d56-ab3e-b25095952bcf", "row_index": 483, "timestamp": "2019-05-20T01:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "080d8daa-9603-4d56-ab3e-b25095952bcf", "eventTime": "2019-05-20T01:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1OTZFMkcxSWcvR3RIaTJocXEzQTZWTGxDQ2JTK0ZmTEJLQ0JKVzBmWFlETUNEWWxxT2ExaWxIMngvQzcvem1kUWEvWnYxMUVPcm81bkxMMGFnMFVIdzk0bzB4T2xPdnp4VlVNTGMxdDhFa0k3VCtad09UZnRiTkFEU05HOFJCTDZieEhEaU5reE1GR2MvTkcxeEY5WUl0VWR5UmJxNEM2R09pNll1NmVIYnZadEkrMG9TczkycFpjMWVkSFNDaUkzVHVZMnhjWHRiNVBEWlMvbE1NQk1VU0c4dVUxQUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "080d8daa-9603-4d56-ab3e-b25095952bcf", "record_id": "flaws_cloudtrail:0000484:080d8daa-9603-4d56-ab3e-b25095952bcf", "row_index": 484, "timestamp": "2019-05-20T01:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "080d8daa-9603-4d56-ab3e-b25095952bcf", "eventTime": "2019-05-20T01:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1OTZFMkcxSWcvR3RIaTJocXEzQTZWTGxDQ2JTK0ZmTEJLQ0JKVzBmWFlETUNEWWxxT2ExaWxIMngvQzcvem1kUWEvWnYxMUVPcm81bkxMMGFnMFVIdzk0bzB4T2xPdnp4VlVNTGMxdDhFa0k3VCtad09UZnRiTkFEU05HOFJCTDZieEhEaU5reE1GR2MvTkcxeEY5WUl0VWR5UmJxNEM2R09pNll1NmVIYnZadEkrMG9TczkycFpjMWVkSFNDaUkzVHVZMnhjWHRiNVBEWlMvbE1NQk1VU0c4dVUxQUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490d73e6-e31f-4b85-a7e6-3c974270fa8", "record_id": "flaws_cloudtrail:0000485:490d73e6-e31f-4b85-a7e6-3c974270fa8", "row_index": 485, "timestamp": "2019-05-20T01:29:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490d73e6-e31f-4b85-a7e6-3c974270fa8", "eventTime": "2019-05-20T01:29:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490d73e6-e31f-4b85-a7e6-3c974270fa8", "record_id": "flaws_cloudtrail:0000486:490d73e6-e31f-4b85-a7e6-3c974270fa8", "row_index": 486, "timestamp": "2019-05-20T01:29:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490d73e6-e31f-4b85-a7e6-3c974270fa8", "eventTime": "2019-05-20T01:29:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "[aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771435-1b74-4198-99d5-32c48fc72d8a", "record_id": "flaws_cloudtrail:0000487:771435-1b74-4198-99d5-32c48fc72d8a", "row_index": 487, "timestamp": "2019-05-20T01:29:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771435-1b74-4198-99d5-32c48fc72d8a", "eventTime": "2019-05-20T01:29:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771435-1b74-4198-99d5-32c48fc72d8a", "record_id": "flaws_cloudtrail:0000488:771435-1b74-4198-99d5-32c48fc72d8a", "row_index": 488, "timestamp": "2019-05-20T01:29:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771435-1b74-4198-99d5-32c48fc72d8a", "eventTime": "2019-05-20T01:29:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145425e-231a-4e31-9ebb-e581154e5291", "record_id": "flaws_cloudtrail:0000489:145425e-231a-4e31-9ebb-e581154e5291", "row_index": 489, "timestamp": "2019-05-20T01:29:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145425e-231a-4e31-9ebb-e581154e5291", "eventTime": "2019-05-20T01:29:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyWHFwai9JaWxxU04ydEphMGxsQUhPZWhqNjhCNHJWOXA1SXVjd1BCLzQ5ZzNBUDhUa3dKSVZ3MDF2WEVJcDFvWElNSkRnY2JlNC9qRjFHYzRvWkJTaFNBV0JTUEF0Nno4UjdidmRPYVpXVWJ3M1E5K09BelFqdEp3UHBBdG51SG16d1p4angzTStHV2kzVmdacnVjcnNpQTRHRWZvYkh2WVNUWWNINU5sWEpoc3luWVRJblIxSEl6bUtKZ2hQK2l3ZHp2R01JOFEveG5zZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145425e-231a-4e31-9ebb-e581154e5291", "record_id": "flaws_cloudtrail:0000490:145425e-231a-4e31-9ebb-e581154e5291", "row_index": 490, "timestamp": "2019-05-20T01:29:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145425e-231a-4e31-9ebb-e581154e5291", "eventTime": "2019-05-20T01:29:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyWHFwai9JaWxxU04ydEphMGxsQUhPZWhqNjhCNHJWOXA1SXVjd1BCLzQ5ZzNBUDhUa3dKSVZ3MDF2WEVJcDFvWElNSkRnY2JlNC9qRjFHYzRvWkJTaFNBV0JTUEF0Nno4UjdidmRPYVpXVWJ3M1E5K09BelFqdEp3UHBBdG51SG16d1p4angzTStHV2kzVmdacnVjcnNpQTRHRWZvYkh2WVNUWWNINU5sWEpoc3luWVRJblIxSEl6bUtKZ2hQK2l3ZHp2R01JOFEveG5zZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75f34ad7-f807-4d63-ae8e-59cd30580b5a", "record_id": "flaws_cloudtrail:0000491:75f34ad7-f807-4d63-ae8e-59cd30580b5a", "row_index": 491, "timestamp": "2019-05-20T01:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75f34ad7-f807-4d63-ae8e-59cd30580b5a", "eventTime": "2019-05-20T01:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5a29HR1JHZXV2akpNYWdpbFZ5eWdzdlp5eGtPbG9xR1AwWnlsYWZNQTVlWEJpbCtHY3ZHZDRrUWs4Qitzd1d4Y2dYdHdJcjRmMGpuYVRTV3dzL0Z5aTNoUkxJQTF2eWRnVHAxU2NyOU90bEJXQW8wdVRBWTZqenBrQTR0dEN4NXRabGVCaHB4Q0ZVQmtnTnJkcU5lWGpMMFRqVGhFY2xaN1BjSDQreGxSbXIycE5xanRnS1hwc1pXM1RRbXBBanJKMGM0REdWRUF2TFh6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75f34ad7-f807-4d63-ae8e-59cd30580b5a", "record_id": "flaws_cloudtrail:0000492:75f34ad7-f807-4d63-ae8e-59cd30580b5a", "row_index": 492, "timestamp": "2019-05-20T01:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75f34ad7-f807-4d63-ae8e-59cd30580b5a", "eventTime": "2019-05-20T01:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5a29HR1JHZXV2akpNYWdpbFZ5eWdzdlp5eGtPbG9xR1AwWnlsYWZNQTVlWEJpbCtHY3ZHZDRrUWs4Qitzd1d4Y2dYdHdJcjRmMGpuYVRTV3dzL0Z5aTNoUkxJQTF2eWRnVHAxU2NyOU90bEJXQW8wdVRBWTZqenBrQTR0dEN4NXRabGVCaHB4Q0ZVQmtnTnJkcU5lWGpMMFRqVGhFY2xaN1BjSDQreGxSbXIycE5xanRnS1hwc1pXM1RRbXBBanJKMGM0REdWRUF2TFh6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35bd6aa-4811-4467-b9b3-186dfb89db34", "record_id": "flaws_cloudtrail:0000493:a35bd6aa-4811-4467-b9b3-186dfb89db34", "row_index": 493, "timestamp": "2019-05-20T01:29:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35bd6aa-4811-4467-b9b3-186dfb89db34", "eventTime": "2019-05-20T01:29:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZ1MrMmpVK2dFU0xXdWxBWXJtOTNNU21Cc2NoYXVyRGVMdVZPZ1ZHcEN5aU5nTXNBSnJQd0Y2TTk2Y0J3akwzSDhJZHo0NjZjTWxjeGMxMmo0cVlNdHBBWFV2bEVENXlEQ3dyRXB3VVIzdEZMVTl6U0JjUGpWL0ZEYWZ1SEVveWZwaG9aNkd2UTRzM3lTMjZwMWZ6c1piVEdjTHNJQXpUK2xDYUJIbXVHaTBrTzJwNEhrSWthNkhpeXlOWHZnODMrRUVUNGYxV2toaTBmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35bd6aa-4811-4467-b9b3-186dfb89db34", "record_id": "flaws_cloudtrail:0000494:a35bd6aa-4811-4467-b9b3-186dfb89db34", "row_index": 494, "timestamp": "2019-05-20T01:29:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35bd6aa-4811-4467-b9b3-186dfb89db34", "eventTime": "2019-05-20T01:29:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZ1MrMmpVK2dFU0xXdWxBWXJtOTNNU21Cc2NoYXVyRGVMdVZPZ1ZHcEN5aU5nTXNBSnJQd0Y2TTk2Y0J3akwzSDhJZHo0NjZjTWxjeGMxMmo0cVlNdHBBWFV2bEVENXlEQ3dyRXB3VVIzdEZMVTl6U0JjUGpWL0ZEYWZ1SEVveWZwaG9aNkd2UTRzM3lTMjZwMWZ6c1piVEdjTHNJQXpUK2xDYUJIbXVHaTBrTzJwNEhrSWthNkhpeXlOWHZnODMrRUVUNGYxV2toaTBmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28edde6f-354c-4031-aefc-0a9f240966d7", "record_id": "flaws_cloudtrail:0000495:28edde6f-354c-4031-aefc-0a9f240966d7", "row_index": 495, "timestamp": "2019-05-20T01:29:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28edde6f-354c-4031-aefc-0a9f240966d7", "eventTime": "2019-05-20T01:29:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBTE10eGdzcWdHMzlwUHJaYTdwaFAyYndOcTNlajNUNnkzc0doSWtLaDRGdXk1M3dSVDY5TmlBMGJtOVJDMU00dVMzM3JkK2k3Rm9KVUtJYzlDWmdRMStUdW1sd2RkMjVZN3FmNUdHeTFKc0NNSEZTaXlSVXo1MGx6SExseS9DaEMvQjNpUXc2bW9EcXpZOG5CSmtxK2o3WmpVK0c4OHplSlRyTzdEZkhtRDMydThWZzBMdGdPMVgzU2NqZFI5aGc1MzcrMW1UK0p3UVRmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28edde6f-354c-4031-aefc-0a9f240966d7", "record_id": "flaws_cloudtrail:0000496:28edde6f-354c-4031-aefc-0a9f240966d7", "row_index": 496, "timestamp": "2019-05-20T01:29:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28edde6f-354c-4031-aefc-0a9f240966d7", "eventTime": "2019-05-20T01:29:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBTE10eGdzcWdHMzlwUHJaYTdwaFAyYndOcTNlajNUNnkzc0doSWtLaDRGdXk1M3dSVDY5TmlBMGJtOVJDMU00dVMzM3JkK2k3Rm9KVUtJYzlDWmdRMStUdW1sd2RkMjVZN3FmNUdHeTFKc0NNSEZTaXlSVXo1MGx6SExseS9DaEMvQjNpUXc2bW9EcXpZOG5CSmtxK2o3WmpVK0c4OHplSlRyTzdEZkhtRDMydThWZzBMdGdPMVgzU2NqZFI5aGc1MzcrMW1UK0p3UVRmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013116f0c-d692-46e8-8db3-b6e873d2af57", "record_id": "flaws_cloudtrail:0000497:013116f0c-d692-46e8-8db3-b6e873d2af57", "row_index": 497, "timestamp": "2019-05-20T01:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013116f0c-d692-46e8-8db3-b6e873d2af57", "eventTime": "2019-05-20T01:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCZVhJcXdwaW0yNkVkUzV2czBUMzB6YUFmRVpFLzdwMDc1SzJNME1taDBIZXA0OFAwZXY0N0N0T2p5akI2cjQzNzhLZ1hNUFV2WCsrN2R2ZFVRNEFIQ2ZoeFYvci9ub3ExbElhdWc5T2MyZE8wNEZpYm02bVAwaUkxV1lrR3FoWGZNWEFrSjFRd3BoN1c5UnlUMGFScFlpem1lQ0hPdjJ0cWQ5ZkNGSEZ5VEpQemFQUVRVbXYzZ0xxWlkvN2FYZVFoakRNRU5TOFllV0RSQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013116f0c-d692-46e8-8db3-b6e873d2af57", "record_id": "flaws_cloudtrail:0000498:013116f0c-d692-46e8-8db3-b6e873d2af57", "row_index": 498, "timestamp": "2019-05-20T01:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013116f0c-d692-46e8-8db3-b6e873d2af57", "eventTime": "2019-05-20T01:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCZVhJcXdwaW0yNkVkUzV2czBUMzB6YUFmRVpFLzdwMDc1SzJNME1taDBIZXA0OFAwZXY0N0N0T2p5akI2cjQzNzhLZ1hNUFV2WCsrN2R2ZFVRNEFIQ2ZoeFYvci9ub3ExbElhdWc5T2MyZE8wNEZpYm02bVAwaUkxV1lrR3FoWGZNWEFrSjFRd3BoN1c5UnlUMGFScFlpem1lQ0hPdjJ0cWQ5ZkNGSEZ5VEpQemFQUVRVbXYzZ0xxWlkvN2FYZVFoakRNRU5TOFllV0RSQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b94a79c5-a73b-4674-b68b-13877c238baa", "record_id": "flaws_cloudtrail:0000499:b94a79c5-a73b-4674-b68b-13877c238baa", "row_index": 499, "timestamp": "2019-05-20T01:29:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b94a79c5-a73b-4674-b68b-13877c238baa", "eventTime": "2019-05-20T01:29:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyR3hGY2hpTGdHTVI4QXpzakVpQWV3ek4wUjliTDkzOWxRanRPMFVOTUZoSWs3ZU9PUVJTbTY5dnkySER6Q3RHMXNvSm5DKzkyemhrbGhmVWdtaHdDVnVncXdYZzd4Z1BjbUpIc1hkSnlIdU50d0d2TTdhdWtaZHFaSGtINHkrNmQxRmFOMUpyYmRicXJpbjEyM2dLL2tORGFJRDNQR3NCa0VjZGRYa250eHgxOU1LN3RibUtoeWlkSWFCS2ZWcDAyVUQrbkR5dXVpdDhVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b94a79c5-a73b-4674-b68b-13877c238baa", "record_id": "flaws_cloudtrail:0000500:b94a79c5-a73b-4674-b68b-13877c238baa", "row_index": 500, "timestamp": "2019-05-20T01:29:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b94a79c5-a73b-4674-b68b-13877c238baa", "eventTime": "2019-05-20T01:29:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyR3hGY2hpTGdHTVI4QXpzakVpQWV3ek4wUjliTDkzOWxRanRPMFVOTUZoSWs3ZU9PUVJTbTY5dnkySER6Q3RHMXNvSm5DKzkyemhrbGhmVWdtaHdDVnVncXdYZzd4Z1BjbUpIc1hkSnlIdU50d0d2TTdhdWtaZHFaSGtINHkrNmQxRmFOMUpyYmRicXJpbjEyM2dLL2tORGFJRDNQR3NCa0VjZGRYa250eHgxOU1LN3RibUtoeWlkSWFCS2ZWcDAyVUQrbkR5dXVpdDhVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf0c3595-cfb5-4f44-bcca-68831f3200b8", "record_id": "flaws_cloudtrail:0000501:bf0c3595-cfb5-4f44-bcca-68831f3200b8", "row_index": 501, "timestamp": "2019-05-20T01:29:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf0c3595-cfb5-4f44-bcca-68831f3200b8", "eventTime": "2019-05-20T01:29:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1Vi9YK1FRaE1LOWg0VGNFYWt3TEVQK1M2ejU5MkJDd0ZScCt3WHI2SnMzVkVEdk1DeWFXK3Q2SkpMdURQSzhSb0lrakk2WlBWbHU1WEtiSDRvOGJhNWNhaGtVb0VvUGNSdlNLVmVpNzFLTXV2MU1uSWhWYnpXOEVIQ3hHc3F4V1F3RGZkR1VtWmVlTVYyYnVzYlQ3Y0xYYlBWMnoyRm0rblFVZUp4RHlTQXhqakI1bytyakduM29ZNUI4Tk5YLyszQzZrWTB1MWlreGU2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf0c3595-cfb5-4f44-bcca-68831f3200b8", "record_id": "flaws_cloudtrail:0000502:bf0c3595-cfb5-4f44-bcca-68831f3200b8", "row_index": 502, "timestamp": "2019-05-20T01:29:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf0c3595-cfb5-4f44-bcca-68831f3200b8", "eventTime": "2019-05-20T01:29:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1Vi9YK1FRaE1LOWg0VGNFYWt3TEVQK1M2ejU5MkJDd0ZScCt3WHI2SnMzVkVEdk1DeWFXK3Q2SkpMdURQSzhSb0lrakk2WlBWbHU1WEtiSDRvOGJhNWNhaGtVb0VvUGNSdlNLVmVpNzFLTXV2MU1uSWhWYnpXOEVIQ3hHc3F4V1F3RGZkR1VtWmVlTVYyYnVzYlQ3Y0xYYlBWMnoyRm0rblFVZUp4RHlTQXhqakI1bytyakduM29ZNUI4Tk5YLyszQzZrWTB1MWlreGU2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4f51fd-5e13-4576-858e-cad198fb0a21", "record_id": "flaws_cloudtrail:0000503:6f4f51fd-5e13-4576-858e-cad198fb0a21", "row_index": 503, "timestamp": "2019-05-20T01:29:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4f51fd-5e13-4576-858e-cad198fb0a21", "eventTime": "2019-05-20T01:29:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhajQ3bWRBaTRxTnpjNDlDM2RYbEJwbk94bFJ3T0kwZ25FcG5XRWwxeUd0QnFSNkc3R1R5T1ZPZFVJdkFadUQxb2tIbWVPVEZCNWZyU0ppaXMybEswRld6cld4QnZHNWdFQ3hCRGhld2gzR2w4UDFSRGNBTWM0WGVwQnJvMWkxSC9iNWF1SzN6QTZSblpNZWVCdkdia3JrelZ3ZGJKU1FpUVY3S0U5cE5PVUcrSHpZaTB1WnRZeUF3MTNWd2Z0a0N1Vkk5S2tEakNoR0RDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4f51fd-5e13-4576-858e-cad198fb0a21", "record_id": "flaws_cloudtrail:0000504:6f4f51fd-5e13-4576-858e-cad198fb0a21", "row_index": 504, "timestamp": "2019-05-20T01:29:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4f51fd-5e13-4576-858e-cad198fb0a21", "eventTime": "2019-05-20T01:29:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhajQ3bWRBaTRxTnpjNDlDM2RYbEJwbk94bFJ3T0kwZ25FcG5XRWwxeUd0QnFSNkc3R1R5T1ZPZFVJdkFadUQxb2tIbWVPVEZCNWZyU0ppaXMybEswRld6cld4QnZHNWdFQ3hCRGhld2gzR2w4UDFSRGNBTWM0WGVwQnJvMWkxSC9iNWF1SzN6QTZSblpNZWVCdkdia3JrelZ3ZGJKU1FpUVY3S0U5cE5PVUcrSHpZaTB1WnRZeUF3MTNWd2Z0a0N1Vkk5S2tEakNoR0RDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c1d937-f3b8-4969-85cd-05128bb3f01f", "record_id": "flaws_cloudtrail:0000505:d1c1d937-f3b8-4969-85cd-05128bb3f01f", "row_index": 505, "timestamp": "2019-05-20T01:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c1d937-f3b8-4969-85cd-05128bb3f01f", "eventTime": "2019-05-20T01:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdGRKWUp5Q05YVzJXa2l4b2ZWWklWMXU2UjZ1a0Nkb2lKM0cxSjh4RXcrYUdSNzFKNWJyUzNROWcxbHlQVVdoRnBQZFdBUGZWekRCNCtjaGJNYWovYVJRNDJwSzBVOExneWtiOU1aR2EwYkNLTEhKRWtxQjAxazAzbVpURFpISnJTdHZ4aDBqRjlRTmRWL1VvSmZjNXhVZ09RNW9DdHhVUFFnVFY3K1F3by9lOWtIQ3BVNHlKK3FzSWRDYndRODNWd1VUdXZMN2FxWlFxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c1d937-f3b8-4969-85cd-05128bb3f01f", "record_id": "flaws_cloudtrail:0000506:d1c1d937-f3b8-4969-85cd-05128bb3f01f", "row_index": 506, "timestamp": "2019-05-20T01:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c1d937-f3b8-4969-85cd-05128bb3f01f", "eventTime": "2019-05-20T01:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdGRKWUp5Q05YVzJXa2l4b2ZWWklWMXU2UjZ1a0Nkb2lKM0cxSjh4RXcrYUdSNzFKNWJyUzNROWcxbHlQVVdoRnBQZFdBUGZWekRCNCtjaGJNYWovYVJRNDJwSzBVOExneWtiOU1aR2EwYkNLTEhKRWtxQjAxazAzbVpURFpISnJTdHZ4aDBqRjlRTmRWL1VvSmZjNXhVZ09RNW9DdHhVUFFnVFY3K1F3by9lOWtIQ3BVNHlKK3FzSWRDYndRODNWd1VUdXZMN2FxWlFxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2350f18-102a-4f23-acb0-84324f4b85f", "record_id": "flaws_cloudtrail:0000507:b2350f18-102a-4f23-acb0-84324f4b85f", "row_index": 507, "timestamp": "2019-05-20T01:29:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2350f18-102a-4f23-acb0-84324f4b85f", "eventTime": "2019-05-20T01:29:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlV0czL1VCelZIdjM1OG1ienJTbTZscEpya2JNQ2k2aTArUmlBSE4vZXlRZ3NUK0NoVXJEZlBwVkRMNlJMWDVjS0VJaVA5NysyRzFRRlRVZXdYTkUvV2ltRGRYTmcxMy83NXVENTVHbzZKZHFTa3dqSHVsYUxiVWNzWHV5ZUNwaGkvNkVyZVJXVFF5NE1va2VHM2s1d3NCT05VT0l6MkdkbGI4YkJhNHVLOVBBL3I4YTBtZzFhbkJOUmJoanlPMzliRVFoa0VvRWdSND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2350f18-102a-4f23-acb0-84324f4b85f", "record_id": "flaws_cloudtrail:0000508:b2350f18-102a-4f23-acb0-84324f4b85f", "row_index": 508, "timestamp": "2019-05-20T01:29:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2350f18-102a-4f23-acb0-84324f4b85f", "eventTime": "2019-05-20T01:29:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlV0czL1VCelZIdjM1OG1ienJTbTZscEpya2JNQ2k2aTArUmlBSE4vZXlRZ3NUK0NoVXJEZlBwVkRMNlJMWDVjS0VJaVA5NysyRzFRRlRVZXdYTkUvV2ltRGRYTmcxMy83NXVENTVHbzZKZHFTa3dqSHVsYUxiVWNzWHV5ZUNwaGkvNkVyZVJXVFF5NE1va2VHM2s1d3NCT05VT0l6MkdkbGI4YkJhNHVLOVBBL3I4YTBtZzFhbkJOUmJoanlPMzliRVFoa0VvRWdSND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "record_id": "flaws_cloudtrail:0000509:f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "row_index": 509, "timestamp": "2019-05-20T01:29:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "eventTime": "2019-05-20T01:29:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMVS9SRmFUZllvb05IZ0ZmbitjR3haallRNW1URDRpN3ZNcDlMcE83dXByL1JtVlFMdVBCZnBaUko1OTFmcm5qejB3c2JtRjluWkI0aWNUanRxZjNJdGxlNUJyM3ZmbTJNYkYvYXRjOGhxR1FaM3pEOHJoem1RUTcyV083dlhiNmJXak1PRzg5R2lkWUo2K01zSmV2QXlnSGZmSE5pWmg0RlIvaGU1UWN0aDd2c05uVS9mMjBkRU1WSEh1cHZ3SnNueWErcFNXY1BzZHJldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "record_id": "flaws_cloudtrail:0000510:f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "row_index": 510, "timestamp": "2019-05-20T01:29:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f77cbf88-c1a0-44a3-9ab8-05583e620e9c", "eventTime": "2019-05-20T01:29:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMVS9SRmFUZllvb05IZ0ZmbitjR3haallRNW1URDRpN3ZNcDlMcE83dXByL1JtVlFMdVBCZnBaUko1OTFmcm5qejB3c2JtRjluWkI0aWNUanRxZjNJdGxlNUJyM3ZmbTJNYkYvYXRjOGhxR1FaM3pEOHJoem1RUTcyV083dlhiNmJXak1PRzg5R2lkWUo2K01zSmV2QXlnSGZmSE5pWmg0RlIvaGU1UWN0aDd2c05uVS9mMjBkRU1WSEh1cHZ3SnNueWErcFNXY1BzZHJldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f437b65-324f-4b04-a9cf-f29b16378566", "record_id": "flaws_cloudtrail:0000511:9f437b65-324f-4b04-a9cf-f29b16378566", "row_index": 511, "timestamp": "2019-05-20T01:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f437b65-324f-4b04-a9cf-f29b16378566", "eventTime": "2019-05-20T01:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrWlRlWmttV21nOFFCMitMNWI4UU9GYWtMK01tbVVncDh1SUdDZXZIZzNZY0UveGJRS3NUeUk3eG9IcnlsNGpoUWcvUjRtd1IwK1JrZGxRNWJVNVYzVmdwWk1nU1oycHJHbFluNG8xOTFSYldhTUVkZ2NTWUo2T1hQcDlwWEJ4S3JPaGhuTWNVYWprcHFteEo1QzhYOVRXenRQUnFmVkovWGZ1Y0JYK0Qyamp4MGNVa240Ykplc2s0MlAzamVpVHVyT05nT2V4ZTByVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f437b65-324f-4b04-a9cf-f29b16378566", "record_id": "flaws_cloudtrail:0000512:9f437b65-324f-4b04-a9cf-f29b16378566", "row_index": 512, "timestamp": "2019-05-20T01:29:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f437b65-324f-4b04-a9cf-f29b16378566", "eventTime": "2019-05-20T01:29:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrWlRlWmttV21nOFFCMitMNWI4UU9GYWtMK01tbVVncDh1SUdDZXZIZzNZY0UveGJRS3NUeUk3eG9IcnlsNGpoUWcvUjRtd1IwK1JrZGxRNWJVNVYzVmdwWk1nU1oycHJHbFluNG8xOTFSYldhTUVkZ2NTWUo2T1hQcDlwWEJ4S3JPaGhuTWNVYWprcHFteEo1QzhYOVRXenRQUnFmVkovWGZ1Y0JYK0Qyamp4MGNVa240Ykplc2s0MlAzamVpVHVyT05nT2V4ZTByVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0135b0ed-f02e-4342-b305-3ea1887f7590", "record_id": "flaws_cloudtrail:0000513:0135b0ed-f02e-4342-b305-3ea1887f7590", "row_index": 513, "timestamp": "2019-05-20T01:29:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0135b0ed-f02e-4342-b305-3ea1887f7590", "eventTime": "2019-05-20T01:29:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjMVRpSHAvdWZzYVFGelNUZ2loV0tUY0JsWGsvclJ0SGg1Tzk2eGtxQzc0QjR4VmdYK3k2ZG9qY0tDZDRLeEZNRWh6dHdmN0sxemZVcnhYWEkwbWlMZ2E4K0MrS2N1c1Z4RzNnN0FtVVoyTzVOMitCSFFJejk4MjlEYXVtYndRNVM2UnVkcER3NFFoMm03SkNLTHRBTFBOZVBJZ0QrOHpQbDJOeXpkTnlLQVYrcjFxSEJPd0M1bElBK1NjaXEzMUFRcFZiMFo5RWFpOWQ0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0135b0ed-f02e-4342-b305-3ea1887f7590", "record_id": "flaws_cloudtrail:0000514:0135b0ed-f02e-4342-b305-3ea1887f7590", "row_index": 514, "timestamp": "2019-05-20T01:29:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0135b0ed-f02e-4342-b305-3ea1887f7590", "eventTime": "2019-05-20T01:29:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjMVRpSHAvdWZzYVFGelNUZ2loV0tUY0JsWGsvclJ0SGg1Tzk2eGtxQzc0QjR4VmdYK3k2ZG9qY0tDZDRLeEZNRWh6dHdmN0sxemZVcnhYWEkwbWlMZ2E4K0MrS2N1c1Z4RzNnN0FtVVoyTzVOMitCSFFJejk4MjlEYXVtYndRNVM2UnVkcER3NFFoMm03SkNLTHRBTFBOZVBJZ0QrOHpQbDJOeXpkTnlLQVYrcjFxSEJPd0M1bElBK1NjaXEzMUFRcFZiMFo5RWFpOWQ0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e574b75-d163-4f3c-bedf-41308cd57fea", "record_id": "flaws_cloudtrail:0000515:4e574b75-d163-4f3c-bedf-41308cd57fea", "row_index": 515, "timestamp": "2019-05-20T01:29:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e574b75-d163-4f3c-bedf-41308cd57fea", "eventTime": "2019-05-20T01:29:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZmV0NVFwL3hFaFVEeC9KSUxPdmY1czVXalA4STkrU0VBNUt4elNnRUFsbG91bmxhVEpXWmVzUlB6ZkFzbjhvR0lmOFBYa3ArZCtLcHM3bXYwd2dZV0p3RzhFMjJVTUFYT0FNRC9yamRYWER1b0VhMFZSckJKOFlZQjhTTmVQeUtEYnhWSHR2RlJiWDRuUVdneWFWc0V4WnNpNEN2MytNTXBSSHpnNUdxSUFBb0N2eVh2VkxkaFZrR1Rtd0ZWZW5qVXZKcU8xOXBqc24iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e574b75-d163-4f3c-bedf-41308cd57fea", "record_id": "flaws_cloudtrail:0000516:4e574b75-d163-4f3c-bedf-41308cd57fea", "row_index": 516, "timestamp": "2019-05-20T01:29:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e574b75-d163-4f3c-bedf-41308cd57fea", "eventTime": "2019-05-20T01:29:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZmV0NVFwL3hFaFVEeC9KSUxPdmY1czVXalA4STkrU0VBNUt4elNnRUFsbG91bmxhVEpXWmVzUlB6ZkFzbjhvR0lmOFBYa3ArZCtLcHM3bXYwd2dZV0p3RzhFMjJVTUFYT0FNRC9yamRYWER1b0VhMFZSckJKOFlZQjhTTmVQeUtEYnhWSHR2RlJiWDRuUVdneWFWc0V4WnNpNEN2MytNTXBSSHpnNUdxSUFBb0N2eVh2VkxkaFZrR1Rtd0ZWZW5qVXZKcU8xOXBqc24iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "record_id": "flaws_cloudtrail:0000517:7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "row_index": 517, "timestamp": "2019-05-20T01:29:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "eventTime": "2019-05-20T01:29:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4QkZWTlZzdnc5dWdEVUtsRmUvYWkxbFgwckUwWkFJaU5ITVowZlJwMFYyd3NTSGlQNnZ0eUVldS9DWElhYk9iUW1kOEhPRnFlZ1hja3lBRHYwenFkejJ5cUV1WU5FWWlqVVROWEQwQUFDZk5TYUF4a0VQaWc5VzFXZS9oM2JybXNJdlh3VXpzY2JnMDFqTGZWRWVxSXlUWXQ2RFRrR21OZFY5cDBLclNvSllMTG50ejJxelRmZW1kb1dhWDJwWERaU2FHZ0hJM0p0RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "record_id": "flaws_cloudtrail:0000518:7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "row_index": 518, "timestamp": "2019-05-20T01:29:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ddb913e-d91a-41ef-9d3a-90ee8d8bc407", "eventTime": "2019-05-20T01:29:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4QkZWTlZzdnc5dWdEVUtsRmUvYWkxbFgwckUwWkFJaU5ITVowZlJwMFYyd3NTSGlQNnZ0eUVldS9DWElhYk9iUW1kOEhPRnFlZ1hja3lBRHYwenFkejJ5cUV1WU5FWWlqVVROWEQwQUFDZk5TYUF4a0VQaWc5VzFXZS9oM2JybXNJdlh3VXpzY2JnMDFqTGZWRWVxSXlUWXQ2RFRrR21OZFY5cDBLclNvSllMTG50ejJxelRmZW1kb1dhWDJwWERaU2FHZ0hJM0p0RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "record_id": "flaws_cloudtrail:0000519:08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "row_index": 519, "timestamp": "2019-05-20T01:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "eventTime": "2019-05-20T01:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzc1lobStjMjR3enk2dHJJeUNWaFBWeHBOTForVDZhZXR1Sm4rQkJiYU1IRjkvZlNMNmhncHhiYWpCaCtHeWFaV1R3cXdVanlWeVFET2RnVnNnQ3Ryb1Y5NG53TUEzejhCNkxvdnAvTmtEMVRvUkk3YlVQWDhKTEVLQjRYU1FpOWNHUFZpa3lrd3VuOGF3cXd6dVh1QndxZUhzZk1WNWdsY0JqUFB1ckhCazB1V3d5VSt6aXYrazVkOXdwRkp6bkxBRzRqY0Y4dHp2az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "record_id": "flaws_cloudtrail:0000520:08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "row_index": 520, "timestamp": "2019-05-20T01:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fb5d1a-6a5e-4da2-b483-b807718f7bc0f", "eventTime": "2019-05-20T01:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzc1lobStjMjR3enk2dHJJeUNWaFBWeHBOTForVDZhZXR1Sm4rQkJiYU1IRjkvZlNMNmhncHhiYWpCaCtHeWFaV1R3cXdVanlWeVFET2RnVnNnQ3Ryb1Y5NG53TUEzejhCNkxvdnAvTmtEMVRvUkk3YlVQWDhKTEVLQjRYU1FpOWNHUFZpa3lrd3VuOGF3cXd6dVh1QndxZUhzZk1WNWdsY0JqUFB1ckhCazB1V3d5VSt6aXYrazVkOXdwRkp6bkxBRzRqY0Y4dHp2az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f45234-c307-4baa-966e-f95fa58465d6", "record_id": "flaws_cloudtrail:0000521:95f45234-c307-4baa-966e-f95fa58465d6", "row_index": 521, "timestamp": "2019-05-20T01:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f45234-c307-4baa-966e-f95fa58465d6", "eventTime": "2019-05-20T01:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGTEZ3MUhKdEd6ckJuVVpCYzFIbTBITTdUY0s0YXNOUXM3bTllVjlaYlJEOUN0ZjZ6cS9pQjBGM1hzRDhITkxxMURNUXdETUFOTVZoWmpqL0NVY1EwbU5CMURVMlo0eWRuMVNhOXh5T1p6Nk5GV1BPM1V3S3E0L0JiWkQ0UTgrUCsyM3YyTTg0VThpeU5OQ3hlbDdIN2FLQ2dBUVhMQlZpNnZjbytqVUYxWHBqV0RvZ2YwWWdSMk5KSlcrTlRXSzExaS90UGNjOW0reU5kZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f45234-c307-4baa-966e-f95fa58465d6", "record_id": "flaws_cloudtrail:0000522:95f45234-c307-4baa-966e-f95fa58465d6", "row_index": 522, "timestamp": "2019-05-20T01:30:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f45234-c307-4baa-966e-f95fa58465d6", "eventTime": "2019-05-20T01:30:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGTEZ3MUhKdEd6ckJuVVpCYzFIbTBITTdUY0s0YXNOUXM3bTllVjlaYlJEOUN0ZjZ6cS9pQjBGM1hzRDhITkxxMURNUXdETUFOTVZoWmpqL0NVY1EwbU5CMURVMlo0eWRuMVNhOXh5T1p6Nk5GV1BPM1V3S3E0L0JiWkQ0UTgrUCsyM3YyTTg0VThpeU5OQ3hlbDdIN2FLQ2dBUVhMQlZpNnZjbytqVUYxWHBqV0RvZ2YwWWdSMk5KSlcrTlRXSzExaS90UGNjOW0reU5kZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb0d8a8f-f736-4768-b7b3-9f86802c706b", "record_id": "flaws_cloudtrail:0000523:bb0d8a8f-f736-4768-b7b3-9f86802c706b", "row_index": 523, "timestamp": "2019-05-20T01:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb0d8a8f-f736-4768-b7b3-9f86802c706b", "eventTime": "2019-05-20T01:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnbitRdzdUc3pVOWZCZEtLR2Q3Y3hNRldYamhoY1dZNFczNHB5VTEwMFFGU241Qk8zeW11SjM2L1k1ZFNIOHpoR3VLZkVjT3F0by9HQkp1OElUNGJNN2J2SmVFNnkzbDJjRlRkbUJ6SnU3Mmp3YzRqSk9XSkt0Q2lsSW43VGVIVEtOcDRsSXNHN09ERHI0Z1ZrL1A2L3VIQndMeWE1d3c0Vm42ZVZzMjN4MmR3TFBKUFpuRDNkbityTW1kVTFoRDl5Ky95SndOVHJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb0d8a8f-f736-4768-b7b3-9f86802c706b", "record_id": "flaws_cloudtrail:0000524:bb0d8a8f-f736-4768-b7b3-9f86802c706b", "row_index": 524, "timestamp": "2019-05-20T01:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb0d8a8f-f736-4768-b7b3-9f86802c706b", "eventTime": "2019-05-20T01:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnbitRdzdUc3pVOWZCZEtLR2Q3Y3hNRldYamhoY1dZNFczNHB5VTEwMFFGU241Qk8zeW11SjM2L1k1ZFNIOHpoR3VLZkVjT3F0by9HQkp1OElUNGJNN2J2SmVFNnkzbDJjRlRkbUJ6SnU3Mmp3YzRqSk9XSkt0Q2lsSW43VGVIVEtOcDRsSXNHN09ERHI0Z1ZrL1A2L3VIQndMeWE1d3c0Vm42ZVZzMjN4MmR3TFBKUFpuRDNkbityTW1kVTFoRDl5Ky95SndOVHJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "record_id": "flaws_cloudtrail:0000525:e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "row_index": 525, "timestamp": "2019-05-20T01:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "eventTime": "2019-05-20T01:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5UStSSkF3RERXaXNEWUxlK0RkWElwajFjU0c0RFQwbUNBVEM2dDZQUHo0Z0RxRk5xTmJEY1dOb2NaRFBWdDdJVEJ5ZCsrNDlFNHdVcWRadGRZdk1LbzdSN3JFbU92dDlIMkNDMU54Wk5kUTJSRWl5MmJsSFdQYzdNTHZyRlNDV1FFZlJvWVFqWHlEb1FGcU56b3dRQVZOcExqem1hYzdEZ0VESzJ2WmxSRWlCWWJLZTRCUGVtdE1BOEE4WXZxSnZQZTMzSURSbDRXMnBmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "record_id": "flaws_cloudtrail:0000526:b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "row_index": 526, "timestamp": "2019-05-20T01:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "eventTime": "2019-05-20T01:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYL1JxaVVaZ2xLdEwvKzB0V0YzZ3VJNTA0TitSY04vcUVuMXVpaEVmN3FRWG9QMEhmalcrdUN6ai80NnN4VmswWEVHQkp4YnRrS3Ftd0UyT2trREg0aWdScDNmWlRDUDdoM05VUS83a0J3R0FKY0pwWU80UVdCbGcrRHQ5d3lHdEJSanJlckphRFBoWkIrbUg2QjdNWFgzM3BTcFliaDN5V3RWNTI3ajFUbWNZN3p5YmxwTWNvcHN1UnUzdGlzU0FYdVlwVjNuT0pZZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "record_id": "flaws_cloudtrail:0000527:e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "row_index": 527, "timestamp": "2019-05-20T01:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13a4a8b-1b00-4c8c-8a7a-77ba6e8e48c5", "eventTime": "2019-05-20T01:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5UStSSkF3RERXaXNEWUxlK0RkWElwajFjU0c0RFQwbUNBVEM2dDZQUHo0Z0RxRk5xTmJEY1dOb2NaRFBWdDdJVEJ5ZCsrNDlFNHdVcWRadGRZdk1LbzdSN3JFbU92dDlIMkNDMU54Wk5kUTJSRWl5MmJsSFdQYzdNTHZyRlNDV1FFZlJvWVFqWHlEb1FGcU56b3dRQVZOcExqem1hYzdEZ0VESzJ2WmxSRWlCWWJLZTRCUGVtdE1BOEE4WXZxSnZQZTMzSURSbDRXMnBmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "record_id": "flaws_cloudtrail:0000528:b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "row_index": 528, "timestamp": "2019-05-20T01:30:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a5ad08-f83c-47a1-9379-9c5ebda56d29", "eventTime": "2019-05-20T01:30:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYL1JxaVVaZ2xLdEwvKzB0V0YzZ3VJNTA0TitSY04vcUVuMXVpaEVmN3FRWG9QMEhmalcrdUN6ai80NnN4VmswWEVHQkp4YnRrS3Ftd0UyT2trREg0aWdScDNmWlRDUDdoM05VUS83a0J3R0FKY0pwWU80UVdCbGcrRHQ5d3lHdEJSanJlckphRFBoWkIrbUg2QjdNWFgzM3BTcFliaDN5V3RWNTI3ajFUbWNZN3p5YmxwTWNvcHN1UnUzdGlzU0FYdVlwVjNuT0pZZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "record_id": "flaws_cloudtrail:0000529:1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "row_index": 529, "timestamp": "2019-05-20T01:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "eventTime": "2019-05-20T01:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSk10QXp5TW5HR1FjajNyZXAwVWVuUjF5R1lrVnltbFBIa2E0ZkZaY3YyT2tSTkx5R1NGWloybzM3N2VEaHQxMEhnditNK3ZYc1FYd0k4a2puZlVIS1lyV2Vobk5FbWJGa2JDUWxpRDhlWlVrc1g5MVV5eTNDcVUrdi9qcGFQSmpQR0N5S2pTUVBRdDFyOVdlejJtUWZUWDFiL1g5YlRDampsYndOcUw2aHZ4Y1NVZ2VGdzFzMHpoS0w2VXVIMTlRT3RRZEJBejV6elpWQmNyOFdzV3dWejRYVHpIZmpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2330a070-c1e6-4c8a-8be1-1a456f6a575e", "record_id": "flaws_cloudtrail:0000530:2330a070-c1e6-4c8a-8be1-1a456f6a575e", "row_index": 530, "timestamp": "2019-05-20T01:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2330a070-c1e6-4c8a-8be1-1a456f6a575e", "eventTime": "2019-05-20T01:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTDRnODJQWkVxYXErTWNyRlpXUDFMTUNoeWxNQVpMQmxSNnJlQkJOdy9hMmVCZWhPSCs2azBPalZnMnk2MHk0QWpPUHFoQWJaYmF1VTVNZEdhWGZ2THExN0VHWFpvSTNYZTdXTTZMTWxCUEQ5L2g5WmlKK1U3RndSNndBajVOMG81L2xaMmNpNXpzdkpMR2dRTUVScHk0S2dRZmlLSGlpbko0amRGOTFZd3FJTlRDKzJHVFliSTJ0cnlSdVMzcFJ2VUFVR2dzOUFkVm15UWlQcGs5L1NxSC9LdmJseEFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "record_id": "flaws_cloudtrail:0000531:1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "row_index": 531, "timestamp": "2019-05-20T01:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe53b6f-df10-43d7-b36f-e0c81c7998a1", "eventTime": "2019-05-20T01:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSk10QXp5TW5HR1FjajNyZXAwVWVuUjF5R1lrVnltbFBIa2E0ZkZaY3YyT2tSTkx5R1NGWloybzM3N2VEaHQxMEhnditNK3ZYc1FYd0k4a2puZlVIS1lyV2Vobk5FbWJGa2JDUWxpRDhlWlVrc1g5MVV5eTNDcVUrdi9qcGFQSmpQR0N5S2pTUVBRdDFyOVdlejJtUWZUWDFiL1g5YlRDampsYndOcUw2aHZ4Y1NVZ2VGdzFzMHpoS0w2VXVIMTlRT3RRZEJBejV6elpWQmNyOFdzV3dWejRYVHpIZmpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2330a070-c1e6-4c8a-8be1-1a456f6a575e", "record_id": "flaws_cloudtrail:0000532:2330a070-c1e6-4c8a-8be1-1a456f6a575e", "row_index": 532, "timestamp": "2019-05-20T01:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2330a070-c1e6-4c8a-8be1-1a456f6a575e", "eventTime": "2019-05-20T01:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTDRnODJQWkVxYXErTWNyRlpXUDFMTUNoeWxNQVpMQmxSNnJlQkJOdy9hMmVCZWhPSCs2azBPalZnMnk2MHk0QWpPUHFoQWJaYmF1VTVNZEdhWGZ2THExN0VHWFpvSTNYZTdXTTZMTWxCUEQ5L2g5WmlKK1U3RndSNndBajVOMG81L2xaMmNpNXpzdkpMR2dRTUVScHk0S2dRZmlLSGlpbko0amRGOTFZd3FJTlRDKzJHVFliSTJ0cnlSdVMzcFJ2VUFVR2dzOUFkVm15UWlQcGs5L1NxSC9LdmJseEFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74969b0-531d-4ded-8fe0-0ea362824f125", "record_id": "flaws_cloudtrail:0000533:74969b0-531d-4ded-8fe0-0ea362824f125", "row_index": 533, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74969b0-531d-4ded-8fe0-0ea362824f125", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjck4wRThDNCtYUm42ZkJvazUzYVZwZ3dRMEJ4U3g3QVdLOEk1dW5hU0tjU2pDSTFPQ3dENlI1QUhiR1NFZEVBNTd2VXM2SFQvOFlTbEVRek5IMVBTR1h4elV4aGc3cmFnUjU5YzJjYk1YMFBSaEdvRzRDeXYxRlJFTkNJNUZiNTlxU2dnb3ZmVXRTYVdCOWRUVDhIbWoxeDBkOU5LdXNZWjhWVmRxcW9zKzFXYTFJNGVYNDdLa0xFN2crUkU4dHp3RHA3M3ZzOCtZMVg0dmdPMjhpdmRhZTNCWFp6NGpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "813256a-1af3-4718-89cf-3200117e5376", "record_id": "flaws_cloudtrail:0000534:813256a-1af3-4718-89cf-3200117e5376", "row_index": 534, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "813256a-1af3-4718-89cf-3200117e5376", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJleWhxdk4vMHRoYVVMK3hNbkRJZkZmWlB3ZmcvaVF3ZmovbzlkVWk0QSs3MGZqb1FXdXdzYUdGOC8xenBSTzBYK0hoeWs5SUowZUdEUXFYbEk3RzZRVy9pV21WWlFyM1VuQ0dCUkhsZnUyNnZPMjAzYTc1TVV6bkhmTXZObSticnJ5bTVkdHpoQ3dpellHN3hDaW8ydnBPM3hEaXJ6WXhxTG94c0tnM2JZd1l6NTFLNmloMHp3OGdQWGRRUE1qOHMreTdtbGRoRnk5UEF1UnNCbXFBNkZ0blVLcnBqcFZZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e52ac13-dfef-4fba-a148-b2956ca8ca88", "record_id": "flaws_cloudtrail:0000535:9e52ac13-dfef-4fba-a148-b2956ca8ca88", "row_index": 535, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e52ac13-dfef-4fba-a148-b2956ca8ca88", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRGtuUmFqODdPR01HWGRMV1daRXNGMWRRZzRMYzZzb0VtcGU2L2xmMDQ5NVl3cjE1WHE5NVVHQnFJbzRudlpjWTZqZmpxVitBVkxnQ3BCa1VrWGV1QlZ1bk55K1lBSVVUcEtUQXNId3NFWWNmZndnNjdodkNtZWh4MVhZYnVkUDJxaEFBWCt1Z1UyYWdFN05sektnSzdQanVsaGkrN3MrbEZXanN2RzJWZ3d5a2t4ZXY5RStrN2xVYnJKNjJ3T3oxajRuQ3hrQXpqV2RsaTNVcVhUSGpuSjdLdWxJN0lrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74969b0-531d-4ded-8fe0-0ea362824f125", "record_id": "flaws_cloudtrail:0000536:74969b0-531d-4ded-8fe0-0ea362824f125", "row_index": 536, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74969b0-531d-4ded-8fe0-0ea362824f125", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjck4wRThDNCtYUm42ZkJvazUzYVZwZ3dRMEJ4U3g3QVdLOEk1dW5hU0tjU2pDSTFPQ3dENlI1QUhiR1NFZEVBNTd2VXM2SFQvOFlTbEVRek5IMVBTR1h4elV4aGc3cmFnUjU5YzJjYk1YMFBSaEdvRzRDeXYxRlJFTkNJNUZiNTlxU2dnb3ZmVXRTYVdCOWRUVDhIbWoxeDBkOU5LdXNZWjhWVmRxcW9zKzFXYTFJNGVYNDdLa0xFN2crUkU4dHp3RHA3M3ZzOCtZMVg0dmdPMjhpdmRhZTNCWFp6NGpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "813256a-1af3-4718-89cf-3200117e5376", "record_id": "flaws_cloudtrail:0000537:813256a-1af3-4718-89cf-3200117e5376", "row_index": 537, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "813256a-1af3-4718-89cf-3200117e5376", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJleWhxdk4vMHRoYVVMK3hNbkRJZkZmWlB3ZmcvaVF3ZmovbzlkVWk0QSs3MGZqb1FXdXdzYUdGOC8xenBSTzBYK0hoeWs5SUowZUdEUXFYbEk3RzZRVy9pV21WWlFyM1VuQ0dCUkhsZnUyNnZPMjAzYTc1TVV6bkhmTXZObSticnJ5bTVkdHpoQ3dpellHN3hDaW8ydnBPM3hEaXJ6WXhxTG94c0tnM2JZd1l6NTFLNmloMHp3OGdQWGRRUE1qOHMreTdtbGRoRnk5UEF1UnNCbXFBNkZ0blVLcnBqcFZZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e52ac13-dfef-4fba-a148-b2956ca8ca88", "record_id": "flaws_cloudtrail:0000538:9e52ac13-dfef-4fba-a148-b2956ca8ca88", "row_index": 538, "timestamp": "2019-05-20T01:30:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e52ac13-dfef-4fba-a148-b2956ca8ca88", "eventTime": "2019-05-20T01:30:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRGtuUmFqODdPR01HWGRMV1daRXNGMWRRZzRMYzZzb0VtcGU2L2xmMDQ5NVl3cjE1WHE5NVVHQnFJbzRudlpjWTZqZmpxVitBVkxnQ3BCa1VrWGV1QlZ1bk55K1lBSVVUcEtUQXNId3NFWWNmZndnNjdodkNtZWh4MVhZYnVkUDJxaEFBWCt1Z1UyYWdFN05sektnSzdQanVsaGkrN3MrbEZXanN2RzJWZ3d5a2t4ZXY5RStrN2xVYnJKNjJ3T3oxajRuQ3hrQXpqV2RsaTNVcVhUSGpuSjdLdWxJN0lrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc595169-815e-441f-ab31-c77975a4ae", "record_id": "flaws_cloudtrail:0000539:2bc595169-815e-441f-ab31-c77975a4ae", "row_index": 539, "timestamp": "2019-05-20T01:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc595169-815e-441f-ab31-c77975a4ae", "eventTime": "2019-05-20T01:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4UWVhUUpNOVZKQ3JOcGl2aDg3U2x0ZHZYRGpCclF4TFhXRmt4TDZUbU9EczNWQXRPTWU2bE5MMjZOSXRWaXZXWXJoT0dLOGUwam9BdUF5dG5ROU81Qk1TRVVZOURKVVZZSDhhNzRFQS9kSFEyOFZJdDdDMnlmbnJWSGhBYXcvMm1rVzU3ejJLdmZPa0pDY2M4QnNodUZRdTFBb01kaHRpMm44M1dUSTVVZ3hNY1hVRytKSkZMQ1cyT3Z5RGZXYU5FZ2M2OXIzYzE1WUhJRWZkNTZlVWVMV1FWb2x2Q3djPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31abf490-44af-446e-9a58-637f626bd2db", "record_id": "flaws_cloudtrail:0000540:31abf490-44af-446e-9a58-637f626bd2db", "row_index": 540, "timestamp": "2019-05-20T01:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31abf490-44af-446e-9a58-637f626bd2db", "eventTime": "2019-05-20T01:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNEJJRUFOSE12UVYyWStxRStsVVV4VFJOakUycjVwSk5iUVVaQmlFR1JzcFE4T3QwQXFNNjlHVTQvN29mWWlpQ0ZDdC9YVjBLVlgrUVRnZFlTZXBoZzdPUjRHcGlVL3pWdm1MS2JLblJmNndUWU5yWXNIVnVGK0YrOSt6d1V0VHBJWnJMbjJab2liWUNFWmpBd2NiTjl0T3d6R1JuTGdDYTFMTkpOSUFYZnROS2dubXhsVUlpL0dYYjVjNlRKMTU1Wk9rRFVCUUlpUVJlVGVZOHM3NjJxK2N1MVdWL1FFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc595169-815e-441f-ab31-c77975a4ae", "record_id": "flaws_cloudtrail:0000541:2bc595169-815e-441f-ab31-c77975a4ae", "row_index": 541, "timestamp": "2019-05-20T01:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc595169-815e-441f-ab31-c77975a4ae", "eventTime": "2019-05-20T01:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4UWVhUUpNOVZKQ3JOcGl2aDg3U2x0ZHZYRGpCclF4TFhXRmt4TDZUbU9EczNWQXRPTWU2bE5MMjZOSXRWaXZXWXJoT0dLOGUwam9BdUF5dG5ROU81Qk1TRVVZOURKVVZZSDhhNzRFQS9kSFEyOFZJdDdDMnlmbnJWSGhBYXcvMm1rVzU3ejJLdmZPa0pDY2M4QnNodUZRdTFBb01kaHRpMm44M1dUSTVVZ3hNY1hVRytKSkZMQ1cyT3Z5RGZXYU5FZ2M2OXIzYzE1WUhJRWZkNTZlVWVMV1FWb2x2Q3djPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31abf490-44af-446e-9a58-637f626bd2db", "record_id": "flaws_cloudtrail:0000542:31abf490-44af-446e-9a58-637f626bd2db", "row_index": 542, "timestamp": "2019-05-20T01:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31abf490-44af-446e-9a58-637f626bd2db", "eventTime": "2019-05-20T01:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNEJJRUFOSE12UVYyWStxRStsVVV4VFJOakUycjVwSk5iUVVaQmlFR1JzcFE4T3QwQXFNNjlHVTQvN29mWWlpQ0ZDdC9YVjBLVlgrUVRnZFlTZXBoZzdPUjRHcGlVL3pWdm1MS2JLblJmNndUWU5yWXNIVnVGK0YrOSt6d1V0VHBJWnJMbjJab2liWUNFWmpBd2NiTjl0T3d6R1JuTGdDYTFMTkpOSUFYZnROS2dubXhsVUlpL0dYYjVjNlRKMTU1Wk9rRFVCUUlpUVJlVGVZOHM3NjJxK2N1MVdWL1FFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996a9f16-393c-4b72-8215-99979a5e4", "record_id": "flaws_cloudtrail:0000543:996a9f16-393c-4b72-8215-99979a5e4", "row_index": 543, "timestamp": "2019-05-20T01:32:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996a9f16-393c-4b72-8215-99979a5e4", "eventTime": "2019-05-20T01:32:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsZWYvQ0I5UUhFQnA3ZWpIUnQxdzJHcEpIa00wekRLUFRQQkhDdFVqTCt6K3dCR3dmTlFvanlCYktJcGc3M3ErWlVrQXNFN1dCL0htZUZWS1NxZmJEUitMY1o1VHo1Z0g5KzhwK2pjaHFxYkJXakk3amxxbWZITjhoNzRudHRuclJCZVB2UGN5KzhBMmlMZVByQ2o5aFNRRWhFa1E3NVNxZGJXVGRJRDhyRndnL3A1UXdqOHJXbEh6RWhsZHFCT3l5WkttMG1sWDJ3ZHVmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645bf391-b066-4683-bac9-71e73d9169bf", "record_id": "flaws_cloudtrail:0000544:645bf391-b066-4683-bac9-71e73d9169bf", "row_index": 544, "timestamp": "2019-05-20T01:32:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645bf391-b066-4683-bac9-71e73d9169bf", "eventTime": "2019-05-20T01:32:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996a9f16-393c-4b72-8215-99979a5e4", "record_id": "flaws_cloudtrail:0000545:996a9f16-393c-4b72-8215-99979a5e4", "row_index": 545, "timestamp": "2019-05-20T01:32:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996a9f16-393c-4b72-8215-99979a5e4", "eventTime": "2019-05-20T01:32:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsZWYvQ0I5UUhFQnA3ZWpIUnQxdzJHcEpIa00wekRLUFRQQkhDdFVqTCt6K3dCR3dmTlFvanlCYktJcGc3M3ErWlVrQXNFN1dCL0htZUZWS1NxZmJEUitMY1o1VHo1Z0g5KzhwK2pjaHFxYkJXakk3amxxbWZITjhoNzRudHRuclJCZVB2UGN5KzhBMmlMZVByQ2o5aFNRRWhFa1E3NVNxZGJXVGRJRDhyRndnL3A1UXdqOHJXbEh6RWhsZHFCT3l5WkttMG1sWDJ3ZHVmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645bf391-b066-4683-bac9-71e73d9169bf", "record_id": "flaws_cloudtrail:0000546:645bf391-b066-4683-bac9-71e73d9169bf", "row_index": 546, "timestamp": "2019-05-20T01:32:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645bf391-b066-4683-bac9-71e73d9169bf", "eventTime": "2019-05-20T01:32:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aef8e5e-5a1b-4510-ba3f-67d22587077d", "record_id": "flaws_cloudtrail:0000547:2aef8e5e-5a1b-4510-ba3f-67d22587077d", "row_index": 547, "timestamp": "2019-05-20T01:33:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aef8e5e-5a1b-4510-ba3f-67d22587077d", "eventTime": "2019-05-20T01:33:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYbU5DM2NqY29UZHZpcWh0YmVrL1JUaXI4L1Y5d2FxMXk5TzRWdXIzSlVNc29qeXI0SE9kcXNudEhIYVNwMVplYzlha2pYKzI4QU5LdFdMVlY5MStqcmhub1NhUHFmRUdKQWhSMnhCNk5xOG1YM1Y1NzU3SEwxSnZSczNBbm4zMzVsWlhyT2J6VGlQRmZPZEYreXQxMUtLODhGTFR6NzJuVzhpcGZ6QmhaSkJ0YTFKREs1N0lIYmtkclJ1RnVJVmRBR1ZRSWdJcG84Ynhpdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aef8e5e-5a1b-4510-ba3f-67d22587077d", "record_id": "flaws_cloudtrail:0000548:2aef8e5e-5a1b-4510-ba3f-67d22587077d", "row_index": 548, "timestamp": "2019-05-20T01:33:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aef8e5e-5a1b-4510-ba3f-67d22587077d", "eventTime": "2019-05-20T01:33:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYbU5DM2NqY29UZHZpcWh0YmVrL1JUaXI4L1Y5d2FxMXk5TzRWdXIzSlVNc29qeXI0SE9kcXNudEhIYVNwMVplYzlha2pYKzI4QU5LdFdMVlY5MStqcmhub1NhUHFmRUdKQWhSMnhCNk5xOG1YM1Y1NzU3SEwxSnZSczNBbm4zMzVsWlhyT2J6VGlQRmZPZEYreXQxMUtLODhGTFR6NzJuVzhpcGZ6QmhaSkJ0YTFKREs1N0lIYmtkclJ1RnVJVmRBR1ZRSWdJcG84Ynhpdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac64457-cea1-4f1b-b4e9-5a95899f6", "record_id": "flaws_cloudtrail:0000549:ac64457-cea1-4f1b-b4e9-5a95899f6", "row_index": 549, "timestamp": "2019-05-20T01:33:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac64457-cea1-4f1b-b4e9-5a95899f6", "eventTime": "2019-05-20T01:33:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZWDd5WG4rdFJUQ011eEs1cFN0cDlJdldnMEpzQVZNR0V3RjRDTXZ4Tm9JZjZwc2FwcWtncHlKM0xZYTNqa3dHc2U2QXkzc2g2RG1UZFJNV1ZKdzRjR3BxSUdMdGJQdU1YK2tXWnZtZGF6eHREWk4zWXBISm1FdjlDZ0V4VnVsT0RnK2o3cjczV01PL3ZZWUNxcDI5WDdSTlU1VzZndEl2ZVdSMEdsYmtUSkx5WFpsMnNNUGVKQ1JMSTUyaGRWMFp4RDlvYUZsdHVNQjU4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27114e2-cc84-4a09-8f08-aa43cc9fccdc", "record_id": "flaws_cloudtrail:0000550:27114e2-cc84-4a09-8f08-aa43cc9fccdc", "row_index": 550, "timestamp": "2019-05-20T01:33:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27114e2-cc84-4a09-8f08-aa43cc9fccdc", "eventTime": "2019-05-20T01:33:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSTVEVFl5NDB5cHg0Z2Qvb3lLWkR2YXRCOGNDbWpIRmp3QkI4dE9NY05IT1ppVElUcFV3cS9YdmU3b285em9IM2FOTlp1MVRDam1tV1l4Z3E0TFNYL3NNN3hDcmRpSjZVVU52Ynh1N1FQVmpCekJxckE5eUtSTGk1SlhMV1Q2SFpCQytPU2JvNktld3A4MENGOFJXbjNRRUsyZjkxeDI2MVhqZHdBUHNZNmt5US83SlpvNWhtVlRmRGRodlhVeGR6UW9QVmxhd2FHSWs2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac64457-cea1-4f1b-b4e9-5a95899f6", "record_id": "flaws_cloudtrail:0000551:ac64457-cea1-4f1b-b4e9-5a95899f6", "row_index": 551, "timestamp": "2019-05-20T01:33:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac64457-cea1-4f1b-b4e9-5a95899f6", "eventTime": "2019-05-20T01:33:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZWDd5WG4rdFJUQ011eEs1cFN0cDlJdldnMEpzQVZNR0V3RjRDTXZ4Tm9JZjZwc2FwcWtncHlKM0xZYTNqa3dHc2U2QXkzc2g2RG1UZFJNV1ZKdzRjR3BxSUdMdGJQdU1YK2tXWnZtZGF6eHREWk4zWXBISm1FdjlDZ0V4VnVsT0RnK2o3cjczV01PL3ZZWUNxcDI5WDdSTlU1VzZndEl2ZVdSMEdsYmtUSkx5WFpsMnNNUGVKQ1JMSTUyaGRWMFp4RDlvYUZsdHVNQjU4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27114e2-cc84-4a09-8f08-aa43cc9fccdc", "record_id": "flaws_cloudtrail:0000552:27114e2-cc84-4a09-8f08-aa43cc9fccdc", "row_index": 552, "timestamp": "2019-05-20T01:33:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27114e2-cc84-4a09-8f08-aa43cc9fccdc", "eventTime": "2019-05-20T01:33:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSTVEVFl5NDB5cHg0Z2Qvb3lLWkR2YXRCOGNDbWpIRmp3QkI4dE9NY05IT1ppVElUcFV3cS9YdmU3b285em9IM2FOTlp1MVRDam1tV1l4Z3E0TFNYL3NNN3hDcmRpSjZVVU52Ynh1N1FQVmpCekJxckE5eUtSTGk1SlhMV1Q2SFpCQytPU2JvNktld3A4MENGOFJXbjNRRUsyZjkxeDI2MVhqZHdBUHNZNmt5US83SlpvNWhtVlRmRGRodlhVeGR6UW9QVmxhd2FHSWs2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba343208-40f5-49d7-8d05-135509c5e22c", "record_id": "flaws_cloudtrail:0000553:8ba343208-40f5-49d7-8d05-135509c5e22c", "row_index": 553, "timestamp": "2019-05-20T01:33:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba343208-40f5-49d7-8d05-135509c5e22c", "eventTime": "2019-05-20T01:33:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJheks3em1oZk95RFBMUHpEY3RpM0JtRFFnMmIyckhSV2dqbjN0TG1tYUNhOXdwQWwxQXhSVXJJSE5rMUxUY1lNb3ZOaWs4MTE4SmhmRE14UG9uSjM5dGRqZDBiYWs0M0REazJGYnM0L1pjUHBPZVFoaUJSMHovNVRja1lFUHBPa3pDbFE0Z2pPY1RqT1MvczBjNUVxTWdGLzJ1OFFVRlhMZTRLUTlRT1diMGhVUEpLYm1ROXJSaWw2L0lzQXhteEdpRHpxcXJCbnFGMXJOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba343208-40f5-49d7-8d05-135509c5e22c", "record_id": "flaws_cloudtrail:0000554:8ba343208-40f5-49d7-8d05-135509c5e22c", "row_index": 554, "timestamp": "2019-05-20T01:33:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba343208-40f5-49d7-8d05-135509c5e22c", "eventTime": "2019-05-20T01:33:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJheks3em1oZk95RFBMUHpEY3RpM0JtRFFnMmIyckhSV2dqbjN0TG1tYUNhOXdwQWwxQXhSVXJJSE5rMUxUY1lNb3ZOaWs4MTE4SmhmRE14UG9uSjM5dGRqZDBiYWs0M0REazJGYnM0L1pjUHBPZVFoaUJSMHovNVRja1lFUHBPa3pDbFE0Z2pPY1RqT1MvczBjNUVxTWdGLzJ1OFFVRlhMZTRLUTlRT1diMGhVUEpLYm1ROXJSaWw2L0lzQXhteEdpRHpxcXJCbnFGMXJOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd86822-21e3-4bc3-9be8-64bdacf85a69", "record_id": "flaws_cloudtrail:0000555:bcd86822-21e3-4bc3-9be8-64bdacf85a69", "row_index": 555, "timestamp": "2019-05-20T01:33:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd86822-21e3-4bc3-9be8-64bdacf85a69", "eventTime": "2019-05-20T01:33:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWc3NMVTZUMm80bVNqTE00anowbEFhWWFZSTNBeW9ZV2pkVDlwL1NQRTd0RHkvUElRZ2wybnJPT0xXcHN6c1FTZHc0WUdKVmhrcFYxdDdJVzlleFVaTnM4V0x5bnlaclp0cnpyMklDaytIeHR0R1RtL0hGUlJvajJOMFdmSVFCOXROeXpTVDNsOGwyOUcrZitrUXdPYXppTCs2eit6MTVJOEhXcFpFd2JuUklQQTdvTUUyeVJqRGpDem9GNnJnY2lROEZlUWE5UHIxSng3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428538ab-c020-4845-8f0e-0cdc9a4d24a0", "record_id": "flaws_cloudtrail:0000556:428538ab-c020-4845-8f0e-0cdc9a4d24a0", "row_index": 556, "timestamp": "2019-05-20T01:33:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428538ab-c020-4845-8f0e-0cdc9a4d24a0", "eventTime": "2019-05-20T01:33:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRlkwc1NuT0k1L2ZZT2diRjNIY2pmdHRDNFpYSnpZM3lnRlNWR1NwOTMwN3RtbWFPS1Q3clBDeDY5UXhqbVJaVm1tSzQrOXRXeXh5aFoxeXZrMzh4Q2dFeU9Gb1V3TWJabGRjUVJSTnBJUDhRZms2ckwxbkI2YXZmUDlwdVpFN2FVdXc2Q0xRSGsxcHN0R1hrTHg0ZVZWZ0pVMFB5bnY2MSs0RnRBUklKN2t3UkxZeTVrdTRrL0VDUkRsYjJ0U0tzVkZyUUczR0FuTXpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd86822-21e3-4bc3-9be8-64bdacf85a69", "record_id": "flaws_cloudtrail:0000557:bcd86822-21e3-4bc3-9be8-64bdacf85a69", "row_index": 557, "timestamp": "2019-05-20T01:33:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd86822-21e3-4bc3-9be8-64bdacf85a69", "eventTime": "2019-05-20T01:33:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWc3NMVTZUMm80bVNqTE00anowbEFhWWFZSTNBeW9ZV2pkVDlwL1NQRTd0RHkvUElRZ2wybnJPT0xXcHN6c1FTZHc0WUdKVmhrcFYxdDdJVzlleFVaTnM4V0x5bnlaclp0cnpyMklDaytIeHR0R1RtL0hGUlJvajJOMFdmSVFCOXROeXpTVDNsOGwyOUcrZitrUXdPYXppTCs2eit6MTVJOEhXcFpFd2JuUklQQTdvTUUyeVJqRGpDem9GNnJnY2lROEZlUWE5UHIxSng3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428538ab-c020-4845-8f0e-0cdc9a4d24a0", "record_id": "flaws_cloudtrail:0000558:428538ab-c020-4845-8f0e-0cdc9a4d24a0", "row_index": 558, "timestamp": "2019-05-20T01:33:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428538ab-c020-4845-8f0e-0cdc9a4d24a0", "eventTime": "2019-05-20T01:33:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRlkwc1NuT0k1L2ZZT2diRjNIY2pmdHRDNFpYSnpZM3lnRlNWR1NwOTMwN3RtbWFPS1Q3clBDeDY5UXhqbVJaVm1tSzQrOXRXeXh5aFoxeXZrMzh4Q2dFeU9Gb1V3TWJabGRjUVJSTnBJUDhRZms2ckwxbkI2YXZmUDlwdVpFN2FVdXc2Q0xRSGsxcHN0R1hrTHg0ZVZWZ0pVMFB5bnY2MSs0RnRBUklKN2t3UkxZeTVrdTRrL0VDUkRsYjJ0U0tzVkZyUUczR0FuTXpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "record_id": "flaws_cloudtrail:0000559:df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "row_index": 559, "timestamp": "2019-05-20T01:33:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "eventTime": "2019-05-20T01:33:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyMWpiUWJ0WmFKNDYyTCt6TU5YVjViOTFwTEd5Ti82Zm1jVVFmY3htVFFla0UzdU5HNWlQS0ZxUzNWQVRHcHBZWWFPQ2N4VnI5czZqV3E2TjA2YmVqNkhoaCsya2ZzbytVWVRoWFFRcm5ocGJtUWxvTHplYVVMdVpHTTVkS0QxanhNWUZCYjZRYnI2bzJacTJDWUMxVlJzeTlWQ3c4Nk5ZN1FySmNUR2hlUWFKS2JDVDlycnFiNGorY1BkOE9QUjVHMzk3TVJ0WlBTdHAxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "record_id": "flaws_cloudtrail:0000560:df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "row_index": 560, "timestamp": "2019-05-20T01:33:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df4b63c9-26b1-430b-94e2-1a4a8a3d1af1", "eventTime": "2019-05-20T01:33:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyMWpiUWJ0WmFKNDYyTCt6TU5YVjViOTFwTEd5Ti82Zm1jVVFmY3htVFFla0UzdU5HNWlQS0ZxUzNWQVRHcHBZWWFPQ2N4VnI5czZqV3E2TjA2YmVqNkhoaCsya2ZzbytVWVRoWFFRcm5ocGJtUWxvTHplYVVMdVpHTTVkS0QxanhNWUZCYjZRYnI2bzJacTJDWUMxVlJzeTlWQ3c4Nk5ZN1FySmNUR2hlUWFKS2JDVDlycnFiNGorY1BkOE9QUjVHMzk3TVJ0WlBTdHAxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "record_id": "flaws_cloudtrail:0000561:c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "row_index": 561, "timestamp": "2019-05-20T01:33:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "eventTime": "2019-05-20T01:33:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcTV3WVpyVExabzE2NVlLWlZxSW5jK1FUaTUxbEtsOVVGMzBBcm1sTDN6SFhwQkhsc25MeUVBL29KRm90dS9OOG1hSjJBNzNkYzdWcFJJM2Ixa2dFTVorSFdJTWFvemxBRnVidTY0V0NyWk9uOXlENm5PaFE0VXBqLzB2R25uNnl6TWUrOEtTd1JvV01NUitvNjNjY1hUSEl0a0RZRlc4MDdVNll1L3RRUllMQ2duRlB4bUxtM0gxZnlqcjdtRnR3cUROcUprUDIxN3ZYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af2dff68-181e-4d2c-9456-3982b34e40b0", "record_id": "flaws_cloudtrail:0000562:af2dff68-181e-4d2c-9456-3982b34e40b0", "row_index": 562, "timestamp": "2019-05-20T01:33:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af2dff68-181e-4d2c-9456-3982b34e40b0", "eventTime": "2019-05-20T01:33:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZnlmSC9NbklpWGUyY2VXZS9RT0dUUnYycnlCUXBqc0h4QTdTY0tsdTNoZ21wSE84eXdpaXpsYjQ1eVdTUmJaREJxcEh0V3BoL2JHVDlHSWdKdFN5NXFwaGlvSTNPS29CY0ZpamlBOFFFN2RhRFdRNnFrWDRsZXpTT09jTkRJNVpXdVNmS09YZVJqZEp0bm9GRC9pTUlCYTQ2VzZ2emlUQUFwb3BNaE9sV1RKckFuaVJwZXVJeDY2M0h4eUpPUXI1Q29jZ2hKWG9LVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "record_id": "flaws_cloudtrail:0000563:c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "row_index": 563, "timestamp": "2019-05-20T01:33:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c69f557c-fd6f-4cfd-8c3f-f16276dc4f93", "eventTime": "2019-05-20T01:33:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcTV3WVpyVExabzE2NVlLWlZxSW5jK1FUaTUxbEtsOVVGMzBBcm1sTDN6SFhwQkhsc25MeUVBL29KRm90dS9OOG1hSjJBNzNkYzdWcFJJM2Ixa2dFTVorSFdJTWFvemxBRnVidTY0V0NyWk9uOXlENm5PaFE0VXBqLzB2R25uNnl6TWUrOEtTd1JvV01NUitvNjNjY1hUSEl0a0RZRlc4MDdVNll1L3RRUllMQ2duRlB4bUxtM0gxZnlqcjdtRnR3cUROcUprUDIxN3ZYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af2dff68-181e-4d2c-9456-3982b34e40b0", "record_id": "flaws_cloudtrail:0000564:af2dff68-181e-4d2c-9456-3982b34e40b0", "row_index": 564, "timestamp": "2019-05-20T01:33:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af2dff68-181e-4d2c-9456-3982b34e40b0", "eventTime": "2019-05-20T01:33:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZnlmSC9NbklpWGUyY2VXZS9RT0dUUnYycnlCUXBqc0h4QTdTY0tsdTNoZ21wSE84eXdpaXpsYjQ1eVdTUmJaREJxcEh0V3BoL2JHVDlHSWdKdFN5NXFwaGlvSTNPS29CY0ZpamlBOFFFN2RhRFdRNnFrWDRsZXpTT09jTkRJNVpXdVNmS09YZVJqZEp0bm9GRC9pTUlCYTQ2VzZ2emlUQUFwb3BNaE9sV1RKckFuaVJwZXVJeDY2M0h4eUpPUXI1Q29jZ2hKWG9LVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a344cf-656c-4982-92e8-6ac39916d96d", "record_id": "flaws_cloudtrail:0000565:10a344cf-656c-4982-92e8-6ac39916d96d", "row_index": 565, "timestamp": "2019-05-20T01:33:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a344cf-656c-4982-92e8-6ac39916d96d", "eventTime": "2019-05-20T01:33:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWU5CNlRHN0luU1NRVU02VnkrSld2N1dyNm1HV0kzYi9uS0ZSdXdmdkZqQmh3NWg5eEU2OUZvaDZkL25xRitSYVBaU1lDOFpCdjZCYnBNMFErVjVSQTN4ZVhhTWFpMXNyNmZFcmdJNm1CQ3ppZUU5TzdiVEtoYlkweWtWcXgwQTNERWZVYlJaRzhITHlQZXVUNDlyZFJveXBXRElyaGJJeFhycURsNDF0eVo0RS9UbURYUnB0bzZFa3JkSDA4M1BIRzdIcU01Y1FsWDhydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "record_id": "flaws_cloudtrail:0000566:7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "row_index": 566, "timestamp": "2019-05-20T01:33:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "eventTime": "2019-05-20T01:33:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcXBsam52NkNEOHBWaXl6U3VWM2hZa1Z2bWt0ekp0MnlSbEpHcjJoZlhNeUQ5bXE1d09WNm1rUmZ2REtxS1JDRnJnc1RsNHl3VDBVZUdLSG1BNUxQTDhUeG5tS0ZMS0MvK1haMXV0bVpCVDhmN0hrS1RxU0lZRGwvdWdKOXBXL21GZllhUkw3eEJLb3hacDdXSG1BV2ZQYnZGWE0zZkpCNFBHYUdBUFJPZjBwcnozNWJXSkt5TGpmekk5WnFVWjFTTHhDWEU4SmUzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a344cf-656c-4982-92e8-6ac39916d96d", "record_id": "flaws_cloudtrail:0000567:10a344cf-656c-4982-92e8-6ac39916d96d", "row_index": 567, "timestamp": "2019-05-20T01:33:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a344cf-656c-4982-92e8-6ac39916d96d", "eventTime": "2019-05-20T01:33:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWU5CNlRHN0luU1NRVU02VnkrSld2N1dyNm1HV0kzYi9uS0ZSdXdmdkZqQmh3NWg5eEU2OUZvaDZkL25xRitSYVBaU1lDOFpCdjZCYnBNMFErVjVSQTN4ZVhhTWFpMXNyNmZFcmdJNm1CQ3ppZUU5TzdiVEtoYlkweWtWcXgwQTNERWZVYlJaRzhITHlQZXVUNDlyZFJveXBXRElyaGJJeFhycURsNDF0eVo0RS9UbURYUnB0bzZFa3JkSDA4M1BIRzdIcU01Y1FsWDhydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "record_id": "flaws_cloudtrail:0000568:7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "row_index": 568, "timestamp": "2019-05-20T01:33:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e23be5d-ef46-40c5-ab9c-061c7b5120f4", "eventTime": "2019-05-20T01:33:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcXBsam52NkNEOHBWaXl6U3VWM2hZa1Z2bWt0ekp0MnlSbEpHcjJoZlhNeUQ5bXE1d09WNm1rUmZ2REtxS1JDRnJnc1RsNHl3VDBVZUdLSG1BNUxQTDhUeG5tS0ZMS0MvK1haMXV0bVpCVDhmN0hrS1RxU0lZRGwvdWdKOXBXL21GZllhUkw3eEJLb3hacDdXSG1BV2ZQYnZGWE0zZkpCNFBHYUdBUFJPZjBwcnozNWJXSkt5TGpmekk5WnFVWjFTTHhDWEU4SmUzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af278ff8-21f4-43ce-b4da-df6a0a91ab38", "record_id": "flaws_cloudtrail:0000569:af278ff8-21f4-43ce-b4da-df6a0a91ab38", "row_index": 569, "timestamp": "2019-05-20T01:33:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af278ff8-21f4-43ce-b4da-df6a0a91ab38", "eventTime": "2019-05-20T01:33:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNDJ6elFhaGEzMEFCNVZ6Z2oxVGtmdTJqVjQ0ZWpwODBRSG14bHVEVGZMTTJpWUtPb0pQdVJDblo3YXZXSnVrWC9IV2s4WFA0UEd4N2JvWnVLbDBQT1hYdS9WSjdHTEJ5c3pMRlluVkpBeXNCNWNNOUVGbk84aFlncGxBcDYxQ245eWRxL2Y4VlhwNVBTR2VxN0xYNGZoSlE2R0l4ZWZ4Y3Zwa2lRam81WjNPWWJjWWlZc28vZXpCczNlUFVsS2Z4UExwSnZuenJUL0RxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af278ff8-21f4-43ce-b4da-df6a0a91ab38", "record_id": "flaws_cloudtrail:0000570:af278ff8-21f4-43ce-b4da-df6a0a91ab38", "row_index": 570, "timestamp": "2019-05-20T01:33:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af278ff8-21f4-43ce-b4da-df6a0a91ab38", "eventTime": "2019-05-20T01:33:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNDJ6elFhaGEzMEFCNVZ6Z2oxVGtmdTJqVjQ0ZWpwODBRSG14bHVEVGZMTTJpWUtPb0pQdVJDblo3YXZXSnVrWC9IV2s4WFA0UEd4N2JvWnVLbDBQT1hYdS9WSjdHTEJ5c3pMRlluVkpBeXNCNWNNOUVGbk84aFlncGxBcDYxQ245eWRxL2Y4VlhwNVBTR2VxN0xYNGZoSlE2R0l4ZWZ4Y3Zwa2lRam81WjNPWWJjWWlZc28vZXpCczNlUFVsS2Z4UExwSnZuenJUL0RxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50f16d78-baac-4d05-bbd5-9548b45c0a7b", "record_id": "flaws_cloudtrail:0000571:50f16d78-baac-4d05-bbd5-9548b45c0a7b", "row_index": 571, "timestamp": "2019-05-20T01:33:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50f16d78-baac-4d05-bbd5-9548b45c0a7b", "eventTime": "2019-05-20T01:33:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6VENVSDhPR0svcGE0V09lUXVTZEN0OEpoZ1c5UkVnN2dFWEwzb3R4QytKUXVYMlNEaG5HS0l5MGRUdldYTEJXeDNNd1oyWnBWSCtGU1RWbnp2Rm40eHh3Q25iZ0N3TEJGQjRuQUtwZVZkK2I4TUV6SkZTR01Mb0ludExrakFzZkFkU3pnWTYyYU5rVEkyS1hrUHR2RU1BQmtVS24xTWQ4eTJieno5a21STmJLSkZIcUlPRnZvUDgyUTZQbzZtSlNaWHVlZmlEZDF0VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a902c6b8-54e2-4e2b-b686-20543c339785", "record_id": "flaws_cloudtrail:0000572:a902c6b8-54e2-4e2b-b686-20543c339785", "row_index": 572, "timestamp": "2019-05-20T01:33:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a902c6b8-54e2-4e2b-b686-20543c339785", "eventTime": "2019-05-20T01:33:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZZXJrYlEvZTlWUGc4LzhqZmJUUWo4Z3dFU1Y1Q21vS3A2Z1gyRmNObzFrVWdrV1Q2NTROTlBmanZYZk05OVdxR0VnV2kzL1d1eDBucThBK3d0TkZlNzlGb21Fb25CYlEzQ2FJd09IYzZELzJJaVYxUFExSXpqRzlDNUN2dE1xalhXdyt4VzMvMnEzOS9vMndrM2pSb0x1cFlJcWE5SThWVTVFZjB6M25Xa1I4c1FpdUZUSnp2ckJkcHpwM1JESlVmQ3RxbWs4alZMSDciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50f16d78-baac-4d05-bbd5-9548b45c0a7b", "record_id": "flaws_cloudtrail:0000573:50f16d78-baac-4d05-bbd5-9548b45c0a7b", "row_index": 573, "timestamp": "2019-05-20T01:33:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50f16d78-baac-4d05-bbd5-9548b45c0a7b", "eventTime": "2019-05-20T01:33:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6VENVSDhPR0svcGE0V09lUXVTZEN0OEpoZ1c5UkVnN2dFWEwzb3R4QytKUXVYMlNEaG5HS0l5MGRUdldYTEJXeDNNd1oyWnBWSCtGU1RWbnp2Rm40eHh3Q25iZ0N3TEJGQjRuQUtwZVZkK2I4TUV6SkZTR01Mb0ludExrakFzZkFkU3pnWTYyYU5rVEkyS1hrUHR2RU1BQmtVS24xTWQ4eTJieno5a21STmJLSkZIcUlPRnZvUDgyUTZQbzZtSlNaWHVlZmlEZDF0VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a902c6b8-54e2-4e2b-b686-20543c339785", "record_id": "flaws_cloudtrail:0000574:a902c6b8-54e2-4e2b-b686-20543c339785", "row_index": 574, "timestamp": "2019-05-20T01:33:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a902c6b8-54e2-4e2b-b686-20543c339785", "eventTime": "2019-05-20T01:33:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZZXJrYlEvZTlWUGc4LzhqZmJUUWo4Z3dFU1Y1Q21vS3A2Z1gyRmNObzFrVWdrV1Q2NTROTlBmanZYZk05OVdxR0VnV2kzL1d1eDBucThBK3d0TkZlNzlGb21Fb25CYlEzQ2FJd09IYzZELzJJaVYxUFExSXpqRzlDNUN2dE1xalhXdyt4VzMvMnEzOS9vMndrM2pSb0x1cFlJcWE5SThWVTVFZjB6M25Xa1I4c1FpdUZUSnp2ckJkcHpwM1JESlVmQ3RxbWs4alZMSDciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5cc6ed3-6847-4ec3-8839-3a58e033573", "record_id": "flaws_cloudtrail:0000575:f5cc6ed3-6847-4ec3-8839-3a58e033573", "row_index": 575, "timestamp": "2019-05-20T01:33:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5cc6ed3-6847-4ec3-8839-3a58e033573", "eventTime": "2019-05-20T01:33:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNmtRdC96aEx3YmR6OVh4V1BlVUZKRmlBTm1NMHN5QWxuVlFKQUYxWHpZU3RnSjgwTWN0dWRZNTk0MjUwZmdaaHlxaUhxQjVrbzNHNmdKcG9UazB5dSt5QnhwNjF0T25QTk1BNWx5ZTFXQUc5K0dReWsvRzJVdzhDa3BYUVdQcmFoQ3FrRkVHbnBPczUydVc4Umk4RXJIbmdrZnpqdzNPQlJac283ZWFveExtcjRYOVpBUkdOYkVFMG5BWjA2TzJLRTlMTkdLYjlYQjlaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa072343-19b2-4d98-b982-a754bccb8b48", "record_id": "flaws_cloudtrail:0000576:fa072343-19b2-4d98-b982-a754bccb8b48", "row_index": 576, "timestamp": "2019-05-20T01:33:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa072343-19b2-4d98-b982-a754bccb8b48", "eventTime": "2019-05-20T01:33:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFRW02YkJPMVN4NDIxSW8yRHdPK3RwZXVneFhsWnk4UTgvckFENVBkbVh0S2lqdWR0S0I1N3V3MjNXMTFid0cxMDIvbHlnWnFBVWtBaU9kZkpvb1FnQjJTYm94QzhmSGFWTWoxdFRxN08yUGNuWFErQ1VSSzI0dHNKWXdpTC9BZFFyaHZOWlNDYjdLK1lmdVNwaW9rTTFBRVZDVjM1eEp3TzNwOEpnTlZ1NW9PYnRLODhyY2swNmY3cERaYWV3VFRSTklBK0xkbUNVUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5cc6ed3-6847-4ec3-8839-3a58e033573", "record_id": "flaws_cloudtrail:0000577:f5cc6ed3-6847-4ec3-8839-3a58e033573", "row_index": 577, "timestamp": "2019-05-20T01:33:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5cc6ed3-6847-4ec3-8839-3a58e033573", "eventTime": "2019-05-20T01:33:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNmtRdC96aEx3YmR6OVh4V1BlVUZKRmlBTm1NMHN5QWxuVlFKQUYxWHpZU3RnSjgwTWN0dWRZNTk0MjUwZmdaaHlxaUhxQjVrbzNHNmdKcG9UazB5dSt5QnhwNjF0T25QTk1BNWx5ZTFXQUc5K0dReWsvRzJVdzhDa3BYUVdQcmFoQ3FrRkVHbnBPczUydVc4Umk4RXJIbmdrZnpqdzNPQlJac283ZWFveExtcjRYOVpBUkdOYkVFMG5BWjA2TzJLRTlMTkdLYjlYQjlaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa072343-19b2-4d98-b982-a754bccb8b48", "record_id": "flaws_cloudtrail:0000578:fa072343-19b2-4d98-b982-a754bccb8b48", "row_index": 578, "timestamp": "2019-05-20T01:33:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa072343-19b2-4d98-b982-a754bccb8b48", "eventTime": "2019-05-20T01:33:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFRW02YkJPMVN4NDIxSW8yRHdPK3RwZXVneFhsWnk4UTgvckFENVBkbVh0S2lqdWR0S0I1N3V3MjNXMTFid0cxMDIvbHlnWnFBVWtBaU9kZkpvb1FnQjJTYm94QzhmSGFWTWoxdFRxN08yUGNuWFErQ1VSSzI0dHNKWXdpTC9BZFFyaHZOWlNDYjdLK1lmdVNwaW9rTTFBRVZDVjM1eEp3TzNwOEpnTlZ1NW9PYnRLODhyY2swNmY3cERaYWV3VFRSTklBK0xkbUNVUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "record_id": "flaws_cloudtrail:0000579:2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "row_index": 579, "timestamp": "2019-05-20T01:33:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "eventTime": "2019-05-20T01:33:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RGtBNXRPNHNxeVZyQURIRTd4VkVYS1BWMTc3T29ucm9LOVUwL0pUNXFMcHBUTmtQOXI2bG9xcC9hcU91V3ZUdmpKRTdrbkFucXVPMk91aUNRaG1vaUM0RUZsc05kL0hBSEcxV1Y0QlNIUjNIc085cFRLKzFWRlFxSGVna28zTW5tcGhuZWpQTVV4dWNBN0ljdUp1RVZ3Ym90Y3NuZml3NFVGZXB3UkRwcVVtcFJRNVVJZExoa0d6M3FGdCtNb25odExvL3RIeC9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "record_id": "flaws_cloudtrail:0000580:2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "row_index": 580, "timestamp": "2019-05-20T01:33:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d473ea4-fe30-43ec-a9e1-c42e90a3794d", "eventTime": "2019-05-20T01:33:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RGtBNXRPNHNxeVZyQURIRTd4VkVYS1BWMTc3T29ucm9LOVUwL0pUNXFMcHBUTmtQOXI2bG9xcC9hcU91V3ZUdmpKRTdrbkFucXVPMk91aUNRaG1vaUM0RUZsc05kL0hBSEcxV1Y0QlNIUjNIc085cFRLKzFWRlFxSGVna28zTW5tcGhuZWpQTVV4dWNBN0ljdUp1RVZ3Ym90Y3NuZml3NFVGZXB3UkRwcVVtcFJRNVVJZExoa0d6M3FGdCtNb25odExvL3RIeC9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5a23e30-c31f-4063-a8ac-36be9d476d02", "record_id": "flaws_cloudtrail:0000581:a5a23e30-c31f-4063-a8ac-36be9d476d02", "row_index": 581, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5a23e30-c31f-4063-a8ac-36be9d476d02", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaVmpUTWNMVFZGMlN1R1pzNGY2d3cvVGxtaTNRcG8ra281TExwLzc1a1pUVjZEaytYSkVzVm5CYlBVay9wYmk1WjZQOGNUUWlCVmlKWVdLVCtyVG16SllXdXNxMC9MdUd6d0F2YmFYcWNRTjVOd1BoYW9jUXdMdmFWa2twa3ZKR2l6ekFLcUNkTyswejRmL0dEU3IweEJpRktiUVZGMG9nTjd0NDVOV0V2dmhNbmlLWThVMnhRSzhvSDc3R2NEMXUzNytLWnN0ZXllSUI5QjllOWUvNXZFYmhUalp2VkJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "997db036-179a-4746-aad8-810f4f3c2ece", "record_id": "flaws_cloudtrail:0000582:997db036-179a-4746-aad8-810f4f3c2ece", "row_index": 582, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "997db036-179a-4746-aad8-810f4f3c2ece", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMVVJxcko1em5tWnFJb2hYOXBMOFNIeG5SNG00bUV0bkJKUWh5S0JPdzk0MUY5RU8xZ1ZDZzJ4Nm9OSm5BeVJRVGtDWDlpeUxtMFdmU05wN3lMY2RDOCtlSnZGYWNwNGx1ZUVQakNNR0hLdXVzcXhROHVwYkRsZXFUTUxKd0VFVHd1VDAyeGhlUFJzQkZlZzVuZHhmNWZMc21rTlFCZ1NzdWtYNXRHWGJkelBQSnM4ZmlYSmhra3pBODFuZWloSkt5a2h1Y1N6dllDcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "addcadf8-09ac-4332-816f-703331e5fc31", "record_id": "flaws_cloudtrail:0000583:addcadf8-09ac-4332-816f-703331e5fc31", "row_index": 583, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "addcadf8-09ac-4332-816f-703331e5fc31", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNTzB4aVh6OEgrdUczNTdqT0tqbHBKRk9za0VPaVA1bjl3OFNGNTRUQ0VicUlmelpVdTdFNStUWjRTQUUxa1RVWVFmbDFZRW14ZFM0NjAvY0RKUG50M1FsUHBkZklvb0VqYktTSlZWajVOSElubm44YmFva2ViSXROM3ljbTFMV2N0ZGUwQXlrMjZaRm93M2JzT3NWTDZId2NHQ3J2a1pWSXJNODluUWF5ZVBuc3J2RHZ1WllHdG5wNENBcGEzODIvaktXeUdReXM3b3dPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5a23e30-c31f-4063-a8ac-36be9d476d02", "record_id": "flaws_cloudtrail:0000584:a5a23e30-c31f-4063-a8ac-36be9d476d02", "row_index": 584, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5a23e30-c31f-4063-a8ac-36be9d476d02", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaVmpUTWNMVFZGMlN1R1pzNGY2d3cvVGxtaTNRcG8ra281TExwLzc1a1pUVjZEaytYSkVzVm5CYlBVay9wYmk1WjZQOGNUUWlCVmlKWVdLVCtyVG16SllXdXNxMC9MdUd6d0F2YmFYcWNRTjVOd1BoYW9jUXdMdmFWa2twa3ZKR2l6ekFLcUNkTyswejRmL0dEU3IweEJpRktiUVZGMG9nTjd0NDVOV0V2dmhNbmlLWThVMnhRSzhvSDc3R2NEMXUzNytLWnN0ZXllSUI5QjllOWUvNXZFYmhUalp2VkJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "997db036-179a-4746-aad8-810f4f3c2ece", "record_id": "flaws_cloudtrail:0000585:997db036-179a-4746-aad8-810f4f3c2ece", "row_index": 585, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "997db036-179a-4746-aad8-810f4f3c2ece", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMVVJxcko1em5tWnFJb2hYOXBMOFNIeG5SNG00bUV0bkJKUWh5S0JPdzk0MUY5RU8xZ1ZDZzJ4Nm9OSm5BeVJRVGtDWDlpeUxtMFdmU05wN3lMY2RDOCtlSnZGYWNwNGx1ZUVQakNNR0hLdXVzcXhROHVwYkRsZXFUTUxKd0VFVHd1VDAyeGhlUFJzQkZlZzVuZHhmNWZMc21rTlFCZ1NzdWtYNXRHWGJkelBQSnM4ZmlYSmhra3pBODFuZWloSkt5a2h1Y1N6dllDcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "addcadf8-09ac-4332-816f-703331e5fc31", "record_id": "flaws_cloudtrail:0000586:addcadf8-09ac-4332-816f-703331e5fc31", "row_index": 586, "timestamp": "2019-05-20T01:33:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "addcadf8-09ac-4332-816f-703331e5fc31", "eventTime": "2019-05-20T01:33:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNTzB4aVh6OEgrdUczNTdqT0tqbHBKRk9za0VPaVA1bjl3OFNGNTRUQ0VicUlmelpVdTdFNStUWjRTQUUxa1RVWVFmbDFZRW14ZFM0NjAvY0RKUG50M1FsUHBkZklvb0VqYktTSlZWajVOSElubm44YmFva2ViSXROM3ljbTFMV2N0ZGUwQXlrMjZaRm93M2JzT3NWTDZId2NHQ3J2a1pWSXJNODluUWF5ZVBuc3J2RHZ1WllHdG5wNENBcGEzODIvaktXeUdReXM3b3dPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "record_id": "flaws_cloudtrail:0000587:a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "row_index": 587, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLMEJlaXovTzhEQVJwdXUxSGVyNjNlWHkrSXVIcWJSeXplWWtmTmxoMGdGcUg3RlNVeG45NVhpOHFGeTdiWkMrSWxtVjJKOVh5VzFVMVJXb3Q3a0pmaU9FeFpEZWVuRWtrekZyOFZHWUMrQytFREozemhjSWkwa05XS2hQVmlPUlVBVnVucGVtRWo1eDBtbFloV2U0bE1FazBWN3Q0ZDBvSUw1QnRQQnJLNllaZlZJb29oUGs0NGJmUFZHQVptS0NrdTUxd0gvL1BkZ2ZVeEsrQmpkRUlCSDhQdkhQejlnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771cdc62-a06b-4762-9725-383f89d4dbaa", "record_id": "flaws_cloudtrail:0000588:771cdc62-a06b-4762-9725-383f89d4dbaa", "row_index": 588, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771cdc62-a06b-4762-9725-383f89d4dbaa", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiMUZGWnVyUGZKbGI0MlFGWCtkNFBPdEpWdFZwUEtzTy9MRXp5aXlMd1pQMWZhYUNmUjNCUVg0SzlRbStqY0tWVlhNN085eTBMVU5Ed0xKbjl4K0t6V3pYZ1J1UkZZQmZYQzRZWnNiQkV6eVZZeStXOFVtZThDay84YWc4TUpSeTROM2J3Y0p6WFNuZUpYeFdaQWQxbk9iQlhUM3hGcU9Sd3VpZ3hWeFVpOWFDUStackh0dkFYTW5wOUg5Wmx1Wk1IYWdPVmhMcmVFek1iQnZvYW0zaGZqRC96SFAwMXhFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c05b428-3574-4f29-bf69-9461c9b2b55a", "record_id": "flaws_cloudtrail:0000589:1c05b428-3574-4f29-bf69-9461c9b2b55a", "row_index": 589, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c05b428-3574-4f29-bf69-9461c9b2b55a", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZjJSUVNVTzlBRDRIRk5Pb01Ia3ZYeVl1R09qUnNIV29jMVdDWWdrRHNRNHVVMVVtMm1kNDhMdGNJSjdZN0dKdEpoVDFrdjlrb2VJVE5ZcGpSanQ3VkpENnpJWSt2U0MxaHRtMEIrdnNqUWhqQTBLdzd3SlVsMWhQUCt6VE9PcWxwL001ZWRVNS81MFRrcGJmZjJidEhPSlNWQnV5U3JoNTM4SlZSbWlCZ1VZVmtRdE50ZURkUjFVdlZ3WmZhNVFuRi9XNGh2UG83ZkwvQ1JEYnUvYTRnQSttcVdMV1NzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "record_id": "flaws_cloudtrail:0000590:a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "row_index": 590, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51d0345-8b25-4f6e-b88a-7bf5e6f833f4", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLMEJlaXovTzhEQVJwdXUxSGVyNjNlWHkrSXVIcWJSeXplWWtmTmxoMGdGcUg3RlNVeG45NVhpOHFGeTdiWkMrSWxtVjJKOVh5VzFVMVJXb3Q3a0pmaU9FeFpEZWVuRWtrekZyOFZHWUMrQytFREozemhjSWkwa05XS2hQVmlPUlVBVnVucGVtRWo1eDBtbFloV2U0bE1FazBWN3Q0ZDBvSUw1QnRQQnJLNllaZlZJb29oUGs0NGJmUFZHQVptS0NrdTUxd0gvL1BkZ2ZVeEsrQmpkRUlCSDhQdkhQejlnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "771cdc62-a06b-4762-9725-383f89d4dbaa", "record_id": "flaws_cloudtrail:0000591:771cdc62-a06b-4762-9725-383f89d4dbaa", "row_index": 591, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "771cdc62-a06b-4762-9725-383f89d4dbaa", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiMUZGWnVyUGZKbGI0MlFGWCtkNFBPdEpWdFZwUEtzTy9MRXp5aXlMd1pQMWZhYUNmUjNCUVg0SzlRbStqY0tWVlhNN085eTBMVU5Ed0xKbjl4K0t6V3pYZ1J1UkZZQmZYQzRZWnNiQkV6eVZZeStXOFVtZThDay84YWc4TUpSeTROM2J3Y0p6WFNuZUpYeFdaQWQxbk9iQlhUM3hGcU9Sd3VpZ3hWeFVpOWFDUStackh0dkFYTW5wOUg5Wmx1Wk1IYWdPVmhMcmVFek1iQnZvYW0zaGZqRC96SFAwMXhFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c05b428-3574-4f29-bf69-9461c9b2b55a", "record_id": "flaws_cloudtrail:0000592:1c05b428-3574-4f29-bf69-9461c9b2b55a", "row_index": 592, "timestamp": "2019-05-20T01:33:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c05b428-3574-4f29-bf69-9461c9b2b55a", "eventTime": "2019-05-20T01:33:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZjJSUVNVTzlBRDRIRk5Pb01Ia3ZYeVl1R09qUnNIV29jMVdDWWdrRHNRNHVVMVVtMm1kNDhMdGNJSjdZN0dKdEpoVDFrdjlrb2VJVE5ZcGpSanQ3VkpENnpJWSt2U0MxaHRtMEIrdnNqUWhqQTBLdzd3SlVsMWhQUCt6VE9PcWxwL001ZWRVNS81MFRrcGJmZjJidEhPSlNWQnV5U3JoNTM4SlZSbWlCZ1VZVmtRdE50ZURkUjFVdlZ3WmZhNVFuRi9XNGh2UG83ZkwvQ1JEYnUvYTRnQSttcVdMV1NzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "record_id": "flaws_cloudtrail:0000593:6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "row_index": 593, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMEtpWVVTT3ZKZ0lSV3pSaWVRYWkzV0RkYk95US9BTDVIL3AwNDY2TVBuZEFSdTVGV1BwQittbDc1WHMrMkpOYWk0VTVIckNSVDJQTUVVeG05a0NVRXJ6anBDWkRuNE8rU1lNelF5Q3g5Qi9iaG9iOGJmb1pXOFJyZkFSQmo2dWFvWU8velMzcDBzblEyRXBNY1Q3Slpkd3lCU2hwVzFlRlFRVE1tZXZiYzdaYkZkclNLckxocnRIeWI5UEN3NlhPZXB1RDQ4Z1NCMzlrbXFiakI2UHlIWHh2TlB6TEtJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6fa8e2-5932-49f1-8320-b729a3622abd", "record_id": "flaws_cloudtrail:0000594:0a6fa8e2-5932-49f1-8320-b729a3622abd", "row_index": 594, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6fa8e2-5932-49f1-8320-b729a3622abd", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5akhZcitvckdSZU4zcDRIN0tiMkNTeGJjaDdLUExaalRnc3hjamZwNXVKNTlWaEhMWmVyZmY1SDVhay90UStMZnNHMUpodzg3M2QwNStkSUJYaElEdVphMngzaUxiWXVkbmVUQlpVKys1R0pURHUzOHNNZ1E4SHQwRTROYVNiTFZicDlWQ0pUemdBYXVnNFNJNENldHp4U1dhL0VEaUtrVjc0cmFhSEZWQWRXTHJocytMZDAyODFsRHYyR241UERUSGE5bDdibmJwOUYvT2crNFVvelh4QTd5YUE4UnFBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291a2dde-f34e-49e6-89d0-71bf4b9365b4", "record_id": "flaws_cloudtrail:0000595:291a2dde-f34e-49e6-89d0-71bf4b9365b4", "row_index": 595, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291a2dde-f34e-49e6-89d0-71bf4b9365b4", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlK0l2VTl4RXdhYnlPTnhKa2Rkdm81VmNJNnhPT01oczJnM2FsMHREL1ZvMHFqV2tBSjJGdmdPczlrM3Iyd055cmhsdWp4RnlSMTVtT1QxR05VdUZYQUZLZnNrZU9MUWVTRVd2bDB2amlDMDZGMmhnamZreVJ6WVBTYWErUWFrR3I5bnQ4eGNXWS82TU9NSlllMzBqZk5ZVzlCUnIxSkg0RUMzQk16SzhWZHVtNE1rRE5VeUM5WElRMm0wOUQ4NzVmOHhMRDJhdklaSHlIZDJ5L1NwT05nSHBrZnNhTFZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "record_id": "flaws_cloudtrail:0000596:6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "row_index": 596, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f1fb1cc-57fc-46eb-9f50-21a33d9b02dd", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMEtpWVVTT3ZKZ0lSV3pSaWVRYWkzV0RkYk95US9BTDVIL3AwNDY2TVBuZEFSdTVGV1BwQittbDc1WHMrMkpOYWk0VTVIckNSVDJQTUVVeG05a0NVRXJ6anBDWkRuNE8rU1lNelF5Q3g5Qi9iaG9iOGJmb1pXOFJyZkFSQmo2dWFvWU8velMzcDBzblEyRXBNY1Q3Slpkd3lCU2hwVzFlRlFRVE1tZXZiYzdaYkZkclNLckxocnRIeWI5UEN3NlhPZXB1RDQ4Z1NCMzlrbXFiakI2UHlIWHh2TlB6TEtJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6fa8e2-5932-49f1-8320-b729a3622abd", "record_id": "flaws_cloudtrail:0000597:0a6fa8e2-5932-49f1-8320-b729a3622abd", "row_index": 597, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6fa8e2-5932-49f1-8320-b729a3622abd", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5akhZcitvckdSZU4zcDRIN0tiMkNTeGJjaDdLUExaalRnc3hjamZwNXVKNTlWaEhMWmVyZmY1SDVhay90UStMZnNHMUpodzg3M2QwNStkSUJYaElEdVphMngzaUxiWXVkbmVUQlpVKys1R0pURHUzOHNNZ1E4SHQwRTROYVNiTFZicDlWQ0pUemdBYXVnNFNJNENldHp4U1dhL0VEaUtrVjc0cmFhSEZWQWRXTHJocytMZDAyODFsRHYyR241UERUSGE5bDdibmJwOUYvT2crNFVvelh4QTd5YUE4UnFBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291a2dde-f34e-49e6-89d0-71bf4b9365b4", "record_id": "flaws_cloudtrail:0000598:291a2dde-f34e-49e6-89d0-71bf4b9365b4", "row_index": 598, "timestamp": "2019-05-20T01:33:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291a2dde-f34e-49e6-89d0-71bf4b9365b4", "eventTime": "2019-05-20T01:33:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlK0l2VTl4RXdhYnlPTnhKa2Rkdm81VmNJNnhPT01oczJnM2FsMHREL1ZvMHFqV2tBSjJGdmdPczlrM3Iyd055cmhsdWp4RnlSMTVtT1QxR05VdUZYQUZLZnNrZU9MUWVTRVd2bDB2amlDMDZGMmhnamZreVJ6WVBTYWErUWFrR3I5bnQ4eGNXWS82TU9NSlllMzBqZk5ZVzlCUnIxSkg0RUMzQk16SzhWZHVtNE1rRE5VeUM5WElRMm0wOUQ4NzVmOHhMRDJhdklaSHlIZDJ5L1NwT05nSHBrZnNhTFZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "record_id": "flaws_cloudtrail:0000599:d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "row_index": 599, "timestamp": "2019-05-20T01:35:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "eventTime": "2019-05-20T01:35:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB2VBBZE2EJI7VNS3", "expiration": "May 20, 2019 1:35:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6086b14-f0bf-46b6-9841-323b615a161c", "record_id": "flaws_cloudtrail:0000600:c6086b14-f0bf-46b6-9841-323b615a161c", "row_index": 600, "timestamp": "2019-05-20T01:35:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6086b14-f0bf-46b6-9841-323b615a161c", "eventTime": "2019-05-20T01:35:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9NHA0IEMUZDL9FWV", "expiration": "May 20, 2019 1:35:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88dea739-554b-4477-8f15-b904947f8de", "record_id": "flaws_cloudtrail:0000601:88dea739-554b-4477-8f15-b904947f8de", "row_index": 601, "timestamp": "2019-05-20T01:35:57Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAB2VBBZE2EJI7VNS3", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "7.0.255.7", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88dea739-554b-4477-8f15-b904947f8de", "eventTime": "2019-05-20T01:35:57Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.0.255.7", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAB2VBBZE2EJI7VNS3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-20T01:35:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/20/[$LATEST]bf974828d3359e2dd578cd08d032a7db", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "record_id": "flaws_cloudtrail:0000602:d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "row_index": 602, "timestamp": "2019-05-20T01:35:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3432fd5-39d1-46f0-8e58-69fae9cc07b8", "eventTime": "2019-05-20T01:35:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB2VBBZE2EJI7VNS3", "expiration": "May 20, 2019 1:35:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6086b14-f0bf-46b6-9841-323b615a161c", "record_id": "flaws_cloudtrail:0000603:c6086b14-f0bf-46b6-9841-323b615a161c", "row_index": 603, "timestamp": "2019-05-20T01:35:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6086b14-f0bf-46b6-9841-323b615a161c", "eventTime": "2019-05-20T01:35:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9NHA0IEMUZDL9FWV", "expiration": "May 20, 2019 1:35:57 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGIaCXVzLXdlc3QtMiJGMEQCIER6Afs2JcvwSYBjaceoAQWluSMB1fT8u5yTmm4+BDdpAiBh1Us8u//UAq/CMGY18fMdInG0myue+NLVSYXyyeZxxiqCAghrEAAaDDk3NTQyNjI2MjAyOSIMwsSbeVW3eNEmAsuvKt8BHkCOPrkrB2AOakmiVQHqhDT1Y0u6ZhM7xJ3Mx9dRKsw2gHMuozQxBD9aBBpDYzKSang8RR0xuVwZghdlAEfwaXfZtJDuEPk1VNdp5YeUViz2sgR6k4BOnOC8zgbAiS/9btNpP/9ABIRQs7ApqsWRK/nWS7qHFOV9UadSneq+obdyKvPmyr8kFhZwyfQHfas4h0wzxmoUOiStUwUcevb768vtdrvmynu4rFK09MF96Uqh0mgcxMF+7h8xg6ktkVkf3+MdPsjKHjfoqflEz4CXxLtJ16Tm4LVtYlBlLWIghDD9iIjnBTq1ARTJIpuEW7bMOm27OKuLlJhtOn2PNQsOHQ1xmzfv+EycS91M+2vvRhyX3bZSRcxIJDH9ByAMUzjMv7qj2c/dvC7Li9c50qbOk3Y9zarrs7+E9/y5ZdhDNLT7IZdDbblBsz3VDB0XfJCf3YJKFVT66KVBE5VYanVI753eMt1HvVgxcPUtM1v0VP/v1gZE2vRxNeBEuFPxuD0LVm7YOoi0dP3kabMXEHNNF3snqLRXLcwJlAhn++8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88dea739-554b-4477-8f15-b904947f8de", "record_id": "flaws_cloudtrail:0000604:88dea739-554b-4477-8f15-b904947f8de", "row_index": 604, "timestamp": "2019-05-20T01:35:57Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAB2VBBZE2EJI7VNS3", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "7.0.255.7", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88dea739-554b-4477-8f15-b904947f8de", "eventTime": "2019-05-20T01:35:57Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.0.255.7", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAB2VBBZE2EJI7VNS3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-20T01:35:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/20/[$LATEST]bf974828d3359e2dd578cd08d032a7db", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "record_id": "flaws_cloudtrail:0000605:4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "row_index": 605, "timestamp": "2019-05-20T01:36:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "eventTime": "2019-05-20T01:36:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "record_id": "flaws_cloudtrail:0000606:4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "row_index": 606, "timestamp": "2019-05-20T01:36:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff146c1-dcd5-40f8-b6ba-c35d53613d10", "eventTime": "2019-05-20T01:36:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "record_id": "flaws_cloudtrail:0000607:949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "row_index": 607, "timestamp": "2019-05-20T01:36:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "eventTime": "2019-05-20T01:36:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVUs2MGFTVUZmZ2dDeklnWVY1RWRzVjZ0ZlArM0VIQktmdjk0ZW1UQnlhSVNTUU82SnljTGhHUmp3TVhKQXhCa21SV3hHUjcvRWZwRmVsR2VWdWRGVW9PSXI4SUZzNlJ0SEVYdXdPWWl2eDFmNnZ0alA0Y3orNTBlbFNmblBiL1dEWk03V0tvRGNlRUpDUUJ1SVZoWjJmMnFsTGU2RW93Nm1vUnFqYVEvYjliekNrK08wbHdqcFBTYUl1UVFwdVZjaHFLbis2U1phNXZodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "record_id": "flaws_cloudtrail:0000608:949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "row_index": 608, "timestamp": "2019-05-20T01:36:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949a57a9-6abb-4a0e-9463-7dfd3a2a1df3", "eventTime": "2019-05-20T01:36:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVUs2MGFTVUZmZ2dDeklnWVY1RWRzVjZ0ZlArM0VIQktmdjk0ZW1UQnlhSVNTUU82SnljTGhHUmp3TVhKQXhCa21SV3hHUjcvRWZwRmVsR2VWdWRGVW9PSXI4SUZzNlJ0SEVYdXdPWWl2eDFmNnZ0alA0Y3orNTBlbFNmblBiL1dEWk03V0tvRGNlRUpDUUJ1SVZoWjJmMnFsTGU2RW93Nm1vUnFqYVEvYjliekNrK08wbHdqcFBTYUl1UVFwdVZjaHFLbis2U1phNXZodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "record_id": "flaws_cloudtrail:0000609:2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "row_index": 609, "timestamp": "2019-05-20T01:36:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "eventTime": "2019-05-20T01:36:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrbnZUZS9ydGg5M2NEN2J4clZORmhBL3pyVEpNczU3QmdicUNjdGY3VW5YKy9WMkF0Y2sycmZ6V2l6N0lZcTlqYWhkR05PMzdXVWE2UmJveXBNNkZvWUVRQjg3SU1kK1pmWDNrTTBSOXYyTnh1UW5zTkd6WGN4TUNJYmt2VXNJSG1kUWZjcWdLbHJZSUdNNWpMSGRwaDNrNnh3YjFtb0FCWU9QN0tuUktCNU5NVmlQYzN0b0Z3VVRuZ2RLZTdQS3pUWm9PM2lJckhjOGFpUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "record_id": "flaws_cloudtrail:0000610:2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "row_index": 610, "timestamp": "2019-05-20T01:36:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d92f2f3-9084-4b2a-8f5b-d5be494b1785", "eventTime": "2019-05-20T01:36:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrbnZUZS9ydGg5M2NEN2J4clZORmhBL3pyVEpNczU3QmdicUNjdGY3VW5YKy9WMkF0Y2sycmZ6V2l6N0lZcTlqYWhkR05PMzdXVWE2UmJveXBNNkZvWUVRQjg3SU1kK1pmWDNrTTBSOXYyTnh1UW5zTkd6WGN4TUNJYmt2VXNJSG1kUWZjcWdLbHJZSUdNNWpMSGRwaDNrNnh3YjFtb0FCWU9QN0tuUktCNU5NVmlQYzN0b0Z3VVRuZ2RLZTdQS3pUWm9PM2lJckhjOGFpUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f38fbf7-f2d1-4562-b0dd-57c6f9b8fbab", "record_id": "flaws_cloudtrail:0000611:1f38fbf7-f2d1-4562-b0dd-57c6f9b8fbab", "row_index": 611, "timestamp": "2019-05-20T01:36:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.235.90.58", "user_agent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f38fbf7-f2d1-4562-b0dd-57c6f9b8fbab", "eventTime": "2019-05-20T01:36:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.235.90.58", "userAgent": "aws-cli/1.16.115 Python/3.7.2 Darwin/18.2.0 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNG9ZV2JTSDNoQzV3R1l3MG9FKzBTak1hdSt6b0xuL2tsS0tyWngrMm1VV0ZtQzZmMStpTElmNStBVTVKK2tobnFiN3VmcUFpcFVkRitYT2xNQzN4YTBPaWpDSHEyR2h1MVpNL245VXpHS2hyTllVdlVrTnBZWnA3ZFBOWndUSTc0c2F2Sm92ZS9IQ0I5Y3gwQTdyZ3h0TEZ1RkdoTy9Fdkp4WEJ6UUl1N0NiNlZBMVFpZFI2V2x3Y3FwYmM4WExnTTJJZWkzcHFlUC81Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}