Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8737f5ac-dc3e-4c37-bc8f-588132d341da", "record_id": "flaws_cloudtrail:0000000:8737f5ac-dc3e-4c37-bc8f-588132d341da", "row_index": 0, "timestamp": "2019-07-27T05:52:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8737f5ac-dc3e-4c37-bc8f-588132d341da", "eventTime": "2019-07-27T05:52:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "record_id": "flaws_cloudtrail:0000001:e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "row_index": 1, "timestamp": "2019-07-27T05:55:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "eventTime": "2019-07-27T05:55:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "record_id": "flaws_cloudtrail:0000002:e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "row_index": 2, "timestamp": "2019-07-27T05:55:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ed8b02-bee7-4abf-9f77-dfea5471b7ca", "eventTime": "2019-07-27T05:55:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7615bdc9-f864-48a5-a80b-7182a44dac4d", "record_id": "flaws_cloudtrail:0000003:7615bdc9-f864-48a5-a80b-7182a44dac4d", "row_index": 3, "timestamp": "2019-07-27T05:55:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7615bdc9-f864-48a5-a80b-7182a44dac4d", "eventTime": "2019-07-27T05:55:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1bi8zS3ZuaHY3STdhUDFTbFh4cER5YkwvUkhCRGczNldGOTE2OHkzb0ZRMC93cVd2SlJiWEZVT2F2TkxpR29MaGpVb3FsK3g4bWVWbFFSQkV4SUw4UFdGeHFJUDhhTGV0bThrYW9TV1JYaHNiSElwREVQR1U2S1ViM0pHd3hPQWJZaE5YRW1zRFhLaVJhVjcyRm5BU3QvM0d2dnd6dE9KbnA3MlQ1aXVCd3NiSXNUZFZvbFN6SzdLM2FDOFJJV2FERTVENGtCbDc5dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7615bdc9-f864-48a5-a80b-7182a44dac4d", "record_id": "flaws_cloudtrail:0000004:7615bdc9-f864-48a5-a80b-7182a44dac4d", "row_index": 4, "timestamp": "2019-07-27T05:55:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7615bdc9-f864-48a5-a80b-7182a44dac4d", "eventTime": "2019-07-27T05:55:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1bi8zS3ZuaHY3STdhUDFTbFh4cER5YkwvUkhCRGczNldGOTE2OHkzb0ZRMC93cVd2SlJiWEZVT2F2TkxpR29MaGpVb3FsK3g4bWVWbFFSQkV4SUw4UFdGeHFJUDhhTGV0bThrYW9TV1JYaHNiSElwREVQR1U2S1ViM0pHd3hPQWJZaE5YRW1zRFhLaVJhVjcyRm5BU3QvM0d2dnd6dE9KbnA3MlQ1aXVCd3NiSXNUZFZvbFN6SzdLM2FDOFJJV2FERTVENGtCbDc5dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba2fa62-6575-4bc9-b736-aaab88e06b84", "record_id": "flaws_cloudtrail:0000005:3ba2fa62-6575-4bc9-b736-aaab88e06b84", "row_index": 5, "timestamp": "2019-07-27T05:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba2fa62-6575-4bc9-b736-aaab88e06b84", "eventTime": "2019-07-27T05:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJER29KODBVWWUxN0wyajR0WjhmY0l1Q0FGdWtxSlZjdkczU0VlTGNiY2VsMGc0RUlyMEpxaStWemZscGdLQ2dpWndRTEhjRGpkdTV2aXZ3Uy9WcDJ4WC82dmlYZzREVHhEbDU0NzVtMHo3dUtHbzlIdXpieEFHeStMY3pZY1NxSE9iZy8rRTV5aHhBQjloQXlEdnFjMC93a2lzdlV0blRMWFF1bmlsWFUyUndacVFSMlE0VlBuRENTMXBDeUNiQzJUUXdGbHFBaFdyaURHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba2fa62-6575-4bc9-b736-aaab88e06b84", "record_id": "flaws_cloudtrail:0000006:3ba2fa62-6575-4bc9-b736-aaab88e06b84", "row_index": 6, "timestamp": "2019-07-27T05:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba2fa62-6575-4bc9-b736-aaab88e06b84", "eventTime": "2019-07-27T05:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJER29KODBVWWUxN0wyajR0WjhmY0l1Q0FGdWtxSlZjdkczU0VlTGNiY2VsMGc0RUlyMEpxaStWemZscGdLQ2dpWndRTEhjRGpkdTV2aXZ3Uy9WcDJ4WC82dmlYZzREVHhEbDU0NzVtMHo3dUtHbzlIdXpieEFHeStMY3pZY1NxSE9iZy8rRTV5aHhBQjloQXlEdnFjMC93a2lzdlV0blRMWFF1bmlsWFUyUndacVFSMlE0VlBuRENTMXBDeUNiQzJUUXdGbHFBaFdyaURHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d4fe9f-5c45-4c93-b942-e772692", "record_id": "flaws_cloudtrail:0000007:c1d4fe9f-5c45-4c93-b942-e772692", "row_index": 7, "timestamp": "2019-07-27T05:55:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d4fe9f-5c45-4c93-b942-e772692", "eventTime": "2019-07-27T05:55:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrSzJzOHZqZ0ZEN1V4T20rbENPR0xZenovd2JwTG9Pa0g0RW94ZUJRRmxYa1NYWGQrVFRZalZnSEZURWFVZUJqU2h0RHRqdFk1ZVVZb0ZGTnUzZEw4U0wrWWQrQ3hJNTRaNXM4SkdwcEUvTDZsNGtwcFVYYUVoYlVCQnQ1RThDUExnb1RtQ1Z1eWlVMGUxN2VlZXdrcU9qQkR4cW1WQUNlNDVXUGs3U0s3ek5UaDh4ekpBRjdOMytFMHVFdjQzL2xES0lTckVGMFN1dU5zUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d4fe9f-5c45-4c93-b942-e772692", "record_id": "flaws_cloudtrail:0000008:c1d4fe9f-5c45-4c93-b942-e772692", "row_index": 8, "timestamp": "2019-07-27T05:55:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d4fe9f-5c45-4c93-b942-e772692", "eventTime": "2019-07-27T05:55:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrSzJzOHZqZ0ZEN1V4T20rbENPR0xZenovd2JwTG9Pa0g0RW94ZUJRRmxYa1NYWGQrVFRZalZnSEZURWFVZUJqU2h0RHRqdFk1ZVVZb0ZGTnUzZEw4U0wrWWQrQ3hJNTRaNXM4SkdwcEUvTDZsNGtwcFVYYUVoYlVCQnQ1RThDUExnb1RtQ1Z1eWlVMGUxN2VlZXdrcU9qQkR4cW1WQUNlNDVXUGs3U0s3ek5UaDh4ekpBRjdOMytFMHVFdjQzL2xES0lTckVGMFN1dU5zUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "record_id": "flaws_cloudtrail:0000009:c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "row_index": 9, "timestamp": "2019-07-27T05:55:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "eventTime": "2019-07-27T05:55:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4T3RudVN6VzZIYWxqNzYyV1JaV3FJODBzc0Z5L3F5QkdFMXk4QzRPV3ZCcXpic01lYVZmeExHOVhUVlk3cmFMQ3RLZ1BqTUJ0Qk5QQVAyMkZPZHV2c0FwYmZwY0RTNkNDQ21mdmpCdTRrK211NkYwTnZtU043MGZ0OFZZSC9KalpHNnhoczhuWkVsQitmWnlQRXRUeUpId0VmL3NuQnl6c1hKcE5UNkJhVXFxMlovckhOeWpoelllK3o0ajFycWkvWjZUQTBSQ2lEVm9iZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "record_id": "flaws_cloudtrail:0000010:c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "row_index": 10, "timestamp": "2019-07-27T05:55:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70b1b9d-e16c-4bcf-8147-b4aafbf271a4", "eventTime": "2019-07-27T05:55:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4T3RudVN6VzZIYWxqNzYyV1JaV3FJODBzc0Z5L3F5QkdFMXk4QzRPV3ZCcXpic01lYVZmeExHOVhUVlk3cmFMQ3RLZ1BqTUJ0Qk5QQVAyMkZPZHV2c0FwYmZwY0RTNkNDQ21mdmpCdTRrK211NkYwTnZtU043MGZ0OFZZSC9KalpHNnhoczhuWkVsQitmWnlQRXRUeUpId0VmL3NuQnl6c1hKcE5UNkJhVXFxMlovckhOeWpoelllK3o0ajFycWkvWjZUQTBSQ2lEVm9iZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e49bcf8-5710-482a-8f91-7fd25531c895", "record_id": "flaws_cloudtrail:0000011:4e49bcf8-5710-482a-8f91-7fd25531c895", "row_index": 11, "timestamp": "2019-07-27T05:55:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e49bcf8-5710-482a-8f91-7fd25531c895", "eventTime": "2019-07-27T05:55:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFWC95dnE4b0hRM2lpQ2RNUXhYMlR6L1MzZG4rK01QSTMvSVpWdkh5dVd5eEE0MzNsTWJBYXJaVTJrVVFPNlRxQVFLSVZSNG15bk1pa2svZk1PdFJ5YVM2eWRLajVBWDM5T3E4ZS9VUUNPNEdKNkJKKzNMSjRBWjB2eFlhYkFjMHg5MC91cmk2Q3M2TXJCUVNZdHh0S0VQVUYyZjF2L3hZREJ6Y1BaR3pNZ3FNMWo4QVJ0WEt2cExla29NUEhOTk1rcS9ZK2lhWUpOOXY3UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e49bcf8-5710-482a-8f91-7fd25531c895", "record_id": "flaws_cloudtrail:0000012:4e49bcf8-5710-482a-8f91-7fd25531c895", "row_index": 12, "timestamp": "2019-07-27T05:55:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e49bcf8-5710-482a-8f91-7fd25531c895", "eventTime": "2019-07-27T05:55:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFWC95dnE4b0hRM2lpQ2RNUXhYMlR6L1MzZG4rK01QSTMvSVpWdkh5dVd5eEE0MzNsTWJBYXJaVTJrVVFPNlRxQVFLSVZSNG15bk1pa2svZk1PdFJ5YVM2eWRLajVBWDM5T3E4ZS9VUUNPNEdKNkJKKzNMSjRBWjB2eFlhYkFjMHg5MC91cmk2Q3M2TXJCUVNZdHh0S0VQVUYyZjF2L3hZREJ6Y1BaR3pNZ3FNMWo4QVJ0WEt2cExla29NUEhOTk1rcS9ZK2lhWUpOOXY3UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3adbf658-d971-4009-a628-9e164b6dd086", "record_id": "flaws_cloudtrail:0000013:3adbf658-d971-4009-a628-9e164b6dd086", "row_index": 13, "timestamp": "2019-07-27T05:56:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3adbf658-d971-4009-a628-9e164b6dd086", "eventTime": "2019-07-27T05:56:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjTFVkR0JQUjkwRkJqZWE4d3pJamM2T1hycXVUSWxudFFraEYzbmdJcjdNdXY3VTk0Wm4zSWRVdWpKK21YVkQ2eEtST1krL3JJN3NGbjRUK3VybnpXbDlvRVJSdVExZU4vRHEzcUVidGVyZUJvUjV6N3hSYjFDTmFPaDRMT1B4aHgwdFgwdkFsR0UvWHlZVVJjUU93QkN0cG5NajFNSUZONWF3RTFIdUhqVUhrVzZESm80ajJsQzdJREV0R2RON2VFaU5nbktUNlUrZmpUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3adbf658-d971-4009-a628-9e164b6dd086", "record_id": "flaws_cloudtrail:0000014:3adbf658-d971-4009-a628-9e164b6dd086", "row_index": 14, "timestamp": "2019-07-27T05:56:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3adbf658-d971-4009-a628-9e164b6dd086", "eventTime": "2019-07-27T05:56:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjTFVkR0JQUjkwRkJqZWE4d3pJamM2T1hycXVUSWxudFFraEYzbmdJcjdNdXY3VTk0Wm4zSWRVdWpKK21YVkQ2eEtST1krL3JJN3NGbjRUK3VybnpXbDlvRVJSdVExZU4vRHEzcUVidGVyZUJvUjV6N3hSYjFDTmFPaDRMT1B4aHgwdFgwdkFsR0UvWHlZVVJjUU93QkN0cG5NajFNSUZONWF3RTFIdUhqVUhrVzZESm80ajJsQzdJREV0R2RON2VFaU5nbktUNlUrZmpUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "record_id": "flaws_cloudtrail:0000015:4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "row_index": 15, "timestamp": "2019-07-27T05:56:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "eventTime": "2019-07-27T05:56:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLczAxaUhiblZleUhJakNNaUxSUC9IbTNhSTFkeFBKRlJvVFkzdnYwZ1lOMzdsTzdzaVBqSTNOS0NxYmZMaDNFYm8xZTZXVjhQbHFWMlhEeXVvdXVVNXVZdVJSeno5ZXhtWU5oL2htaWdLc09mMmo5cVpDRHViSFQ3cm5NSHhHY04wUVBhOVkreUhNTStLOG5XcUQvRkZNRWN3M3diaVRPcmFUSEZRTDExMGpmazNQNW9MZ2NjcG5rclNGSjdoQ1FTam04VWZMSGpZdlFIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "record_id": "flaws_cloudtrail:0000016:4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "row_index": 16, "timestamp": "2019-07-27T05:56:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4508b1a0-9efd-4954-9265-1d86a0cc7fa4", "eventTime": "2019-07-27T05:56:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLczAxaUhiblZleUhJakNNaUxSUC9IbTNhSTFkeFBKRlJvVFkzdnYwZ1lOMzdsTzdzaVBqSTNOS0NxYmZMaDNFYm8xZTZXVjhQbHFWMlhEeXVvdXVVNXVZdVJSeno5ZXhtWU5oL2htaWdLc09mMmo5cVpDRHViSFQ3cm5NSHhHY04wUVBhOVkreUhNTStLOG5XcUQvRkZNRWN3M3diaVRPcmFUSEZRTDExMGpmazNQNW9MZ2NjcG5rclNGSjdoQ1FTam04VWZMSGpZdlFIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799c8198-e8a2-4156-91ec-89a0c313932a", "record_id": "flaws_cloudtrail:0000017:799c8198-e8a2-4156-91ec-89a0c313932a", "row_index": 17, "timestamp": "2019-07-27T05:56:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799c8198-e8a2-4156-91ec-89a0c313932a", "eventTime": "2019-07-27T05:56:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4M0ZwZFRCWmtFaUFGRjJuVjlXRG05emdZeDRET1U3dFJCVDBGTmtPZXh4cDRadnZVZk9SMUx1bzRaVzJPdVMwbVdxTlpkRU5XMTQrRU9xOHl5YVdqLzRibjhUTklZOUlCUXZEK2grcWs2MXJGa0hDR2lpYTZxUUM3bHN3R0I1RmV6blJwYzBvZVpYVWlOSWM2R211ekdtQ0QzZG9DMnNKWGQwVmxabUN1czlLejZvNk1LSDkzdmpCRUtMNE1FYzRhYTMyYXRxcTNSMVBMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799c8198-e8a2-4156-91ec-89a0c313932a", "record_id": "flaws_cloudtrail:0000018:799c8198-e8a2-4156-91ec-89a0c313932a", "row_index": 18, "timestamp": "2019-07-27T05:56:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799c8198-e8a2-4156-91ec-89a0c313932a", "eventTime": "2019-07-27T05:56:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4M0ZwZFRCWmtFaUFGRjJuVjlXRG05emdZeDRET1U3dFJCVDBGTmtPZXh4cDRadnZVZk9SMUx1bzRaVzJPdVMwbVdxTlpkRU5XMTQrRU9xOHl5YVdqLzRibjhUTklZOUlCUXZEK2grcWs2MXJGa0hDR2lpYTZxUUM3bHN3R0I1RmV6blJwYzBvZVpYVWlOSWM2R211ekdtQ0QzZG9DMnNKWGQwVmxabUN1czlLejZvNk1LSDkzdmpCRUtMNE1FYzRhYTMyYXRxcTNSMVBMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b239362-ac88-4c47-b288-b7c7af53be64", "record_id": "flaws_cloudtrail:0000019:b239362-ac88-4c47-b288-b7c7af53be64", "row_index": 19, "timestamp": "2019-07-27T05:56:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b239362-ac88-4c47-b288-b7c7af53be64", "eventTime": "2019-07-27T05:56:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxSU1rVEZUaFRteW1ackxDWldnYUxlMk1TanVqQkZ1Z21mTnZRUTdwcjd6TU9ZdCtwU3JqbEJwYThFakR5VGh5ZktzcXNndGtaYytiVktxZHgrbzZXSk5UVi9tUkRPUnB2b2F4YlBKeGFxeWF2T1BDVFcwc3ZYbzBKbFJDWXBwRi96ay96OUl4elVxUGt2VnVKL0t3ME8wMDVhcEE3bnNGaTBwNkdwalR3S3BVT0x2RUJMeUIvR1NmQ0Jtd1lldE1GQ0xja2lmSm1KcDRNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b239362-ac88-4c47-b288-b7c7af53be64", "record_id": "flaws_cloudtrail:0000020:b239362-ac88-4c47-b288-b7c7af53be64", "row_index": 20, "timestamp": "2019-07-27T05:56:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b239362-ac88-4c47-b288-b7c7af53be64", "eventTime": "2019-07-27T05:56:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxSU1rVEZUaFRteW1ackxDWldnYUxlMk1TanVqQkZ1Z21mTnZRUTdwcjd6TU9ZdCtwU3JqbEJwYThFakR5VGh5ZktzcXNndGtaYytiVktxZHgrbzZXSk5UVi9tUkRPUnB2b2F4YlBKeGFxeWF2T1BDVFcwc3ZYbzBKbFJDWXBwRi96ay96OUl4elVxUGt2VnVKL0t3ME8wMDVhcEE3bnNGaTBwNkdwalR3S3BVT0x2RUJMeUIvR1NmQ0Jtd1lldE1GQ0xja2lmSm1KcDRNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b535b518-2d69-4faf-bdba-8d92534c3642", "record_id": "flaws_cloudtrail:0000021:b535b518-2d69-4faf-bdba-8d92534c3642", "row_index": 21, "timestamp": "2019-07-27T05:56:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b535b518-2d69-4faf-bdba-8d92534c3642", "eventTime": "2019-07-27T05:56:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTXpNMERuZVZPejRJK1RPOGJGTlRlUXI0SmltZjFScU9oaDljdGpnRFdnRU9YZW9FeGh0VzZtNWVRQmhhd3hGNHVLNmY4NVhyb2tsNWZ2T1dSZ2V3MGVoYzZDa3EvNFFRTHRZSGEyYzJKR0dXTUI2dFI0QnRWTkZkNmo2aGZaTjgvWmhuRnpidWVuWUwyS1h2SFNqQXc5RHQ4MXZueW9ZL1hsQk1OdGFBUWMxNXZrdDBHdWhQYmVkU1dqRHhzb3JhZzJRbVRWT0lsUTI1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b535b518-2d69-4faf-bdba-8d92534c3642", "record_id": "flaws_cloudtrail:0000022:b535b518-2d69-4faf-bdba-8d92534c3642", "row_index": 22, "timestamp": "2019-07-27T05:56:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b535b518-2d69-4faf-bdba-8d92534c3642", "eventTime": "2019-07-27T05:56:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTXpNMERuZVZPejRJK1RPOGJGTlRlUXI0SmltZjFScU9oaDljdGpnRFdnRU9YZW9FeGh0VzZtNWVRQmhhd3hGNHVLNmY4NVhyb2tsNWZ2T1dSZ2V3MGVoYzZDa3EvNFFRTHRZSGEyYzJKR0dXTUI2dFI0QnRWTkZkNmo2aGZaTjgvWmhuRnpidWVuWUwyS1h2SFNqQXc5RHQ4MXZueW9ZL1hsQk1OdGFBUWMxNXZrdDBHdWhQYmVkU1dqRHhzb3JhZzJRbVRWT0lsUTI1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b382df-5ff6-42e5-acbf-6130983e5b15", "record_id": "flaws_cloudtrail:0000023:05b382df-5ff6-42e5-acbf-6130983e5b15", "row_index": 23, "timestamp": "2019-07-27T05:56:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b382df-5ff6-42e5-acbf-6130983e5b15", "eventTime": "2019-07-27T05:56:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDYlFoSzlvQVdUWlc4N1dxVEJMaVNDYnE5cjJ5eG9LenJkNUxMK1M5Z3JMREMyYVdkUVUzU2QvSW1BNGx0N3NxbjZUOVNENjNBeVpwM3drVWFEYVhvV0dybmxGcDhqT251elpqZFdHVCsxZ2pLTHBsSXZGWFRyWXVBaFJhWEh6TE5nTkdRTWFDSitJM1hOem1OS3ZHNTRQS1ZtSHNKejFxZGZlTC92QWVxbTQ3TE8yV0M4Y2J5ZldXOEFPTUhuVlJ3cG5MTmxhYW9hZmJUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b382df-5ff6-42e5-acbf-6130983e5b15", "record_id": "flaws_cloudtrail:0000024:05b382df-5ff6-42e5-acbf-6130983e5b15", "row_index": 24, "timestamp": "2019-07-27T05:56:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b382df-5ff6-42e5-acbf-6130983e5b15", "eventTime": "2019-07-27T05:56:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDYlFoSzlvQVdUWlc4N1dxVEJMaVNDYnE5cjJ5eG9LenJkNUxMK1M5Z3JMREMyYVdkUVUzU2QvSW1BNGx0N3NxbjZUOVNENjNBeVpwM3drVWFEYVhvV0dybmxGcDhqT251elpqZFdHVCsxZ2pLTHBsSXZGWFRyWXVBaFJhWEh6TE5nTkdRTWFDSitJM1hOem1OS3ZHNTRQS1ZtSHNKejFxZGZlTC92QWVxbTQ3TE8yV0M4Y2J5ZldXOEFPTUhuVlJ3cG5MTmxhYW9hZmJUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f53366c1-c285-4977-ae31-e51f1d6d19ec", "record_id": "flaws_cloudtrail:0000025:f53366c1-c285-4977-ae31-e51f1d6d19ec", "row_index": 25, "timestamp": "2019-07-27T05:56:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f53366c1-c285-4977-ae31-e51f1d6d19ec", "eventTime": "2019-07-27T05:56:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqMmZ2NjVtRzZwQjdQdzNNODV6Z3VkbTRQK1BnRktQaEh2K0FHc1RxSjJtUExRZS9OQ0NFM1hteWczWlJGR2k1MDArV2U4SkE0bmRRK0RJYUdneVhhcnI2V2VTRFdXUG84aDJiYkxqV0hpRXJRcHN3ZS9jdmdrZVI2SnVvY0M4L2ZUUi9tZ0JhOWNhOFYrUXZady9DNDR1cmZmbmhkTW1TYXE2Q1phQWtsU1FHUTR6czh3NU9EQkM2UzM0VkhkakZIOFZmWHdOdmV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f53366c1-c285-4977-ae31-e51f1d6d19ec", "record_id": "flaws_cloudtrail:0000026:f53366c1-c285-4977-ae31-e51f1d6d19ec", "row_index": 26, "timestamp": "2019-07-27T05:56:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f53366c1-c285-4977-ae31-e51f1d6d19ec", "eventTime": "2019-07-27T05:56:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqMmZ2NjVtRzZwQjdQdzNNODV6Z3VkbTRQK1BnRktQaEh2K0FHc1RxSjJtUExRZS9OQ0NFM1hteWczWlJGR2k1MDArV2U4SkE0bmRRK0RJYUdneVhhcnI2V2VTRFdXUG84aDJiYkxqV0hpRXJRcHN3ZS9jdmdrZVI2SnVvY0M4L2ZUUi9tZ0JhOWNhOFYrUXZady9DNDR1cmZmbmhkTW1TYXE2Q1phQWtsU1FHUTR6czh3NU9EQkM2UzM0VkhkakZIOFZmWHdOdmV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c1bef3-b725-4381-8902-3e36190aeb3", "record_id": "flaws_cloudtrail:0000027:69c1bef3-b725-4381-8902-3e36190aeb3", "row_index": 27, "timestamp": "2019-07-27T05:56:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c1bef3-b725-4381-8902-3e36190aeb3", "eventTime": "2019-07-27T05:56:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4S2RVSDRnejlFQVBGRklxK1Bld3RqTTdyR3kzZ3JMcklxL3dxQ1dWb2VZcDdpemdQRW9MemZXMDJhZ2tQWXh3cVhCcDZIRjRzaTRERGQrQjdzY0xsRE1odDRMQXR4REJrZW80akRrK1VHV2E0c0J2QzdoQUsvYVdpZC8xWlRhVUtxRDNhZzUrWEk4MlgzMFg2R1Z6eDlSNUxxVTVLQVFYSFljT0l1ZzVQWkpEd3ZmMHNlVmRQcWl0R0p1WUhsVTU4WDNkOTZhWk9Lbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c1bef3-b725-4381-8902-3e36190aeb3", "record_id": "flaws_cloudtrail:0000028:69c1bef3-b725-4381-8902-3e36190aeb3", "row_index": 28, "timestamp": "2019-07-27T05:56:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c1bef3-b725-4381-8902-3e36190aeb3", "eventTime": "2019-07-27T05:56:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4S2RVSDRnejlFQVBGRklxK1Bld3RqTTdyR3kzZ3JMcklxL3dxQ1dWb2VZcDdpemdQRW9MemZXMDJhZ2tQWXh3cVhCcDZIRjRzaTRERGQrQjdzY0xsRE1odDRMQXR4REJrZW80akRrK1VHV2E0c0J2QzdoQUsvYVdpZC8xWlRhVUtxRDNhZzUrWEk4MlgzMFg2R1Z6eDlSNUxxVTVLQVFYSFljT0l1ZzVQWkpEd3ZmMHNlVmRQcWl0R0p1WUhsVTU4WDNkOTZhWk9Lbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c519558a-e76d-4b50-b528-2891fc0be26b", "record_id": "flaws_cloudtrail:0000029:c519558a-e76d-4b50-b528-2891fc0be26b", "row_index": 29, "timestamp": "2019-07-27T05:56:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c519558a-e76d-4b50-b528-2891fc0be26b", "eventTime": "2019-07-27T05:56:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TDZOWnBtZTU1STFQUVFCQ0JNRHhjcEI2UkNCdWdiNzdSeTlaR2pZdXJzZ0g4VStkdHRmck5nZnF6VXdsRHJpLzhNeEt1Z2crOHhhckxFUDAzR1B4YVVFSzhGUHVpMC91VHV3eWdSS2tITG8wb2h4dC9HOGtaRUIxM2lSakdGWWFUYnVMT0Y1Z3k2TXpNNThZQWFFTCtaWStnd2x2N3JoZTdSalN1ZVhqay9CdGRCczdWc0gyZWtWMkVaTGZaWXlGREFVeHlwMUJnMDA4bGhLR0M0Ty9JOG5EWXlHZkRnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c519558a-e76d-4b50-b528-2891fc0be26b", "record_id": "flaws_cloudtrail:0000030:c519558a-e76d-4b50-b528-2891fc0be26b", "row_index": 30, "timestamp": "2019-07-27T05:56:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c519558a-e76d-4b50-b528-2891fc0be26b", "eventTime": "2019-07-27T05:56:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TDZOWnBtZTU1STFQUVFCQ0JNRHhjcEI2UkNCdWdiNzdSeTlaR2pZdXJzZ0g4VStkdHRmck5nZnF6VXdsRHJpLzhNeEt1Z2crOHhhckxFUDAzR1B4YVVFSzhGUHVpMC91VHV3eWdSS2tITG8wb2h4dC9HOGtaRUIxM2lSakdGWWFUYnVMT0Y1Z3k2TXpNNThZQWFFTCtaWStnd2x2N3JoZTdSalN1ZVhqay9CdGRCczdWc0gyZWtWMkVaTGZaWXlGREFVeHlwMUJnMDA4bGhLR0M0Ty9JOG5EWXlHZkRnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "252248f-6eb7-4c9a-a570-249610a1341d1", "record_id": "flaws_cloudtrail:0000031:252248f-6eb7-4c9a-a570-249610a1341d1", "row_index": 31, "timestamp": "2019-07-27T05:56:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "252248f-6eb7-4c9a-a570-249610a1341d1", "eventTime": "2019-07-27T05:56:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPc1RYcXBNaHRPNlhVOFRwdFRwK1cyVVp0R0g4VHlNYWQzc2pFVHRMZkJ3SDhJRzA0Q0VLeFg1ekpWbHptTU1RZCt6elFYcjFKanMvWkFNa3IxTUV4MDZKOUdxUTRDcXJCVWFoMWl3YWc0TjNSRlBWQkw2ZERJbUwzTmJYa0tVL0huVHR3VVBMczlMY0syK3RlZ0c0ano4UkJpS2NkbG9pcm5UcklCYUNWc1RMWUhUNERCVnFLVE5UK3N3enZJRDdXbTJia2t1S1h5M3VqdWdROTNXWlRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "252248f-6eb7-4c9a-a570-249610a1341d1", "record_id": "flaws_cloudtrail:0000032:252248f-6eb7-4c9a-a570-249610a1341d1", "row_index": 32, "timestamp": "2019-07-27T05:56:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "252248f-6eb7-4c9a-a570-249610a1341d1", "eventTime": "2019-07-27T05:56:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPc1RYcXBNaHRPNlhVOFRwdFRwK1cyVVp0R0g4VHlNYWQzc2pFVHRMZkJ3SDhJRzA0Q0VLeFg1ekpWbHptTU1RZCt6elFYcjFKanMvWkFNa3IxTUV4MDZKOUdxUTRDcXJCVWFoMWl3YWc0TjNSRlBWQkw2ZERJbUwzTmJYa0tVL0huVHR3VVBMczlMY0syK3RlZ0c0ano4UkJpS2NkbG9pcm5UcklCYUNWc1RMWUhUNERCVnFLVE5UK3N3enZJRDdXbTJia2t1S1h5M3VqdWdROTNXWlRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b184f873-55be-4f57-a905-08ba8f78b71d", "record_id": "flaws_cloudtrail:0000033:b184f873-55be-4f57-a905-08ba8f78b71d", "row_index": 33, "timestamp": "2019-07-27T05:56:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b184f873-55be-4f57-a905-08ba8f78b71d", "eventTime": "2019-07-27T05:56:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQYjhCS1hnUllKSW5lTnBHNW1NN29SNDZkRy8wUWZKUFE4NW9LblNiVll3Q2ZzZDVGNURLVE9TZ1FWSFAxdE1ObHJkSEl0Qmk3akVzZzVzZEJCR2laRURaNzkvWkJTN0ZmY3F0aFBjQktwS2J3REMvUko0K0I0QUZFT2VoVGsrQWxBQ1JSMnJscUZyTjQ5UUplVnFRT0xVNy83UjZJTTlueU9aUVd0NHJSWHloSVdHZVVEVlI3K1kzNVRCdjc4UUtvd2sxUkRBWkRXWXJFTlpKMHN0OVhpU25QRi8yK0lVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b184f873-55be-4f57-a905-08ba8f78b71d", "record_id": "flaws_cloudtrail:0000034:b184f873-55be-4f57-a905-08ba8f78b71d", "row_index": 34, "timestamp": "2019-07-27T05:56:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b184f873-55be-4f57-a905-08ba8f78b71d", "eventTime": "2019-07-27T05:56:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQYjhCS1hnUllKSW5lTnBHNW1NN29SNDZkRy8wUWZKUFE4NW9LblNiVll3Q2ZzZDVGNURLVE9TZ1FWSFAxdE1ObHJkSEl0Qmk3akVzZzVzZEJCR2laRURaNzkvWkJTN0ZmY3F0aFBjQktwS2J3REMvUko0K0I0QUZFT2VoVGsrQWxBQ1JSMnJscUZyTjQ5UUplVnFRT0xVNy83UjZJTTlueU9aUVd0NHJSWHloSVdHZVVEVlI3K1kzNVRCdjc4UUtvd2sxUkRBWkRXWXJFTlpKMHN0OVhpU25QRi8yK0lVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2796db67-2dea-4e24-89af-a94cd2a1f4e7", "record_id": "flaws_cloudtrail:0000035:2796db67-2dea-4e24-89af-a94cd2a1f4e7", "row_index": 35, "timestamp": "2019-07-27T05:56:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2796db67-2dea-4e24-89af-a94cd2a1f4e7", "eventTime": "2019-07-27T05:56:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6WlZvR0lkZ1ZUb3FlUFJwdlFxdkZ6aFBWK3VhY3g5ZDl6Y01qTlZKWStHWlB5RkhEVEFWVHVwMGRYQ1NEQmpEUHRvZ1dhM0FzNXRMZmRvQTM4TXphZmpUUG5DcXlneW9Ec011N2dvSkdQSCt0WUNWVW4zc2pQb1dzY0FHaHRSMUdhZjhXY2twUWhockR6MGJXUTFZL1JOemx4dFhXaGFET29hL1pPbHBWdHJRTGhaTFFUVVJVU0FNWUVVOHVBcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2796db67-2dea-4e24-89af-a94cd2a1f4e7", "record_id": "flaws_cloudtrail:0000036:2796db67-2dea-4e24-89af-a94cd2a1f4e7", "row_index": 36, "timestamp": "2019-07-27T05:56:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2796db67-2dea-4e24-89af-a94cd2a1f4e7", "eventTime": "2019-07-27T05:56:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6WlZvR0lkZ1ZUb3FlUFJwdlFxdkZ6aFBWK3VhY3g5ZDl6Y01qTlZKWStHWlB5RkhEVEFWVHVwMGRYQ1NEQmpEUHRvZ1dhM0FzNXRMZmRvQTM4TXphZmpUUG5DcXlneW9Ec011N2dvSkdQSCt0WUNWVW4zc2pQb1dzY0FHaHRSMUdhZjhXY2twUWhockR6MGJXUTFZL1JOemx4dFhXaGFET29hL1pPbHBWdHJRTGhaTFFUVVJVU0FNWUVVOHVBcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "record_id": "flaws_cloudtrail:0000037:f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "row_index": 37, "timestamp": "2019-07-27T05:56:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "eventTime": "2019-07-27T05:56:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeXVWSWdzd0xTa2tYMURtTUp6UkpBUmE2R1lsVXI0eW41TXBYeHF5Nk9kU2NsT0czc2p4K2JvSkwvY2lCbWVFckI1MWNPQUJEbWpwZHlvRVRyZ0xqNlE5UVBHMUpHNFVTWVJtTmRvUllGaUg3NWtBQXFaN2FudmxzZkQwMG9FR2NzSmNrVHJwdmNOWW92djVkbkNQb2tRZFZVRUhGN3BLN1FXLzlBWnRNZWZmZW1GMzJ6MnRUY1FmZDh3NmwxSkF6NGlUaHpqSWR5UTJ0WllKa0dpeExoTFRBSk0yRXJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "record_id": "flaws_cloudtrail:0000038:f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "row_index": 38, "timestamp": "2019-07-27T05:56:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a48a56-7d3f-45a7-af2b-53fc35a0de74", "eventTime": "2019-07-27T05:56:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeXVWSWdzd0xTa2tYMURtTUp6UkpBUmE2R1lsVXI0eW41TXBYeHF5Nk9kU2NsT0czc2p4K2JvSkwvY2lCbWVFckI1MWNPQUJEbWpwZHlvRVRyZ0xqNlE5UVBHMUpHNFVTWVJtTmRvUllGaUg3NWtBQXFaN2FudmxzZkQwMG9FR2NzSmNrVHJwdmNOWW92djVkbkNQb2tRZFZVRUhGN3BLN1FXLzlBWnRNZWZmZW1GMzJ6MnRUY1FmZDh3NmwxSkF6NGlUaHpqSWR5UTJ0WllKa0dpeExoTFRBSk0yRXJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779e18b4-9728-4739-9b35-9cf7aa38220", "record_id": "flaws_cloudtrail:0000039:779e18b4-9728-4739-9b35-9cf7aa38220", "row_index": 39, "timestamp": "2019-07-27T05:56:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779e18b4-9728-4739-9b35-9cf7aa38220", "eventTime": "2019-07-27T05:56:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoUXk0bUNFYzdqbWEzU1BWMStMcGFNRks0ditlbUpLV0tsQnVIVDZnYlJPTWVuVEMvR3N1NlcyY0VYV3Z1MzNOOFNnNzlROUExUk1FZkd3OUg0YjhWNjJvWEhRSGc1VzhHc2F4YWxnS2xqRXdLTlFIQ3pXWHkyUkVjbC9JZzJ1cEQ1bFJxVGNLY2l2MjI2Q1UvN25ySENJUHk2cm5UTTQ5YXVwVlUvRHMvTTJqYmkxVUtNdk41T0p5U2Y0UlBLU3UxYldqZ0JVMXNneTJINGNwN3EyeTNBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779e18b4-9728-4739-9b35-9cf7aa38220", "record_id": "flaws_cloudtrail:0000040:779e18b4-9728-4739-9b35-9cf7aa38220", "row_index": 40, "timestamp": "2019-07-27T05:56:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779e18b4-9728-4739-9b35-9cf7aa38220", "eventTime": "2019-07-27T05:56:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoUXk0bUNFYzdqbWEzU1BWMStMcGFNRks0ditlbUpLV0tsQnVIVDZnYlJPTWVuVEMvR3N1NlcyY0VYV3Z1MzNOOFNnNzlROUExUk1FZkd3OUg0YjhWNjJvWEhRSGc1VzhHc2F4YWxnS2xqRXdLTlFIQ3pXWHkyUkVjbC9JZzJ1cEQ1bFJxVGNLY2l2MjI2Q1UvN25ySENJUHk2cm5UTTQ5YXVwVlUvRHMvTTJqYmkxVUtNdk41T0p5U2Y0UlBLU3UxYldqZ0JVMXNneTJINGNwN3EyeTNBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a55b40b-6110-4f20-af30-0688bda22bda", "record_id": "flaws_cloudtrail:0000041:6a55b40b-6110-4f20-af30-0688bda22bda", "row_index": 41, "timestamp": "2019-07-27T05:56:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a55b40b-6110-4f20-af30-0688bda22bda", "eventTime": "2019-07-27T05:56:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsM3ZINkkydnRHOWVGcklaTkZoSUw3Q1FmaDl6VlJMOE8zaWl4bnpzanBhZHhHd1VvZmpLckNBNVZlWG1veDEwekVEbTcwSHZYRCs1ZHNQYXM0OTZrZC9MLzVvdWpSWFpNVXdpeFY5M05jYXZNNUJhUjVBUGFqQkQzV0U3Rm1KcUZkbUg1c2xxbU9uUzBPZHRQM3I5TnQzL2tuR0YxRTJWV0FkczVUNUVmeUhYQjdUV3JncDhHYjN4eFMrR1hiQ0puR1F2L1RsdTF1UnhwZUpVUXZTbHJXdW5rMjE4UTNNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a55b40b-6110-4f20-af30-0688bda22bda", "record_id": "flaws_cloudtrail:0000042:6a55b40b-6110-4f20-af30-0688bda22bda", "row_index": 42, "timestamp": "2019-07-27T05:56:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a55b40b-6110-4f20-af30-0688bda22bda", "eventTime": "2019-07-27T05:56:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsM3ZINkkydnRHOWVGcklaTkZoSUw3Q1FmaDl6VlJMOE8zaWl4bnpzanBhZHhHd1VvZmpLckNBNVZlWG1veDEwekVEbTcwSHZYRCs1ZHNQYXM0OTZrZC9MLzVvdWpSWFpNVXdpeFY5M05jYXZNNUJhUjVBUGFqQkQzV0U3Rm1KcUZkbUg1c2xxbU9uUzBPZHRQM3I5TnQzL2tuR0YxRTJWV0FkczVUNUVmeUhYQjdUV3JncDhHYjN4eFMrR1hiQ0puR1F2L1RsdTF1UnhwZUpVUXZTbHJXdW5rMjE4UTNNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "489317eef-2c00-4db1-82cf-e3ef2a616a2a", "record_id": "flaws_cloudtrail:0000043:489317eef-2c00-4db1-82cf-e3ef2a616a2a", "row_index": 43, "timestamp": "2019-07-27T05:56:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "489317eef-2c00-4db1-82cf-e3ef2a616a2a", "eventTime": "2019-07-27T05:56:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJTHFNYmhqeG5IVlJHODB1Y0w2SjdtYThOb3NPcnJtTDVYQWw3SFkrWXowcktQTmhlQ1pMalJpMGNJMEV6TkNIVUFpL1Vwc1B4T2Y3VE9NVnlqdXZZcmwvdTRTbHNWOVUwSGlGMUllRFVUN3pPcDZnNFc3bmRNNHhSY3JZZlAyTEx5NFN5RHB3S3hSWmRDdHpwRmRSOVNwUEI4NTFDWGg0dHFOWmNWMnBKNnpZckkzNnllK1d0ejk4bWhPZ0VKL3pRWWFtSTNBNTRHZlgvZXY5MTd3Wjh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "489317eef-2c00-4db1-82cf-e3ef2a616a2a", "record_id": "flaws_cloudtrail:0000044:489317eef-2c00-4db1-82cf-e3ef2a616a2a", "row_index": 44, "timestamp": "2019-07-27T05:56:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "489317eef-2c00-4db1-82cf-e3ef2a616a2a", "eventTime": "2019-07-27T05:56:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJTHFNYmhqeG5IVlJHODB1Y0w2SjdtYThOb3NPcnJtTDVYQWw3SFkrWXowcktQTmhlQ1pMalJpMGNJMEV6TkNIVUFpL1Vwc1B4T2Y3VE9NVnlqdXZZcmwvdTRTbHNWOVUwSGlGMUllRFVUN3pPcDZnNFc3bmRNNHhSY3JZZlAyTEx5NFN5RHB3S3hSWmRDdHpwRmRSOVNwUEI4NTFDWGg0dHFOWmNWMnBKNnpZckkzNnllK1d0ejk4bWhPZ0VKL3pRWWFtSTNBNTRHZlgvZXY5MTd3Wjh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "record_id": "flaws_cloudtrail:0000045:e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "row_index": 45, "timestamp": "2019-07-27T05:56:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "eventTime": "2019-07-27T05:56:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d1BtRDQrUlovYUl2REdnT2krWVpaS01CKzlSZjBmZm9OZUVvMGEyTnZ0VXdENTNZbFlGNnFRaDFpZldZZEVSQmlVQTBRKzlrZDVOUUcvWDdURFJVMlFBaElWZmRrN3Y1TWxybTFHcEJURTEvVlFVRWV1OW5CaTVuSEpQeW1PaGFvZjR5dmxvdjZsbWthc0JwTERXcE9tRWNKcVdFMEVFanNBbUhCWnUwcHlZUmN1THlMNmxtTDZuYzRnQjAvNHhOMXFwTklHR09aQnNPSGFjQVlXTDRNVHBWMVoyelhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "record_id": "flaws_cloudtrail:0000046:e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "row_index": 46, "timestamp": "2019-07-27T05:56:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5efe135-bf1f-4a0c-a103-a5a9d2be21f1", "eventTime": "2019-07-27T05:56:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d1BtRDQrUlovYUl2REdnT2krWVpaS01CKzlSZjBmZm9OZUVvMGEyTnZ0VXdENTNZbFlGNnFRaDFpZldZZEVSQmlVQTBRKzlrZDVOUUcvWDdURFJVMlFBaElWZmRrN3Y1TWxybTFHcEJURTEvVlFVRWV1OW5CaTVuSEpQeW1PaGFvZjR5dmxvdjZsbWthc0JwTERXcE9tRWNKcVdFMEVFanNBbUhCWnUwcHlZUmN1THlMNmxtTDZuYzRnQjAvNHhOMXFwTklHR09aQnNPSGFjQVlXTDRNVHBWMVoyelhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba6e234a-88f0-4681-9b67-6d233371b9b7", "record_id": "flaws_cloudtrail:0000047:ba6e234a-88f0-4681-9b67-6d233371b9b7", "row_index": 47, "timestamp": "2019-07-27T05:56:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba6e234a-88f0-4681-9b67-6d233371b9b7", "eventTime": "2019-07-27T05:56:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqQTlCdTIwQnpZZnp1bFkzOW5ucmkzSGdwTGVpRFVOenlvVFE0Z3M4NkFQRFE0TTdWbVJEcy9abnZVNWJVdWU1cDA3LzdjOUZjcktQdnJkNXd5UUpVNW1OWTVGVndubFVIaDBjeFJybGxhY0dTaXFGRmNCcjR0VXFIaHhsOGU1ZHFhNmh3VmNmMlp0RDhxRVpYRldEdDZyWnBPOU5EdkpYVEx3ZGlncGJTT0R5SXdQdFo4eWVxdUFpbjhFalRoVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba6e234a-88f0-4681-9b67-6d233371b9b7", "record_id": "flaws_cloudtrail:0000048:ba6e234a-88f0-4681-9b67-6d233371b9b7", "row_index": 48, "timestamp": "2019-07-27T05:56:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba6e234a-88f0-4681-9b67-6d233371b9b7", "eventTime": "2019-07-27T05:56:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqQTlCdTIwQnpZZnp1bFkzOW5ucmkzSGdwTGVpRFVOenlvVFE0Z3M4NkFQRFE0TTdWbVJEcy9abnZVNWJVdWU1cDA3LzdjOUZjcktQdnJkNXd5UUpVNW1OWTVGVndubFVIaDBjeFJybGxhY0dTaXFGRmNCcjR0VXFIaHhsOGU1ZHFhNmh3VmNmMlp0RDhxRVpYRldEdDZyWnBPOU5EdkpYVEx3ZGlncGJTT0R5SXdQdFo4eWVxdUFpbjhFalRoVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "record_id": "flaws_cloudtrail:0000049:4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "row_index": 49, "timestamp": "2019-07-27T05:57:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "eventTime": "2019-07-27T05:57:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "record_id": "flaws_cloudtrail:0000050:4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "row_index": 50, "timestamp": "2019-07-27T05:57:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce2db14-173b-4d72-a01c-7a43fbc4e59c", "eventTime": "2019-07-27T05:57:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "record_id": "flaws_cloudtrail:0000051:f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "row_index": 51, "timestamp": "2019-07-27T06:02:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "eventTime": "2019-07-27T06:02:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "record_id": "flaws_cloudtrail:0000052:f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "row_index": 52, "timestamp": "2019-07-27T06:02:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f032489d-4cf4-454e-a3cd-4c4216e0ffdf", "eventTime": "2019-07-27T06:02:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "record_id": "flaws_cloudtrail:0000053:9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "row_index": 53, "timestamp": "2019-07-27T06:03:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "eventTime": "2019-07-27T06:03:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "record_id": "flaws_cloudtrail:0000054:9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "row_index": 54, "timestamp": "2019-07-27T06:03:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eae99d4-59be-4d05-bb21-3ef9b5d378ec", "eventTime": "2019-07-27T06:03:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e0c495d-e892-4984-9dc4-88b4e9f2d847", "record_id": "flaws_cloudtrail:0000055:2e0c495d-e892-4984-9dc4-88b4e9f2d847", "row_index": 55, "timestamp": "2019-07-27T06:04:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e0c495d-e892-4984-9dc4-88b4e9f2d847", "eventTime": "2019-07-27T06:04:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e0c495d-e892-4984-9dc4-88b4e9f2d847", "record_id": "flaws_cloudtrail:0000056:2e0c495d-e892-4984-9dc4-88b4e9f2d847", "row_index": 56, "timestamp": "2019-07-27T06:04:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e0c495d-e892-4984-9dc4-88b4e9f2d847", "eventTime": "2019-07-27T06:04:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22740ef-5657-4f21-95da-804defc63cf2", "record_id": "flaws_cloudtrail:0000057:22740ef-5657-4f21-95da-804defc63cf2", "row_index": 57, "timestamp": "2019-07-27T06:05:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22740ef-5657-4f21-95da-804defc63cf2", "eventTime": "2019-07-27T06:05:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22740ef-5657-4f21-95da-804defc63cf2", "record_id": "flaws_cloudtrail:0000058:22740ef-5657-4f21-95da-804defc63cf2", "row_index": 58, "timestamp": "2019-07-27T06:05:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22740ef-5657-4f21-95da-804defc63cf2", "eventTime": "2019-07-27T06:05:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "record_id": "flaws_cloudtrail:0000059:a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "row_index": 59, "timestamp": "2019-07-27T06:05:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "eventTime": "2019-07-27T06:05:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxZEFMWG90cllUOThTMFpIMUE5YkhQN21pc1RmMmV4NWFKWGdGQk9lOVZDcURPUmVXa2wrSS9VUHMwWkoxLzE2Z3Z6U0lDNEx4NkVuTm5uWGZ5L0dIdTFWa29DbmZoYzZaRmJlMjl4WFhQVXZlUUVOUUQ1cHNTeGZVdVE2VU5CS0FnYkZyNDlFcVVoRTZJandDMHdGcXhTQTRJNVFmb0F4dXdSeDZxYjhrU3hKNHRxdjM4cDdaTWc3VlJ1S20yelhmWDlFY2JUbm8vZG8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "record_id": "flaws_cloudtrail:0000060:a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "row_index": 60, "timestamp": "2019-07-27T06:05:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c57cec-e222-4fea-a9af-93f95ef8c5fc", "eventTime": "2019-07-27T06:05:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxZEFMWG90cllUOThTMFpIMUE5YkhQN21pc1RmMmV4NWFKWGdGQk9lOVZDcURPUmVXa2wrSS9VUHMwWkoxLzE2Z3Z6U0lDNEx4NkVuTm5uWGZ5L0dIdTFWa29DbmZoYzZaRmJlMjl4WFhQVXZlUUVOUUQ1cHNTeGZVdVE2VU5CS0FnYkZyNDlFcVVoRTZJandDMHdGcXhTQTRJNVFmb0F4dXdSeDZxYjhrU3hKNHRxdjM4cDdaTWc3VlJ1S20yelhmWDlFY2JUbm8vZG8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "record_id": "flaws_cloudtrail:0000061:d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "row_index": 61, "timestamp": "2019-07-27T06:05:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "eventTime": "2019-07-27T06:05:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHUC9ZbU43alZVUm5CcWZiUHpTNXBqV1J6MFFBcGEyZmR4OHY3c2NjT2hjK3lsR3FxNks3RzFPVHZ2RGdKcXNxdFNSaE9adENIYnkwbTl1eUhIUjdDUFFIcW5MVHAwZVREUVRkZ0hhbkhWVFBsbis3eUNac3FFeUwzd1BLQWRJUUFJUVl3YmNXUStZaDlOaFkzRVVYTTJnNVpJMENKUUhHRzR3TjVzaHF4dWUyNHNUZzRjT3Q4TTFIZzlITVZZemhmOXBJZ1NMdVZ3VDkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "record_id": "flaws_cloudtrail:0000062:d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "row_index": 62, "timestamp": "2019-07-27T06:05:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86ea61a-5e56-48c3-b9ef-6d4ee34312b5", "eventTime": "2019-07-27T06:05:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHUC9ZbU43alZVUm5CcWZiUHpTNXBqV1J6MFFBcGEyZmR4OHY3c2NjT2hjK3lsR3FxNks3RzFPVHZ2RGdKcXNxdFNSaE9adENIYnkwbTl1eUhIUjdDUFFIcW5MVHAwZVREUVRkZ0hhbkhWVFBsbis3eUNac3FFeUwzd1BLQWRJUUFJUVl3YmNXUStZaDlOaFkzRVVYTTJnNVpJMENKUUhHRzR3TjVzaHF4dWUyNHNUZzRjT3Q4TTFIZzlITVZZemhmOXBJZ1NMdVZ3VDkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "270d492a-e8ba-4167-8ae9-205c55a6ae43", "record_id": "flaws_cloudtrail:0000063:270d492a-e8ba-4167-8ae9-205c55a6ae43", "row_index": 63, "timestamp": "2019-07-27T06:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "270d492a-e8ba-4167-8ae9-205c55a6ae43", "eventTime": "2019-07-27T06:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyU1VqQ2gvSklTbzBzbDdpa2ZGc0Vlak1GMktTNW9JRnlHQmM5UzM4ZlNkc25ITlJnSTlSc3NTNEx2TWlneDhaRGVIcXh1UzJJOEtnMWRsSFFxZzRqNUUzam5Jb3Iwc09wL2V1ZHVCTUg0Z1lmRnMyQU02N0pXdk5HTGVZRk1kc0pZVHRaczVyekwzVndnR0FCblVXVjNDTzhFQ3RmUGhZY2gvQWR1TzFvZUhsM0FFMzgxeTZBVmdKbmNrcFBrZy9PdHJqUld4S3doZkEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "270d492a-e8ba-4167-8ae9-205c55a6ae43", "record_id": "flaws_cloudtrail:0000064:270d492a-e8ba-4167-8ae9-205c55a6ae43", "row_index": 64, "timestamp": "2019-07-27T06:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "270d492a-e8ba-4167-8ae9-205c55a6ae43", "eventTime": "2019-07-27T06:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyU1VqQ2gvSklTbzBzbDdpa2ZGc0Vlak1GMktTNW9JRnlHQmM5UzM4ZlNkc25ITlJnSTlSc3NTNEx2TWlneDhaRGVIcXh1UzJJOEtnMWRsSFFxZzRqNUUzam5Jb3Iwc09wL2V1ZHVCTUg0Z1lmRnMyQU02N0pXdk5HTGVZRk1kc0pZVHRaczVyekwzVndnR0FCblVXVjNDTzhFQ3RmUGhZY2gvQWR1TzFvZUhsM0FFMzgxeTZBVmdKbmNrcFBrZy9PdHJqUld4S3doZkEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "record_id": "flaws_cloudtrail:0000065:89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "row_index": 65, "timestamp": "2019-07-27T06:05:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "eventTime": "2019-07-27T06:05:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxOWM3YkJZaEd5Wm1vQjV1eXhQR0ZsZytKZmNMdDc0SzlBV0RMbDdDd2FoWi83UTVPMGVVNDRFMHgxbTRqYVpqZWNPNVdBbHFhNThRNmxaT0Y5WVhDNWZXbTRXUmZuTTZKdCt0NU5ZdWN3ZXVyMlRWN1VSdTRpc05nWkp5UnYvbThxTmREdFFBRXd3a1hRUGdSbVdIb2U2S2FiQ3llN2xHVCtVayszWHkwWklTQXV3d3AvZnpYY2FwRE1KS2J5UndLelB6eEp2VURKZisiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "record_id": "flaws_cloudtrail:0000066:89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "row_index": 66, "timestamp": "2019-07-27T06:05:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89f1d8e8-3209-45e5-8ad8-681a251f0ae6", "eventTime": "2019-07-27T06:05:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxOWM3YkJZaEd5Wm1vQjV1eXhQR0ZsZytKZmNMdDc0SzlBV0RMbDdDd2FoWi83UTVPMGVVNDRFMHgxbTRqYVpqZWNPNVdBbHFhNThRNmxaT0Y5WVhDNWZXbTRXUmZuTTZKdCt0NU5ZdWN3ZXVyMlRWN1VSdTRpc05nWkp5UnYvbThxTmREdFFBRXd3a1hRUGdSbVdIb2U2S2FiQ3llN2xHVCtVayszWHkwWklTQXV3d3AvZnpYY2FwRE1KS2J5UndLelB6eEp2VURKZisiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42a6796a-325a-4718-90df-8f66d1608061", "record_id": "flaws_cloudtrail:0000067:42a6796a-325a-4718-90df-8f66d1608061", "row_index": 67, "timestamp": "2019-07-27T06:05:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42a6796a-325a-4718-90df-8f66d1608061", "eventTime": "2019-07-27T06:05:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3VExVcUxQV1B1eHo1N0NYNHQ0YUVtMTFlVVdzdW1KMGhIOW9zQ3p2NkQxYWlIWnEyVmRGcU9POWE2OU9mMjN5NmpGY1ZocndCaW5WV3ZUY09pN0RaQ3dvWTc0MExSK3JwNzJTOXA5VnZxcDBGY0dmMTk4YVRHdHVkdHhDNkhzdy9uVk53K2N3M2JVYklmblhWWk5zQktiMGZ1NHBEZDdtUThwU3ROVU9ianlqbWlkWnFPT1VpanRPTVM4QzMvNTBjU0FkMFdMeWdpemwiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42a6796a-325a-4718-90df-8f66d1608061", "record_id": "flaws_cloudtrail:0000068:42a6796a-325a-4718-90df-8f66d1608061", "row_index": 68, "timestamp": "2019-07-27T06:05:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42a6796a-325a-4718-90df-8f66d1608061", "eventTime": "2019-07-27T06:05:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3VExVcUxQV1B1eHo1N0NYNHQ0YUVtMTFlVVdzdW1KMGhIOW9zQ3p2NkQxYWlIWnEyVmRGcU9POWE2OU9mMjN5NmpGY1ZocndCaW5WV3ZUY09pN0RaQ3dvWTc0MExSK3JwNzJTOXA5VnZxcDBGY0dmMTk4YVRHdHVkdHhDNkhzdy9uVk53K2N3M2JVYklmblhWWk5zQktiMGZ1NHBEZDdtUThwU3ROVU9ianlqbWlkWnFPT1VpanRPTVM4QzMvNTBjU0FkMFdMeWdpemwiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "858408-ccc9-4eae-9f19-de9b095dec6c", "record_id": "flaws_cloudtrail:0000069:858408-ccc9-4eae-9f19-de9b095dec6c", "row_index": 69, "timestamp": "2019-07-27T06:05:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "858408-ccc9-4eae-9f19-de9b095dec6c", "eventTime": "2019-07-27T06:05:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSjRVWTd2bG1mSlJXMXJGNTFWNnZFT0lsUXBRanJCaE8wSittTU1Md0NBdUZjRGxGbHI0eHpNM1hyNXBtWlRLb05XUlU5K2NFUDdRUVFwb245WkQxTFFjRE8rMWl3NkpYNzh4THF0eWc3RTEySnRlRHBQWE01YWQwQnQrREdGZlVtWWcwRXhjYmkyVzNTaFBkRFFpVW5XKzJpUlk5bG9VQmhzOXNhdDRHdVY5OGlBTm45eFFGc2NGemw1b2NibjB3ejRIM0R2c3pBekUiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "858408-ccc9-4eae-9f19-de9b095dec6c", "record_id": "flaws_cloudtrail:0000070:858408-ccc9-4eae-9f19-de9b095dec6c", "row_index": 70, "timestamp": "2019-07-27T06:05:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "858408-ccc9-4eae-9f19-de9b095dec6c", "eventTime": "2019-07-27T06:05:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSjRVWTd2bG1mSlJXMXJGNTFWNnZFT0lsUXBRanJCaE8wSittTU1Md0NBdUZjRGxGbHI0eHpNM1hyNXBtWlRLb05XUlU5K2NFUDdRUVFwb245WkQxTFFjRE8rMWl3NkpYNzh4THF0eWc3RTEySnRlRHBQWE01YWQwQnQrREdGZlVtWWcwRXhjYmkyVzNTaFBkRFFpVW5XKzJpUlk5bG9VQmhzOXNhdDRHdVY5OGlBTm45eFFGc2NGemw1b2NibjB3ejRIM0R2c3pBekUiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "record_id": "flaws_cloudtrail:0000071:9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "row_index": 71, "timestamp": "2019-07-27T06:05:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "eventTime": "2019-07-27T06:05:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cU9XcUpWN2lLTStMOVJISW5jTkVTMTdkTStoazR2WXRoQXNURW1iWEpqcEh2TVVmVGRLbE9PbENObzJ0RE9CK2lsd1MveWxLQkIzQ0h5aHRIdDFUU1dvRk41ZnNCOUI0MllyU0lrdjlhSFRXeS9KWVRmVWJIYm1QT0JmWDRhMlJGczNiRjJnc2dFelhvUEVCdSs2L08zckhKWkZjcE15WTBqLzE2R0trdUNwZDBCU1BSYmgrNU5Kc1Fmcm04UFBFMGN1UUdGYm9CVVkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "record_id": "flaws_cloudtrail:0000072:9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "row_index": 72, "timestamp": "2019-07-27T06:05:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9624f2ae-0bc9-4ecc-94f6-ab50f5bd764e", "eventTime": "2019-07-27T06:05:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cU9XcUpWN2lLTStMOVJISW5jTkVTMTdkTStoazR2WXRoQXNURW1iWEpqcEh2TVVmVGRLbE9PbENObzJ0RE9CK2lsd1MveWxLQkIzQ0h5aHRIdDFUU1dvRk41ZnNCOUI0MllyU0lrdjlhSFRXeS9KWVRmVWJIYm1QT0JmWDRhMlJGczNiRjJnc2dFelhvUEVCdSs2L08zckhKWkZjcE15WTBqLzE2R0trdUNwZDBCU1BSYmgrNU5Kc1Fmcm04UFBFMGN1UUdGYm9CVVkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "record_id": "flaws_cloudtrail:0000073:d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "row_index": 73, "timestamp": "2019-07-27T06:05:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "eventTime": "2019-07-27T06:05:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4Y215TGhTM0dHdjMrczArSndTeWl2MEkyVzFWckxnQ3o1WS9hQmtjeksrL01WZXZLeU16dlRTWGVrcmkxY1hWL3d6L0psZU5oWmhNUUVzVWcxTThYUHA2SmpicWVNa1Rsb0NzYjY0ak5kMVgwOXcxRndXVXgxeFNEb2dtMmI0d2d6M0VXbFBtd25ONE02RUNQaGt2azdBUy9OMWpZZnlib2hmRndOK2trNnN4K2h0a1pqbStvRUhSNkRFZ2QwdXBFeXdhcUFKUGVXVTgiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "record_id": "flaws_cloudtrail:0000074:d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "row_index": 74, "timestamp": "2019-07-27T06:05:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cf698f-b673-4ef4-8de9-b6a1d5099cfe", "eventTime": "2019-07-27T06:05:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4Y215TGhTM0dHdjMrczArSndTeWl2MEkyVzFWckxnQ3o1WS9hQmtjeksrL01WZXZLeU16dlRTWGVrcmkxY1hWL3d6L0psZU5oWmhNUUVzVWcxTThYUHA2SmpicWVNa1Rsb0NzYjY0ak5kMVgwOXcxRndXVXgxeFNEb2dtMmI0d2d6M0VXbFBtd25ONE02RUNQaGt2azdBUy9OMWpZZnlib2hmRndOK2trNnN4K2h0a1pqbStvRUhSNkRFZ2QwdXBFeXdhcUFKUGVXVTgiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c08b797-22da-45eb-b842-5a7e3ca1859a", "record_id": "flaws_cloudtrail:0000075:2c08b797-22da-45eb-b842-5a7e3ca1859a", "row_index": 75, "timestamp": "2019-07-27T06:05:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c08b797-22da-45eb-b842-5a7e3ca1859a", "eventTime": "2019-07-27T06:05:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZVpTMzRSc0RsY00xKzNrbXp6UnRjMjNxQkpmalREQWEzb3dIUm5xV3lpanJjYzgzRVM0M0FUb2xRWnN2azMrUTlvSFFCVll0VHJjZUJrUzMxaEhlVEhqZGszWE5FTjd0VFpCYzBTOVNZZXgwUnJoNG9qTXd4ZVlraU1scSsvN2JTdGFLK2hQbVJoNUpoZWpDUVVKYmdWS3NPU21sWXZOb0xJZ3hjZkQ2U0JVRTJKSUZXbmYrTDhKLzFsQ096SXlYMW5jaGs0QzcvND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c08b797-22da-45eb-b842-5a7e3ca1859a", "record_id": "flaws_cloudtrail:0000076:2c08b797-22da-45eb-b842-5a7e3ca1859a", "row_index": 76, "timestamp": "2019-07-27T06:05:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c08b797-22da-45eb-b842-5a7e3ca1859a", "eventTime": "2019-07-27T06:05:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZVpTMzRSc0RsY00xKzNrbXp6UnRjMjNxQkpmalREQWEzb3dIUm5xV3lpanJjYzgzRVM0M0FUb2xRWnN2azMrUTlvSFFCVll0VHJjZUJrUzMxaEhlVEhqZGszWE5FTjd0VFpCYzBTOVNZZXgwUnJoNG9qTXd4ZVlraU1scSsvN2JTdGFLK2hQbVJoNUpoZWpDUVVKYmdWS3NPU21sWXZOb0xJZ3hjZkQ2U0JVRTJKSUZXbmYrTDhKLzFsQ096SXlYMW5jaGs0QzcvND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d0b292-416b-4d1f-bd22-bf051868a5c2f", "record_id": "flaws_cloudtrail:0000077:95d0b292-416b-4d1f-bd22-bf051868a5c2f", "row_index": 77, "timestamp": "2019-07-27T06:05:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d0b292-416b-4d1f-bd22-bf051868a5c2f", "eventTime": "2019-07-27T06:05:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1cWtSZVJUaGJkTUt6RWEyMFdPcmJsWnI4emc5WmE5OWFkV1JzRGdrUGhQNXlZYnN1QnZqNjd5UGRkRy9hSkVxcXVYb3VjTGdaOTN3SDFyZ0gwTFl6N05zbmMydGdZTHA4dlZDeUhCZ0RTMUdIWmgvSHZ6TnZKR0tsR3JHZk1uV3h1MFhUcDg2UG5nT0V6cHNzdTBZd2hFSEljeTA2S0Y4QVZNNzQrQXVSZ2FPVkxlaWQ3dWdIMHUrT2pVVDk4bU5YSGcrbHBFZGo4OTMiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d0b292-416b-4d1f-bd22-bf051868a5c2f", "record_id": "flaws_cloudtrail:0000078:95d0b292-416b-4d1f-bd22-bf051868a5c2f", "row_index": 78, "timestamp": "2019-07-27T06:05:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d0b292-416b-4d1f-bd22-bf051868a5c2f", "eventTime": "2019-07-27T06:05:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1cWtSZVJUaGJkTUt6RWEyMFdPcmJsWnI4emc5WmE5OWFkV1JzRGdrUGhQNXlZYnN1QnZqNjd5UGRkRy9hSkVxcXVYb3VjTGdaOTN3SDFyZ0gwTFl6N05zbmMydGdZTHA4dlZDeUhCZ0RTMUdIWmgvSHZ6TnZKR0tsR3JHZk1uV3h1MFhUcDg2UG5nT0V6cHNzdTBZd2hFSEljeTA2S0Y4QVZNNzQrQXVSZ2FPVkxlaWQ3dWdIMHUrT2pVVDk4bU5YSGcrbHBFZGo4OTMiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "record_id": "flaws_cloudtrail:0000079:8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "row_index": 79, "timestamp": "2019-07-27T06:05:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "eventTime": "2019-07-27T06:05:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmU1lyb04yZFFCbVhHQnI0TnVSWDVhS1RXS0YyRHFkRHhTdm4zMkE1K0Y1blo5YlEvbmVQQkt0ZFVIR3FDQXJ4VjAwWS9lYXo0MjhnYnRPRVh0SW5FcDF3NCt0bkdGS21Lb2JHemVya0xTU1dyemVBUGNqNGhWS1R1bU1OUDdQUkdDR3V5TEFYS0VzYlJKWm9JcTE2SDdrbkgzUldUUVZ4c0lIT1MyZEw2RFZTOUkyU2F5OFk3SE9rK2k2Y0ZEcC90bVp5SGxUMEZ1ZzAiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "record_id": "flaws_cloudtrail:0000080:8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "row_index": 80, "timestamp": "2019-07-27T06:05:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fab6a88-bb5f-4c64-9039-3bd31dd9427b", "eventTime": "2019-07-27T06:05:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmU1lyb04yZFFCbVhHQnI0TnVSWDVhS1RXS0YyRHFkRHhTdm4zMkE1K0Y1blo5YlEvbmVQQkt0ZFVIR3FDQXJ4VjAwWS9lYXo0MjhnYnRPRVh0SW5FcDF3NCt0bkdGS21Lb2JHemVya0xTU1dyemVBUGNqNGhWS1R1bU1OUDdQUkdDR3V5TEFYS0VzYlJKWm9JcTE2SDdrbkgzUldUUVZ4c0lIT1MyZEw2RFZTOUkyU2F5OFk3SE9rK2k2Y0ZEcC90bVp5SGxUMEZ1ZzAiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409d25e3-f6e3-4534-9544-d40c6a796616d", "record_id": "flaws_cloudtrail:0000081:409d25e3-f6e3-4534-9544-d40c6a796616d", "row_index": 81, "timestamp": "2019-07-27T06:05:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409d25e3-f6e3-4534-9544-d40c6a796616d", "eventTime": "2019-07-27T06:05:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409d25e3-f6e3-4534-9544-d40c6a796616d", "record_id": "flaws_cloudtrail:0000082:409d25e3-f6e3-4534-9544-d40c6a796616d", "row_index": 82, "timestamp": "2019-07-27T06:05:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409d25e3-f6e3-4534-9544-d40c6a796616d", "eventTime": "2019-07-27T06:05:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d789050-c4df-451a-8c67-0a548b4f8e48", "record_id": "flaws_cloudtrail:0000083:d789050-c4df-451a-8c67-0a548b4f8e48", "row_index": 83, "timestamp": "2019-07-27T06:06:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d789050-c4df-451a-8c67-0a548b4f8e48", "eventTime": "2019-07-27T06:06:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d789050-c4df-451a-8c67-0a548b4f8e48", "record_id": "flaws_cloudtrail:0000084:d789050-c4df-451a-8c67-0a548b4f8e48", "row_index": 84, "timestamp": "2019-07-27T06:06:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d789050-c4df-451a-8c67-0a548b4f8e48", "eventTime": "2019-07-27T06:06:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e07810-524e-4d6e-a31e-35eb53a7beb2", "record_id": "flaws_cloudtrail:0000085:83e07810-524e-4d6e-a31e-35eb53a7beb2", "row_index": 85, "timestamp": "2019-07-27T06:06:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e07810-524e-4d6e-a31e-35eb53a7beb2", "eventTime": "2019-07-27T06:06:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYN1RZZW1GaFlMbklhSEVjZUFBdGl3S2IyMzRDOExjYWVsaWgrdE1PSkxHbE5HSGxuL3FDWTg4VGxhd0tYeVAxL3FRYXhFVDdjaHNaMnpoMTVHY3pTSHhadXk2UUVoTG90TVZyRFNXZVRRSG4rczR2OHJNSXpIa0NpampjMFBKVGl2US9HMlBUdmZoa3Y2d1NKYlNBTVRwNG5QWjZtaytON0RiNFUvSnpja0lnWFdzUDhudUZvZng5T3dxNGRtNkxsajdZU3ppM3RpNG0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e07810-524e-4d6e-a31e-35eb53a7beb2", "record_id": "flaws_cloudtrail:0000086:83e07810-524e-4d6e-a31e-35eb53a7beb2", "row_index": 86, "timestamp": "2019-07-27T06:06:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e07810-524e-4d6e-a31e-35eb53a7beb2", "eventTime": "2019-07-27T06:06:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYN1RZZW1GaFlMbklhSEVjZUFBdGl3S2IyMzRDOExjYWVsaWgrdE1PSkxHbE5HSGxuL3FDWTg4VGxhd0tYeVAxL3FRYXhFVDdjaHNaMnpoMTVHY3pTSHhadXk2UUVoTG90TVZyRFNXZVRRSG4rczR2OHJNSXpIa0NpampjMFBKVGl2US9HMlBUdmZoa3Y2d1NKYlNBTVRwNG5QWjZtaytON0RiNFUvSnpja0lnWFdzUDhudUZvZng5T3dxNGRtNkxsajdZU3ppM3RpNG0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a495b1-d95f-405a-bbef-79ded3d30bbc", "record_id": "flaws_cloudtrail:0000087:37a495b1-d95f-405a-bbef-79ded3d30bbc", "row_index": 87, "timestamp": "2019-07-27T06:06:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a495b1-d95f-405a-bbef-79ded3d30bbc", "eventTime": "2019-07-27T06:06:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMb0tPM1M1UVhodHVKQ1hCeUMxQ1BybXpEVndUREtQaEVhKzJRUzd1ZXcrRFNscXBLeDlyUmNkbTJKaFJUMjBoS2RpUVpvUERUUndzQ2I1MXZsc2Nkd3dCK1ZxMkZZR0xGZEYvRzVZcXArcjVrQ21hYnVNZ25MTkpwcTBPTGFld083SUFYWWl6TE1aTkxGcXB0b3d1K1AvMkg0YWZWWWRpV01tVXRFZGZRdTE3Tk4xSkRXNlczTG9IV3F6U0s3MEduRGNsYW5oQU8rV3YiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a495b1-d95f-405a-bbef-79ded3d30bbc", "record_id": "flaws_cloudtrail:0000088:37a495b1-d95f-405a-bbef-79ded3d30bbc", "row_index": 88, "timestamp": "2019-07-27T06:06:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a495b1-d95f-405a-bbef-79ded3d30bbc", "eventTime": "2019-07-27T06:06:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMb0tPM1M1UVhodHVKQ1hCeUMxQ1BybXpEVndUREtQaEVhKzJRUzd1ZXcrRFNscXBLeDlyUmNkbTJKaFJUMjBoS2RpUVpvUERUUndzQ2I1MXZsc2Nkd3dCK1ZxMkZZR0xGZEYvRzVZcXArcjVrQ21hYnVNZ25MTkpwcTBPTGFld083SUFYWWl6TE1aTkxGcXB0b3d1K1AvMkg0YWZWWWRpV01tVXRFZGZRdTE3Tk4xSkRXNlczTG9IV3F6U0s3MEduRGNsYW5oQU8rV3YiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ecf8ba3-d3b3-40c9-88bb-20490e163765", "record_id": "flaws_cloudtrail:0000089:0ecf8ba3-d3b3-40c9-88bb-20490e163765", "row_index": 89, "timestamp": "2019-07-27T06:06:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ecf8ba3-d3b3-40c9-88bb-20490e163765", "eventTime": "2019-07-27T06:06:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUGZiWkZGM0NFZXdrVkQrODVDZjN4YkJGQkZ6REpHYTMrYWUwMnM0eUVrd3llQzZVUmRYOWJsOStjYjQxSEhLdzNzQXNjTUVEakZZMytqREJnVmdabU05Tk9iemhVaUozTzZoYlVJUUY5V1haUy9pTjNxcTl4dUZ1VTkvQzV3U1duTUI4YWhKM090T2Q4S29OYUJQWU5yOXg4VDBwYTM4S3UrajgxWkFJc0NlaWIzYWdHaDhrblVTeEpOSG56dkVueTVjc09hWWhRcGoiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ecf8ba3-d3b3-40c9-88bb-20490e163765", "record_id": "flaws_cloudtrail:0000090:0ecf8ba3-d3b3-40c9-88bb-20490e163765", "row_index": 90, "timestamp": "2019-07-27T06:06:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ecf8ba3-d3b3-40c9-88bb-20490e163765", "eventTime": "2019-07-27T06:06:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUGZiWkZGM0NFZXdrVkQrODVDZjN4YkJGQkZ6REpHYTMrYWUwMnM0eUVrd3llQzZVUmRYOWJsOStjYjQxSEhLdzNzQXNjTUVEakZZMytqREJnVmdabU05Tk9iemhVaUozTzZoYlVJUUY5V1haUy9pTjNxcTl4dUZ1VTkvQzV3U1duTUI4YWhKM090T2Q4S29OYUJQWU5yOXg4VDBwYTM4S3UrajgxWkFJc0NlaWIzYWdHaDhrblVTeEpOSG56dkVueTVjc09hWWhRcGoiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070724-c21e-42bb-a0cc-3ff8726ded04", "record_id": "flaws_cloudtrail:0000091:070724-c21e-42bb-a0cc-3ff8726ded04", "row_index": 91, "timestamp": "2019-07-27T06:06:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070724-c21e-42bb-a0cc-3ff8726ded04", "eventTime": "2019-07-27T06:06:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYM3BOWTFqZTU5QlRiRTBiL1dVQTB3amhZTTlHN3pYZkQ1dXBvUEpJY0Q1cDJEc3hUcEczZTYzQzBlQlM0WXYrN1FmMWhTZEFrbjd4dEI0eXFkT1hWR2FGZWV1dnZRUm9QcFR2dHBUdkNNTC94bXRhcGYwMExwOTNvN1VCR0czeWovQ0kyU3duTDJDRy9aZHVGb2lHZUpVZU1iQUpmRDhIQlFCN0RlbitiV0VPcytQblkxMVFYSnl5U0d5OGhvbHVjWmJOdEQ5TXJkQ08iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070724-c21e-42bb-a0cc-3ff8726ded04", "record_id": "flaws_cloudtrail:0000092:070724-c21e-42bb-a0cc-3ff8726ded04", "row_index": 92, "timestamp": "2019-07-27T06:06:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070724-c21e-42bb-a0cc-3ff8726ded04", "eventTime": "2019-07-27T06:06:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYM3BOWTFqZTU5QlRiRTBiL1dVQTB3amhZTTlHN3pYZkQ1dXBvUEpJY0Q1cDJEc3hUcEczZTYzQzBlQlM0WXYrN1FmMWhTZEFrbjd4dEI0eXFkT1hWR2FGZWV1dnZRUm9QcFR2dHBUdkNNTC94bXRhcGYwMExwOTNvN1VCR0czeWovQ0kyU3duTDJDRy9aZHVGb2lHZUpVZU1iQUpmRDhIQlFCN0RlbitiV0VPcytQblkxMVFYSnl5U0d5OGhvbHVjWmJOdEQ5TXJkQ08iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "record_id": "flaws_cloudtrail:0000093:a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "row_index": 93, "timestamp": "2019-07-27T06:06:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "eventTime": "2019-07-27T06:06:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneGZ4UmNmODJPR3BadjFlbjdMRWhuQXVybWMxc25uOGFWNXVzUkNIRlR3RVFQVW1CMStmRVpWVFZwSWd4S0xydWNmRUdMZGZURFNFME9QNWNDSnlXNW44VWs5WER3Y09NZU16a0xQNjRFb2ltZ1YxNERKRnJGY09YSjMwV2g1ZTBITHp2ckRXQ2FmNVJyejlydlZoZ1RzZU5nRjVoTml4VERVbTZacmU5eUsyVVlrRGdpTWIyQW5HR0tTYzB3Q01pNGVuUXVrOUExNGIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "record_id": "flaws_cloudtrail:0000094:a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "row_index": 94, "timestamp": "2019-07-27T06:06:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a620141b8-c92a-4f8b-9e2d-c73bb860ab6b", "eventTime": "2019-07-27T06:06:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneGZ4UmNmODJPR3BadjFlbjdMRWhuQXVybWMxc25uOGFWNXVzUkNIRlR3RVFQVW1CMStmRVpWVFZwSWd4S0xydWNmRUdMZGZURFNFME9QNWNDSnlXNW44VWs5WER3Y09NZU16a0xQNjRFb2ltZ1YxNERKRnJGY09YSjMwV2g1ZTBITHp2ckRXQ2FmNVJyejlydlZoZ1RzZU5nRjVoTml4VERVbTZacmU5eUsyVVlrRGdpTWIyQW5HR0tTYzB3Q01pNGVuUXVrOUExNGIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "record_id": "flaws_cloudtrail:0000095:7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "row_index": 95, "timestamp": "2019-07-27T06:06:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "eventTime": "2019-07-27T06:06:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "record_id": "flaws_cloudtrail:0000096:7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "row_index": 96, "timestamp": "2019-07-27T06:06:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd90c24-e0aa-43ee-a1a4-11d1626f2779", "eventTime": "2019-07-27T06:06:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1471ccca-2b1b-49a5-8d90-b64269d36464", "record_id": "flaws_cloudtrail:0000097:1471ccca-2b1b-49a5-8d90-b64269d36464", "row_index": 97, "timestamp": "2019-07-27T06:07:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1471ccca-2b1b-49a5-8d90-b64269d36464", "eventTime": "2019-07-27T06:07:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1471ccca-2b1b-49a5-8d90-b64269d36464", "record_id": "flaws_cloudtrail:0000098:1471ccca-2b1b-49a5-8d90-b64269d36464", "row_index": 98, "timestamp": "2019-07-27T06:07:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1471ccca-2b1b-49a5-8d90-b64269d36464", "eventTime": "2019-07-27T06:07:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41cdb4f-a332-4ac2-9389-ce69587a08", "record_id": "flaws_cloudtrail:0000099:c41cdb4f-a332-4ac2-9389-ce69587a08", "row_index": 99, "timestamp": "2019-07-27T06:07:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41cdb4f-a332-4ac2-9389-ce69587a08", "eventTime": "2019-07-27T06:07:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41cdb4f-a332-4ac2-9389-ce69587a08", "record_id": "flaws_cloudtrail:0000100:c41cdb4f-a332-4ac2-9389-ce69587a08", "row_index": 100, "timestamp": "2019-07-27T06:07:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41cdb4f-a332-4ac2-9389-ce69587a08", "eventTime": "2019-07-27T06:07:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "record_id": "flaws_cloudtrail:0000101:997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "row_index": 101, "timestamp": "2019-07-27T06:07:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "eventTime": "2019-07-27T06:07:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "record_id": "flaws_cloudtrail:0000102:997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "row_index": 102, "timestamp": "2019-07-27T06:07:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "997b5d8e-584f-43d9-aa27-7ce90a0c1acf", "eventTime": "2019-07-27T06:07:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "476322-4d2d-467f-b776-be3e077518bd3", "record_id": "flaws_cloudtrail:0000103:476322-4d2d-467f-b776-be3e077518bd3", "row_index": 103, "timestamp": "2019-07-27T06:07:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "476322-4d2d-467f-b776-be3e077518bd3", "eventTime": "2019-07-27T06:07:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "476322-4d2d-467f-b776-be3e077518bd3", "record_id": "flaws_cloudtrail:0000104:476322-4d2d-467f-b776-be3e077518bd3", "row_index": 104, "timestamp": "2019-07-27T06:07:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "476322-4d2d-467f-b776-be3e077518bd3", "eventTime": "2019-07-27T06:07:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad75927-5db4-473b-ad39-7a48701d977", "record_id": "flaws_cloudtrail:0000105:ad75927-5db4-473b-ad39-7a48701d977", "row_index": 105, "timestamp": "2019-07-27T06:10:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad75927-5db4-473b-ad39-7a48701d977", "eventTime": "2019-07-27T06:10:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad75927-5db4-473b-ad39-7a48701d977", "record_id": "flaws_cloudtrail:0000106:ad75927-5db4-473b-ad39-7a48701d977", "row_index": 106, "timestamp": "2019-07-27T06:10:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad75927-5db4-473b-ad39-7a48701d977", "eventTime": "2019-07-27T06:10:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "record_id": "flaws_cloudtrail:0000107:e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "row_index": 107, "timestamp": "2019-07-27T06:11:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "eventTime": "2019-07-27T06:11:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "record_id": "flaws_cloudtrail:0000108:e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "row_index": 108, "timestamp": "2019-07-27T06:11:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d8b94b-96d1-499e-a4b8-a507d4e8b834", "eventTime": "2019-07-27T06:11:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27da7eae-eebc-4597-ada8-5e88e35644b", "record_id": "flaws_cloudtrail:0000109:27da7eae-eebc-4597-ada8-5e88e35644b", "row_index": 109, "timestamp": "2019-07-27T06:11:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27da7eae-eebc-4597-ada8-5e88e35644b", "eventTime": "2019-07-27T06:11:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwNXdJL2M3WXZxWEJXUEJ3eERvNW5IL2NuS0svejMyeVREMnBGTUpCeFF1UlMrRUpjd1dzTm9HVkNYWDdXM0lGQnlWd3dkZlRVamZhWmVMRFNFdnNxWWlralhyeXJxQTJkUUkxQ1ZrNU1lSytyVXFPUStoNUQ2NWhjRGFhTm1zNE41MHRnV2ZnY3B6UGpXV040aWk3UElOcXFRaWdhUXEwdXR1V1NwcEpxS2NSL05Qd0JnWXNmWjRzbG9rb1pkc2tFNUlpMjFHbjUwQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27da7eae-eebc-4597-ada8-5e88e35644b", "record_id": "flaws_cloudtrail:0000110:27da7eae-eebc-4597-ada8-5e88e35644b", "row_index": 110, "timestamp": "2019-07-27T06:11:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27da7eae-eebc-4597-ada8-5e88e35644b", "eventTime": "2019-07-27T06:11:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwNXdJL2M3WXZxWEJXUEJ3eERvNW5IL2NuS0svejMyeVREMnBGTUpCeFF1UlMrRUpjd1dzTm9HVkNYWDdXM0lGQnlWd3dkZlRVamZhWmVMRFNFdnNxWWlralhyeXJxQTJkUUkxQ1ZrNU1lSytyVXFPUStoNUQ2NWhjRGFhTm1zNE41MHRnV2ZnY3B6UGpXV040aWk3UElOcXFRaWdhUXEwdXR1V1NwcEpxS2NSL05Qd0JnWXNmWjRzbG9rb1pkc2tFNUlpMjFHbjUwQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9997d02-7c89-4df8-ba54-4a18457", "record_id": "flaws_cloudtrail:0000111:d9997d02-7c89-4df8-ba54-4a18457", "row_index": 111, "timestamp": "2019-07-27T06:11:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9997d02-7c89-4df8-ba54-4a18457", "eventTime": "2019-07-27T06:11:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEWjZNanY3TThsTXpsRlRoanRLdllKZ29rby9LMThiaHBmNi9TM3BsZlgyVmpqZkZsVDJ1aGJ6Zi9JQkozeGFRMytJQ29PWjRGZVVqOW1ZaUFjTVVCQnA3TzJoSk55RmV2QlFQSmZ5a1AzZ0RxOFdxalRWVWJCNWVESy81ZERJdnNiU1dtNG9pZldLeWkvOXIxME5LZHpoam1YcTFjU1gwK1J4dW1ZL3FHQzdPaUROTTlqZXQzaVVZY0pRRUJIMFRTUUw4UjkyZzhoODhLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9997d02-7c89-4df8-ba54-4a18457", "record_id": "flaws_cloudtrail:0000112:d9997d02-7c89-4df8-ba54-4a18457", "row_index": 112, "timestamp": "2019-07-27T06:11:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9997d02-7c89-4df8-ba54-4a18457", "eventTime": "2019-07-27T06:11:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEWjZNanY3TThsTXpsRlRoanRLdllKZ29rby9LMThiaHBmNi9TM3BsZlgyVmpqZkZsVDJ1aGJ6Zi9JQkozeGFRMytJQ29PWjRGZVVqOW1ZaUFjTVVCQnA3TzJoSk55RmV2QlFQSmZ5a1AzZ0RxOFdxalRWVWJCNWVESy81ZERJdnNiU1dtNG9pZldLeWkvOXIxME5LZHpoam1YcTFjU1gwK1J4dW1ZL3FHQzdPaUROTTlqZXQzaVVZY0pRRUJIMFRTUUw4UjkyZzhoODhLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "record_id": "flaws_cloudtrail:0000113:ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "row_index": 113, "timestamp": "2019-07-27T06:11:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "eventTime": "2019-07-27T06:11:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuK3R0a29JQUFYRCs0Nk90SEFwUEtPRjhkbWpXUFJ3SlFnWVRRNndMeUZhTUxjbmN1NldUQndaZzVNRDVsbnM4bW9SVTZlZ1RTeVVTbkk2UnZGb2JmZHZUV2RzYVR2dXVydmF3dWRvNXpENjdOanJPeHBOZzFLL2hOM2tyd3ZMY1N3clNnLzZqMWs2Zi9CWjZ0UzhHamxVcUZxSWQwN1RwNG1QUXNJWGtOd0FsVUhGVjNWYVh3d0w3V0lFL0R2bGJKN1lQb2FsTUhtNTJnQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "record_id": "flaws_cloudtrail:0000114:ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "row_index": 114, "timestamp": "2019-07-27T06:11:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba08de9d-9d4f-431d-a1b0-a37bb0ec9d50", "eventTime": "2019-07-27T06:11:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuK3R0a29JQUFYRCs0Nk90SEFwUEtPRjhkbWpXUFJ3SlFnWVRRNndMeUZhTUxjbmN1NldUQndaZzVNRDVsbnM4bW9SVTZlZ1RTeVVTbkk2UnZGb2JmZHZUV2RzYVR2dXVydmF3dWRvNXpENjdOanJPeHBOZzFLL2hOM2tyd3ZMY1N3clNnLzZqMWs2Zi9CWjZ0UzhHamxVcUZxSWQwN1RwNG1QUXNJWGtOd0FsVUhGVjNWYVh3d0w3V0lFL0R2bGJKN1lQb2FsTUhtNTJnQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05bc97d9-2cb8-4458-b519-bde964ab5d46", "record_id": "flaws_cloudtrail:0000115:05bc97d9-2cb8-4458-b519-bde964ab5d46", "row_index": 115, "timestamp": "2019-07-27T06:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05bc97d9-2cb8-4458-b519-bde964ab5d46", "eventTime": "2019-07-27T06:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMcXNQRExOcDNTYXFBMjVTUmxjaEd2bUVHMXNiZ0VLTFZ1cU1zN3o4Q1BJcStITmxIcUhURVJWaWRKVTQ5ekNadnFYS2tOZ2ZkVjNBOE1ranVCYXFtbnhvSU9SQnhyLzRYUERzbjhoMGs1Njd2MnN5TS9kZHhqczZKV1NHSEw4SFU5Q1FxQW9xUTd0K09XUzlDdmJRcVBsenFHU0ExQ0w2MlYyNDd6aTRTZGRqQnhQdC9pcTJKdVQ2Z0dkTUhGUFY5eS9pSlFSTXE2bGxmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05bc97d9-2cb8-4458-b519-bde964ab5d46", "record_id": "flaws_cloudtrail:0000116:05bc97d9-2cb8-4458-b519-bde964ab5d46", "row_index": 116, "timestamp": "2019-07-27T06:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05bc97d9-2cb8-4458-b519-bde964ab5d46", "eventTime": "2019-07-27T06:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMcXNQRExOcDNTYXFBMjVTUmxjaEd2bUVHMXNiZ0VLTFZ1cU1zN3o4Q1BJcStITmxIcUhURVJWaWRKVTQ5ekNadnFYS2tOZ2ZkVjNBOE1ranVCYXFtbnhvSU9SQnhyLzRYUERzbjhoMGs1Njd2MnN5TS9kZHhqczZKV1NHSEw4SFU5Q1FxQW9xUTd0K09XUzlDdmJRcVBsenFHU0ExQ0w2MlYyNDd6aTRTZGRqQnhQdC9pcTJKdVQ2Z0dkTUhGUFY5eS9pSlFSTXE2bGxmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e4c98f6-1c4a-4500-8596-44dba3297df9", "record_id": "flaws_cloudtrail:0000117:8e4c98f6-1c4a-4500-8596-44dba3297df9", "row_index": 117, "timestamp": "2019-07-27T06:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e4c98f6-1c4a-4500-8596-44dba3297df9", "eventTime": "2019-07-27T06:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNTdDdGt1TkszY3kvdXNtQ0VLbUJnaGV2UG9aYVZVN0hvRGFIM1dHSWhTODV3amNRak9pdnp4ZTBRa1JtUmhoQ25zcVF6RE10K0FaZ0JXSHdEemZTVUVpSlYrMERQbFdqeXJGTGp5Nk0ybFhjY2REbXY5ek1NTGswYmRtQVRaODBIaE5NNkhvWnZ4cnFiVFhmdkh4N3RkeWtpdUZpYzFrY3NnUVBxYUYzMkY4TFZXL2VKUXRMdG5QWFF2aGxPVUoyRXdaYnN2NE85NW9OQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e4c98f6-1c4a-4500-8596-44dba3297df9", "record_id": "flaws_cloudtrail:0000118:8e4c98f6-1c4a-4500-8596-44dba3297df9", "row_index": 118, "timestamp": "2019-07-27T06:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e4c98f6-1c4a-4500-8596-44dba3297df9", "eventTime": "2019-07-27T06:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNTdDdGt1TkszY3kvdXNtQ0VLbUJnaGV2UG9aYVZVN0hvRGFIM1dHSWhTODV3amNRak9pdnp4ZTBRa1JtUmhoQ25zcVF6RE10K0FaZ0JXSHdEemZTVUVpSlYrMERQbFdqeXJGTGp5Nk0ybFhjY2REbXY5ek1NTGswYmRtQVRaODBIaE5NNkhvWnZ4cnFiVFhmdkh4N3RkeWtpdUZpYzFrY3NnUVBxYUYzMkY4TFZXL2VKUXRMdG5QWFF2aGxPVUoyRXdaYnN2NE85NW9OQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ffee3b-8c78-4e9e-ab80-0470c07721ee", "record_id": "flaws_cloudtrail:0000119:03ffee3b-8c78-4e9e-ab80-0470c07721ee", "row_index": 119, "timestamp": "2019-07-27T06:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ffee3b-8c78-4e9e-ab80-0470c07721ee", "eventTime": "2019-07-27T06:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4589d6-3025-4ff2-8553-487ad65b979c", "record_id": "flaws_cloudtrail:0000120:6f4589d6-3025-4ff2-8553-487ad65b979c", "row_index": 120, "timestamp": "2019-07-27T06:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4589d6-3025-4ff2-8553-487ad65b979c", "eventTime": "2019-07-27T06:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJESmdUSWJ3ek5yVmJya2RiNmJhdGZxUTdyOG9Cd2RCaVJLa29EdEhXZU00OXZpc21GcmdCalozOTAzSG5kaEJkWklCS3RTa1RhVnNXblRFNzA5TFdZM0dabVNsTDJpY2lJY2JHK2N1eXBjNWJrcFU3bE93NGc4ejdydTNrSDlyUW43ZEZOWWd5SHpyZG1VTExVTENQWndXWmxhQlh0VXFONSsxSEVMbTRYcnQyK201eXJlbERuUUl0ZnhLQTI0VTVxdThqRmlEWDdPd1hwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ffee3b-8c78-4e9e-ab80-0470c07721ee", "record_id": "flaws_cloudtrail:0000121:03ffee3b-8c78-4e9e-ab80-0470c07721ee", "row_index": 121, "timestamp": "2019-07-27T06:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ffee3b-8c78-4e9e-ab80-0470c07721ee", "eventTime": "2019-07-27T06:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4589d6-3025-4ff2-8553-487ad65b979c", "record_id": "flaws_cloudtrail:0000122:6f4589d6-3025-4ff2-8553-487ad65b979c", "row_index": 122, "timestamp": "2019-07-27T06:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4589d6-3025-4ff2-8553-487ad65b979c", "eventTime": "2019-07-27T06:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJESmdUSWJ3ek5yVmJya2RiNmJhdGZxUTdyOG9Cd2RCaVJLa29EdEhXZU00OXZpc21GcmdCalozOTAzSG5kaEJkWklCS3RTa1RhVnNXblRFNzA5TFdZM0dabVNsTDJpY2lJY2JHK2N1eXBjNWJrcFU3bE93NGc4ejdydTNrSDlyUW43ZEZOWWd5SHpyZG1VTExVTENQWndXWmxhQlh0VXFONSsxSEVMbTRYcnQyK201eXJlbERuUUl0ZnhLQTI0VTVxdThqRmlEWDdPd1hwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "record_id": "flaws_cloudtrail:0000123:48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "row_index": 123, "timestamp": "2019-07-27T06:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "eventTime": "2019-07-27T06:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJZWIvMXc2Mm5PZkV0SzYxVWtiN0laMUJpR0pZRU1pL240dnlvM1FoeVA0VmxyWkhRdGFjdkRJdGF4R3VFcURzVHIzWmdmMTBJMk5KRzZ2OG5GVlNKTmg2bHRuZERvYnNVZ3NpV1phR3NZUGJvUlgxTWpCQWNhanJRbG4yTlRoM01rUDRCa0hOU05QaUpGU241NlZESzh3Uk1aaytxLzBJLzcxNDh3TWZZY1FTSVdXTFJiV0sxSzJvNnZiT0ZucXZhRHB3M0Y3ZTYrTkNEdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "record_id": "flaws_cloudtrail:0000124:48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "row_index": 124, "timestamp": "2019-07-27T06:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48bcbaee-3fa9-4e11-8ca3-13a23bbc1f49", "eventTime": "2019-07-27T06:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJZWIvMXc2Mm5PZkV0SzYxVWtiN0laMUJpR0pZRU1pL240dnlvM1FoeVA0VmxyWkhRdGFjdkRJdGF4R3VFcURzVHIzWmdmMTBJMk5KRzZ2OG5GVlNKTmg2bHRuZERvYnNVZ3NpV1phR3NZUGJvUlgxTWpCQWNhanJRbG4yTlRoM01rUDRCa0hOU05QaUpGU241NlZESzh3Uk1aaytxLzBJLzcxNDh3TWZZY1FTSVdXTFJiV0sxSzJvNnZiT0ZucXZhRHB3M0Y3ZTYrTkNEdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e99d580-e23c-4070-aa23-50bdaafd7ce0", "record_id": "flaws_cloudtrail:0000125:0e99d580-e23c-4070-aa23-50bdaafd7ce0", "row_index": 125, "timestamp": "2019-07-27T06:11:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e99d580-e23c-4070-aa23-50bdaafd7ce0", "eventTime": "2019-07-27T06:11:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQXRPOFlOZWkrNmowc3lCMVpaS2syY0pNN2tIbEZMSzNhK2VOaEhmTWdLZlVrQ0FXZ3VZWXd6WUNVWEFnOTFjdG9vckZPRFdxTWlnVGtiWk9QMGZ3SlJheGlUM1pTZDNPUTE0RXhwYVZnL25ZS2ZLTVIrKzdrc3ZCaHQzYmtiVXdEWmlMRk1DbmNrVk1jK0pxaHhKWnVCLzRwYWVvY2IvYlVtcm9pcytKQkpqdnZZc0ZkOE1scklWUGEzcE5NSzFYN3Y3NHZ0aVVMZU15QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e99d580-e23c-4070-aa23-50bdaafd7ce0", "record_id": "flaws_cloudtrail:0000126:0e99d580-e23c-4070-aa23-50bdaafd7ce0", "row_index": 126, "timestamp": "2019-07-27T06:11:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e99d580-e23c-4070-aa23-50bdaafd7ce0", "eventTime": "2019-07-27T06:11:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQXRPOFlOZWkrNmowc3lCMVpaS2syY0pNN2tIbEZMSzNhK2VOaEhmTWdLZlVrQ0FXZ3VZWXd6WUNVWEFnOTFjdG9vckZPRFdxTWlnVGtiWk9QMGZ3SlJheGlUM1pTZDNPUTE0RXhwYVZnL25ZS2ZLTVIrKzdrc3ZCaHQzYmtiVXdEWmlMRk1DbmNrVk1jK0pxaHhKWnVCLzRwYWVvY2IvYlVtcm9pcytKQkpqdnZZc0ZkOE1scklWUGEzcE5NSzFYN3Y3NHZ0aVVMZU15QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc7a923-0a68-49ee-a1ca-6322cedd1948", "record_id": "flaws_cloudtrail:0000127:1cc7a923-0a68-49ee-a1ca-6322cedd1948", "row_index": 127, "timestamp": "2019-07-27T06:11:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc7a923-0a68-49ee-a1ca-6322cedd1948", "eventTime": "2019-07-27T06:11:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwTVdsWFZ4eCs0TmJhdDVUOHAvSE85THE2NzVKQXhoQ3MzOElCeG01ZjA3cU96aUFrem1YVXAxeDhxR2orUThHbUphMmJsWjc5T0o1RUdPUm95NG9GaEt0bVpXeVZKeXN6cyttaVdUT09rS05wSGRxZGs0eHJpNzZobmgwYzZ5NU9UUWFrcXhzMys5cUtTQUxQRlRlcDJZTE1oWlI1d1hJUjZQNXI0c1dJdUFsQlM0di84WVhvU2Zwa3d2NWZ4V3lNb2VZMDFpQ2Z6c3NhZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc7a923-0a68-49ee-a1ca-6322cedd1948", "record_id": "flaws_cloudtrail:0000128:1cc7a923-0a68-49ee-a1ca-6322cedd1948", "row_index": 128, "timestamp": "2019-07-27T06:11:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc7a923-0a68-49ee-a1ca-6322cedd1948", "eventTime": "2019-07-27T06:11:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwTVdsWFZ4eCs0TmJhdDVUOHAvSE85THE2NzVKQXhoQ3MzOElCeG01ZjA3cU96aUFrem1YVXAxeDhxR2orUThHbUphMmJsWjc5T0o1RUdPUm95NG9GaEt0bVpXeVZKeXN6cyttaVdUT09rS05wSGRxZGs0eHJpNzZobmgwYzZ5NU9UUWFrcXhzMys5cUtTQUxQRlRlcDJZTE1oWlI1d1hJUjZQNXI0c1dJdUFsQlM0di84WVhvU2Zwa3d2NWZ4V3lNb2VZMDFpQ2Z6c3NhZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a02de8-4333-46a7-a791-f624b428b3ed", "record_id": "flaws_cloudtrail:0000129:b7a02de8-4333-46a7-a791-f624b428b3ed", "row_index": 129, "timestamp": "2019-07-27T06:11:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a02de8-4333-46a7-a791-f624b428b3ed", "eventTime": "2019-07-27T06:11:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRnJDQWtGT3dGNDc5V1lVYUdnMk9ndGZzc3poRHJXRzhuekR1bS9GTUpXOUdzWUIyTmNHaXJnajRxNVNKdlUraDZybHBxS0x0dWl1bnplUHFLNmRQbEd4eUt4a3hmSUhSWmVJL1dOelNsMHNaVWlnSWQvRzFtSElaUEN0QTlmNC92Vmd4VkVncVVTU0Zrd0pvc0tIeVo4Tjk5WFpGai95Zmd6YzdzQThWZlkyZTA1WjBvaXBhMDRzakExZVZGcllmVjFyK3RiR00vSHNEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a02de8-4333-46a7-a791-f624b428b3ed", "record_id": "flaws_cloudtrail:0000130:b7a02de8-4333-46a7-a791-f624b428b3ed", "row_index": 130, "timestamp": "2019-07-27T06:11:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a02de8-4333-46a7-a791-f624b428b3ed", "eventTime": "2019-07-27T06:11:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRnJDQWtGT3dGNDc5V1lVYUdnMk9ndGZzc3poRHJXRzhuekR1bS9GTUpXOUdzWUIyTmNHaXJnajRxNVNKdlUraDZybHBxS0x0dWl1bnplUHFLNmRQbEd4eUt4a3hmSUhSWmVJL1dOelNsMHNaVWlnSWQvRzFtSElaUEN0QTlmNC92Vmd4VkVncVVTU0Zrd0pvc0tIeVo4Tjk5WFpGai95Zmd6YzdzQThWZlkyZTA1WjBvaXBhMDRzakExZVZGcllmVjFyK3RiR00vSHNEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121584-d235-488c-b128-d878940d5092f", "record_id": "flaws_cloudtrail:0000131:121584-d235-488c-b128-d878940d5092f", "row_index": 131, "timestamp": "2019-07-27T06:11:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121584-d235-488c-b128-d878940d5092f", "eventTime": "2019-07-27T06:11:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJheDVVSDVVZ05jVEhFWnhtZS9oQzFOMytMMm5McU0zQnlwdnlUd0N4WmViSVdHbkhXQStRMUtUVVVvalhsL2tUVWsyd01nekloZGNKdGh1OFFmY1pHeXRDL1hrQURxdUV4K09MNmdQZWhWU1pZb3UrOGRrdGx4blJadjVsclZrRHhjTnlPSC9Rcm00NUcyRzdJc3NtRUw1NzFlWjFYVzE5YzN1UVhjSStzbko2bHJqQ1hXY1BkT3lKMm5zaDM2NTNRWXQ3NzE4cnU0NUhRZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121584-d235-488c-b128-d878940d5092f", "record_id": "flaws_cloudtrail:0000132:121584-d235-488c-b128-d878940d5092f", "row_index": 132, "timestamp": "2019-07-27T06:11:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121584-d235-488c-b128-d878940d5092f", "eventTime": "2019-07-27T06:11:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJheDVVSDVVZ05jVEhFWnhtZS9oQzFOMytMMm5McU0zQnlwdnlUd0N4WmViSVdHbkhXQStRMUtUVVVvalhsL2tUVWsyd01nekloZGNKdGh1OFFmY1pHeXRDL1hrQURxdUV4K09MNmdQZWhWU1pZb3UrOGRrdGx4blJadjVsclZrRHhjTnlPSC9Rcm00NUcyRzdJc3NtRUw1NzFlWjFYVzE5YzN1UVhjSStzbko2bHJqQ1hXY1BkT3lKMm5zaDM2NTNRWXQ3NzE4cnU0NUhRZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "record_id": "flaws_cloudtrail:0000133:5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "row_index": 133, "timestamp": "2019-07-27T06:11:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "eventTime": "2019-07-27T06:11:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNanlrSE12aVA1YVVsYnVOdXZjNjM2UkJhbDNQUjFucDBqS2xtWGFjOGJrdlJBUENMZ0ZkOEEzci8xOTE0NDhuUEJxL3RITzVPY0J3S0J0TUdmeG9xSFdjZnZBOExKR2JQL1JpQ3VSblA5UzJnYVdKdXhWV05DbnEwSWxRalNPUDJYK09xNTM2OGtUL29McnBxbnpKaEpLTHJ1MkVSMTVLbDhzbmlFUzBCRjMvNU1MdDhqLzFodTR5YVdGUGI0MEF0aC9RbEVLSE13PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "record_id": "flaws_cloudtrail:0000134:5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "row_index": 134, "timestamp": "2019-07-27T06:11:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e576470b-9bba-42d5-895c-0aaf8c2b3bde", "eventTime": "2019-07-27T06:11:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNanlrSE12aVA1YVVsYnVOdXZjNjM2UkJhbDNQUjFucDBqS2xtWGFjOGJrdlJBUENMZ0ZkOEEzci8xOTE0NDhuUEJxL3RITzVPY0J3S0J0TUdmeG9xSFdjZnZBOExKR2JQL1JpQ3VSblA5UzJnYVdKdXhWV05DbnEwSWxRalNPUDJYK09xNTM2OGtUL29McnBxbnpKaEpLTHJ1MkVSMTVLbDhzbmlFUzBCRjMvNU1MdDhqLzFodTR5YVdGUGI0MEF0aC9RbEVLSE13PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6489ed16-8c7a-4dd7-ad95-b358a242b781", "record_id": "flaws_cloudtrail:0000135:6489ed16-8c7a-4dd7-ad95-b358a242b781", "row_index": 135, "timestamp": "2019-07-27T06:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6489ed16-8c7a-4dd7-ad95-b358a242b781", "eventTime": "2019-07-27T06:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzSnExT3d3dG92NmxaRkZNSHljSFJUNEo5alN6d1Exb3JGYm51RytmZ2ZQTnFZQWp5cFNNWG5xQ2UvMFNjQXhVbHQ3MGMxUDM5ZEp5bXVOWklKWmpZcWJoOXhINkJDelNXamxkeFc3TzM3VUtkZWJ2M28yK0wrTzJrZ2R4YTlJUzQyejhnUkRTdVVLT3FqVVpWcUZ5OEEvcEcybUloTTB1dnJBUzZyK3lMeVljTG1ySGlGQitYT0NJNzF3emQ1M3hCNERZZEVKMDYzRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6489ed16-8c7a-4dd7-ad95-b358a242b781", "record_id": "flaws_cloudtrail:0000136:6489ed16-8c7a-4dd7-ad95-b358a242b781", "row_index": 136, "timestamp": "2019-07-27T06:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6489ed16-8c7a-4dd7-ad95-b358a242b781", "eventTime": "2019-07-27T06:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzSnExT3d3dG92NmxaRkZNSHljSFJUNEo5alN6d1Exb3JGYm51RytmZ2ZQTnFZQWp5cFNNWG5xQ2UvMFNjQXhVbHQ3MGMxUDM5ZEp5bXVOWklKWmpZcWJoOXhINkJDelNXamxkeFc3TzM3VUtkZWJ2M28yK0wrTzJrZ2R4YTlJUzQyejhnUkRTdVVLT3FqVVpWcUZ5OEEvcEcybUloTTB1dnJBUzZyK3lMeVljTG1ySGlGQitYT0NJNzF3emQ1M3hCNERZZEVKMDYzRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df62a53-8deb-4a55-86c6-6f2e21db73e0", "record_id": "flaws_cloudtrail:0000137:7df62a53-8deb-4a55-86c6-6f2e21db73e0", "row_index": 137, "timestamp": "2019-07-27T06:11:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df62a53-8deb-4a55-86c6-6f2e21db73e0", "eventTime": "2019-07-27T06:11:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvUDlBWTV4TXh6UG9IVmx4R2RoU2NlQWhYR2xkUFJ5U3dZSTl2aUNHSmQ2RWVtVFdiVGZES0JNdVlKdjJHcDNpY1BUWjVpOElHdlM4LzRiNHNkYThjaE9va2ZUT3hyRXRRSGZNVDZ1c2RWV1Z0dnVUODA3Y0dyM0NrTFB1eGJqSmFxRkVQVXpBRy8xVk50MDBQWnd4RGZtQ3RnVGtoKzBMeWY3NCt5bEtLZ0xQOWRseEFyU1FLZUUxRDlIeE0xYlJ4QldodWVNM1ZjeVdBYmxIWUt6SHlBbUFZTW1OT3NFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df62a53-8deb-4a55-86c6-6f2e21db73e0", "record_id": "flaws_cloudtrail:0000138:7df62a53-8deb-4a55-86c6-6f2e21db73e0", "row_index": 138, "timestamp": "2019-07-27T06:11:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df62a53-8deb-4a55-86c6-6f2e21db73e0", "eventTime": "2019-07-27T06:11:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvUDlBWTV4TXh6UG9IVmx4R2RoU2NlQWhYR2xkUFJ5U3dZSTl2aUNHSmQ2RWVtVFdiVGZES0JNdVlKdjJHcDNpY1BUWjVpOElHdlM4LzRiNHNkYThjaE9va2ZUT3hyRXRRSGZNVDZ1c2RWV1Z0dnVUODA3Y0dyM0NrTFB1eGJqSmFxRkVQVXpBRy8xVk50MDBQWnd4RGZtQ3RnVGtoKzBMeWY3NCt5bEtLZ0xQOWRseEFyU1FLZUUxRDlIeE0xYlJ4QldodWVNM1ZjeVdBYmxIWUt6SHlBbUFZTW1OT3NFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585353f8c-8e1c-4eca-a798-cee47ef915c5", "record_id": "flaws_cloudtrail:0000139:585353f8c-8e1c-4eca-a798-cee47ef915c5", "row_index": 139, "timestamp": "2019-07-27T06:11:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585353f8c-8e1c-4eca-a798-cee47ef915c5", "eventTime": "2019-07-27T06:11:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvZzFQYTR1QVUwRzZac3YyandMVTQzTm1DRTBNNEhyVjF2YjZpWUlxdCszbFZab1dZb2xGd05mcFRsZmhZZzdaRjJaQ3g3NnNsdjdnTTc3REx0YnF6eFY2dXpzK1UyR0xBcG1xcEJFekE0eXB5amVyV2oyb1M4djQzd0dLRVhMS0prY25EcTJ0YTh3UVdBVzZJK29obTNGU1Q4N2gwUGJVN2s5eFRZd0hENlhiQUFNNVlWNHR0TUZVZ3pBcUZ6S0lGeEJQN3VwRDVKM01aaGJHUXJaZjBnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585353f8c-8e1c-4eca-a798-cee47ef915c5", "record_id": "flaws_cloudtrail:0000140:585353f8c-8e1c-4eca-a798-cee47ef915c5", "row_index": 140, "timestamp": "2019-07-27T06:11:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585353f8c-8e1c-4eca-a798-cee47ef915c5", "eventTime": "2019-07-27T06:11:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvZzFQYTR1QVUwRzZac3YyandMVTQzTm1DRTBNNEhyVjF2YjZpWUlxdCszbFZab1dZb2xGd05mcFRsZmhZZzdaRjJaQ3g3NnNsdjdnTTc3REx0YnF6eFY2dXpzK1UyR0xBcG1xcEJFekE0eXB5amVyV2oyb1M4djQzd0dLRVhMS0prY25EcTJ0YTh3UVdBVzZJK29obTNGU1Q4N2gwUGJVN2s5eFRZd0hENlhiQUFNNVlWNHR0TUZVZ3pBcUZ6S0lGeEJQN3VwRDVKM01aaGJHUXJaZjBnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "record_id": "flaws_cloudtrail:0000141:e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "row_index": 141, "timestamp": "2019-07-27T06:11:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "eventTime": "2019-07-27T06:11:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxV2UySExHdUw3L3kxY1pib0VmVFp2Z1NUMGdtanBuSVFXUjVtckhEMUh5YmVBemozVm1tM1pKTzRYazB1ZnZBK0RKb3IvSmRFQUt1dUUwUS9PbEtmdUlmeTIzQWxIRWRpM05sTmVXTkZKZE9aRlM5TlM3ZzJxSnhmU29wVGtJR1VGUFVVYWNpd1JWOVBnWFFlckpuTElCSzhyZEtnU2FjT3dlQ1ZCbUFBOVVYQTZpSHlrN3pWR3hwdkx4by9pWG9zS0I5NkQ1d1lSbGJWK2VVQWN5dkFHRWxjaWx0TXRZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "record_id": "flaws_cloudtrail:0000142:e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "row_index": 142, "timestamp": "2019-07-27T06:11:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0a02bb1-56ff-4bb1-88fe-1b9f5b037719", "eventTime": "2019-07-27T06:11:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxV2UySExHdUw3L3kxY1pib0VmVFp2Z1NUMGdtanBuSVFXUjVtckhEMUh5YmVBemozVm1tM1pKTzRYazB1ZnZBK0RKb3IvSmRFQUt1dUUwUS9PbEtmdUlmeTIzQWxIRWRpM05sTmVXTkZKZE9aRlM5TlM3ZzJxSnhmU29wVGtJR1VGUFVVYWNpd1JWOVBnWFFlckpuTElCSzhyZEtnU2FjT3dlQ1ZCbUFBOVVYQTZpSHlrN3pWR3hwdkx4by9pWG9zS0I5NkQ1d1lSbGJWK2VVQWN5dkFHRWxjaWx0TXRZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065e3883-90eb-4a4f-a56d-0477d87092a4", "record_id": "flaws_cloudtrail:0000143:065e3883-90eb-4a4f-a56d-0477d87092a4", "row_index": 143, "timestamp": "2019-07-27T06:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065e3883-90eb-4a4f-a56d-0477d87092a4", "eventTime": "2019-07-27T06:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSlVqT1FIV0lZTG5xTHpCWjUycm9XRkpuK25GVktOQWlPSDZOdUN4U2dvNVpQQnVUZGNKcnRLbG1mMVMydnJlZnFSVHZHWTRZVzZCMzdna0t5TnJ1MmhLR1ZTN3paWEt1R1RxemV3dWZJUmI1R0o5L1JJWmNPZ28zSWRKbnRYc0dZSnNSWWIzbmhkRitjVldLcHFiNUQrK0JMa21hWmV6NVAvTUY4K1BOdEh1VEY4dmladUtnNENicVdyeUErOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065e3883-90eb-4a4f-a56d-0477d87092a4", "record_id": "flaws_cloudtrail:0000144:065e3883-90eb-4a4f-a56d-0477d87092a4", "row_index": 144, "timestamp": "2019-07-27T06:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065e3883-90eb-4a4f-a56d-0477d87092a4", "eventTime": "2019-07-27T06:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSlVqT1FIV0lZTG5xTHpCWjUycm9XRkpuK25GVktOQWlPSDZOdUN4U2dvNVpQQnVUZGNKcnRLbG1mMVMydnJlZnFSVHZHWTRZVzZCMzdna0t5TnJ1MmhLR1ZTN3paWEt1R1RxemV3dWZJUmI1R0o5L1JJWmNPZ28zSWRKbnRYc0dZSnNSWWIzbmhkRitjVldLcHFiNUQrK0JMa21hWmV6NVAvTUY4K1BOdEh1VEY4dmladUtnNENicVdyeUErOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e68b547f-64f6-4866-87e5-1e19d4f48430", "record_id": "flaws_cloudtrail:0000145:e68b547f-64f6-4866-87e5-1e19d4f48430", "row_index": 145, "timestamp": "2019-07-27T06:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e68b547f-64f6-4866-87e5-1e19d4f48430", "eventTime": "2019-07-27T06:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSN2xoaWw1NGtGTm43c0dveEYzOGEvQmpuMCsvbDNHcWd3MlIzb2poaDFQYU5qdUlNcjQ2eEdrYjU2dEQwRTVZZmJtbU9McWRRZlBkWEpsYytlc3I2Wk1Da1Zyc3VmWktBUklpWU9wNzlKOXdia291VlJ3TkROZlF0SHhML1dPWlJoZ2lPWWp4QjRGZHo2Skw4eFFDbWI5anJPUWVHTTRzMWdNdjA2bzIyNnNaZ0RYbVhKTFdTNHRYZEZ0cnV1Vml5STFiQWxYSEJTYk1lY3VVdDJlWmdGQkVJaGphNDJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e68b547f-64f6-4866-87e5-1e19d4f48430", "record_id": "flaws_cloudtrail:0000146:e68b547f-64f6-4866-87e5-1e19d4f48430", "row_index": 146, "timestamp": "2019-07-27T06:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e68b547f-64f6-4866-87e5-1e19d4f48430", "eventTime": "2019-07-27T06:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSN2xoaWw1NGtGTm43c0dveEYzOGEvQmpuMCsvbDNHcWd3MlIzb2poaDFQYU5qdUlNcjQ2eEdrYjU2dEQwRTVZZmJtbU9McWRRZlBkWEpsYytlc3I2Wk1Da1Zyc3VmWktBUklpWU9wNzlKOXdia291VlJ3TkROZlF0SHhML1dPWlJoZ2lPWWp4QjRGZHo2Skw4eFFDbWI5anJPUWVHTTRzMWdNdjA2bzIyNnNaZ0RYbVhKTFdTNHRYZEZ0cnV1Vml5STFiQWxYSEJTYk1lY3VVdDJlWmdGQkVJaGphNDJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a030d0-753f-407d-8621-8d2abf643e87", "record_id": "flaws_cloudtrail:0000147:80a030d0-753f-407d-8621-8d2abf643e87", "row_index": 147, "timestamp": "2019-07-27T06:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a030d0-753f-407d-8621-8d2abf643e87", "eventTime": "2019-07-27T06:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RTg2dXNET2JEL1ROWG44UkVVUnlzY245S1BrK1NKbGkrMU5LOWpPcDNMOHp0UlMzb3hma2N2Z29pa3g5Z2NXbExueW0vY3hNYUlGb1BBQzVEVEM5Qm9jRmhHZVJPSFlzS0VkWG9Xc0NNbUVSbG1rYVRvLysrTHc3TmFkUE9WRUtvY2xDRmF5Skg3VzRWbkdVdjNFVmdCRGJvVW0wcDlraFVMLzFPU3dPMEZrRW1GSFlOY2c1QnJRTFJ6amVhcXY0RG1scHNtaXRmTFEybVdGQXhZV1lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a030d0-753f-407d-8621-8d2abf643e87", "record_id": "flaws_cloudtrail:0000148:80a030d0-753f-407d-8621-8d2abf643e87", "row_index": 148, "timestamp": "2019-07-27T06:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a030d0-753f-407d-8621-8d2abf643e87", "eventTime": "2019-07-27T06:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RTg2dXNET2JEL1ROWG44UkVVUnlzY245S1BrK1NKbGkrMU5LOWpPcDNMOHp0UlMzb3hma2N2Z29pa3g5Z2NXbExueW0vY3hNYUlGb1BBQzVEVEM5Qm9jRmhHZVJPSFlzS0VkWG9Xc0NNbUVSbG1rYVRvLysrTHc3TmFkUE9WRUtvY2xDRmF5Skg3VzRWbkdVdjNFVmdCRGJvVW0wcDlraFVMLzFPU3dPMEZrRW1GSFlOY2c1QnJRTFJ6amVhcXY0RG1scHNtaXRmTFEybVdGQXhZV1lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdc20a7a-9493-4e3d-b112-d70e56f92de5", "record_id": "flaws_cloudtrail:0000149:bdc20a7a-9493-4e3d-b112-d70e56f92de5", "row_index": 149, "timestamp": "2019-07-27T06:11:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdc20a7a-9493-4e3d-b112-d70e56f92de5", "eventTime": "2019-07-27T06:11:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3bFB5SHkvdHViWC8vb3hXcUNJS2pMblM0VzR5YTFNZUFTMXZPMmk1MCtGTlo3UFcvemhZK3M4SVVXL1ExK2xCR3krUENXdlF3RmRMZUIvYzBBWjlWSTdDQzFnRXV3Rmx5VFZBclgwNDd2Qm1JdHpOaklnS3U5UTljSlVlWTBSd0RTYXczcUVwMGs0OFlVZ0lHcWVET3BBQ1RJdjRUbmVENEJ5YmdlKzRZNUVMNW5Ucjl4cEViSlpxVjFRYUoxS1VxaEdJamVlQ29ManAyMnRMWFZHb2tQa2hXQ2oxZlZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdc20a7a-9493-4e3d-b112-d70e56f92de5", "record_id": "flaws_cloudtrail:0000150:bdc20a7a-9493-4e3d-b112-d70e56f92de5", "row_index": 150, "timestamp": "2019-07-27T06:11:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdc20a7a-9493-4e3d-b112-d70e56f92de5", "eventTime": "2019-07-27T06:11:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3bFB5SHkvdHViWC8vb3hXcUNJS2pMblM0VzR5YTFNZUFTMXZPMmk1MCtGTlo3UFcvemhZK3M4SVVXL1ExK2xCR3krUENXdlF3RmRMZUIvYzBBWjlWSTdDQzFnRXV3Rmx5VFZBclgwNDd2Qm1JdHpOaklnS3U5UTljSlVlWTBSd0RTYXczcUVwMGs0OFlVZ0lHcWVET3BBQ1RJdjRUbmVENEJ5YmdlKzRZNUVMNW5Ucjl4cEViSlpxVjFRYUoxS1VxaEdJamVlQ29ManAyMnRMWFZHb2tQa2hXQ2oxZlZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5daf646e-f8b2-4f50-83d0-b88efd3209ff", "record_id": "flaws_cloudtrail:0000151:5daf646e-f8b2-4f50-83d0-b88efd3209ff", "row_index": 151, "timestamp": "2019-07-27T06:11:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5daf646e-f8b2-4f50-83d0-b88efd3209ff", "eventTime": "2019-07-27T06:11:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RXAyTnZBb0FtQUxSc3R3WGVscVhSMzAySjl0WEExN0lvL3BkTWZvVWRKK2FMZjB5dDFGTHlUWTFxQm1RRFFJZ1hxTTgxK3JzV0dTRG9GbllzWVM4Z3ppTzFWbkJkNlZVcXk5enUycGRpSFYwMlFoR0hRdktISnoxUGNNUWR2aVdHL3RFR2JDMzBqc2tDSjdGekJwR1dmWWZLUUphVXpPVjBOVXZ3WkhJT21sVXZwKzRTejQvemtiQVovUkhYUGFhc0x0aGhDZE1ncHVKWXlpanhDM0NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5daf646e-f8b2-4f50-83d0-b88efd3209ff", "record_id": "flaws_cloudtrail:0000152:5daf646e-f8b2-4f50-83d0-b88efd3209ff", "row_index": 152, "timestamp": "2019-07-27T06:11:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5daf646e-f8b2-4f50-83d0-b88efd3209ff", "eventTime": "2019-07-27T06:11:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RXAyTnZBb0FtQUxSc3R3WGVscVhSMzAySjl0WEExN0lvL3BkTWZvVWRKK2FMZjB5dDFGTHlUWTFxQm1RRFFJZ1hxTTgxK3JzV0dTRG9GbllzWVM4Z3ppTzFWbkJkNlZVcXk5enUycGRpSFYwMlFoR0hRdktISnoxUGNNUWR2aVdHL3RFR2JDMzBqc2tDSjdGekJwR1dmWWZLUUphVXpPVjBOVXZ3WkhJT21sVXZwKzRTejQvemtiQVovUkhYUGFhc0x0aGhDZE1ncHVKWXlpanhDM0NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0807d6dd-1430-4eca-99c2-2f8734ea8934", "record_id": "flaws_cloudtrail:0000153:0807d6dd-1430-4eca-99c2-2f8734ea8934", "row_index": 153, "timestamp": "2019-07-27T06:11:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0807d6dd-1430-4eca-99c2-2f8734ea8934", "eventTime": "2019-07-27T06:11:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvY3NSa3R5VGZXbHZCNE5rdERuRytLYmJLaWJXOGdqdHZpQmNyTmtqK2I0cXNyOCtTTEduSTlLUEVrMHMvcENlQkFMS1RTejN3dElGZFgrNEI1WFRZMGFGUEJnTVMrUTF0ZzNmeDBQUFRxWDZHWlo3S1FjNDFSMVJOQlBYcTBuTWgzcXg4d1BuQUtyTVBLcXg5anhqbUYzRUI3WDd2ZDJ4TUJTTFMzYW1yd1pCbWlxWitCNG9EbW5xUWYwaUxpaDZJVWJ4Qml3T2pWVGJ3OWIwRGpScHNkRDN6ZjBYK2JNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0807d6dd-1430-4eca-99c2-2f8734ea8934", "record_id": "flaws_cloudtrail:0000154:0807d6dd-1430-4eca-99c2-2f8734ea8934", "row_index": 154, "timestamp": "2019-07-27T06:11:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0807d6dd-1430-4eca-99c2-2f8734ea8934", "eventTime": "2019-07-27T06:11:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvY3NSa3R5VGZXbHZCNE5rdERuRytLYmJLaWJXOGdqdHZpQmNyTmtqK2I0cXNyOCtTTEduSTlLUEVrMHMvcENlQkFMS1RTejN3dElGZFgrNEI1WFRZMGFGUEJnTVMrUTF0ZzNmeDBQUFRxWDZHWlo3S1FjNDFSMVJOQlBYcTBuTWgzcXg4d1BuQUtyTVBLcXg5anhqbUYzRUI3WDd2ZDJ4TUJTTFMzYW1yd1pCbWlxWitCNG9EbW5xUWYwaUxpaDZJVWJ4Qml3T2pWVGJ3OWIwRGpScHNkRDN6ZjBYK2JNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4afbfe5e-88df-4422-b876-827480b2749ea", "record_id": "flaws_cloudtrail:0000155:4afbfe5e-88df-4422-b876-827480b2749ea", "row_index": 155, "timestamp": "2019-07-27T06:11:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4afbfe5e-88df-4422-b876-827480b2749ea", "eventTime": "2019-07-27T06:11:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNYUYrYnMrVE1SSmVWNldsL05HRktGK2NiSkdJZEZmVFpDUThaSzZaaDdYdFVFdWpNYWFrd0RaRVVtUEgxemUrbkh4OE5Mck92N1k0QkFSN002cGpvMkNxaGNoQ0ttZEJHR0lPL2lVejIyRHVsZHNoR09GeGxsY0d3QXB2YkZzTkxJOWJCQTZob3hyS21FeS9iSmJJOU9YT2dUbVlWYXZnMGxmZmdUYUVmbFF4UG9ISzJodUVWNDcvcnZTMjNrVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4afbfe5e-88df-4422-b876-827480b2749ea", "record_id": "flaws_cloudtrail:0000156:4afbfe5e-88df-4422-b876-827480b2749ea", "row_index": 156, "timestamp": "2019-07-27T06:11:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4afbfe5e-88df-4422-b876-827480b2749ea", "eventTime": "2019-07-27T06:11:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNYUYrYnMrVE1SSmVWNldsL05HRktGK2NiSkdJZEZmVFpDUThaSzZaaDdYdFVFdWpNYWFrd0RaRVVtUEgxemUrbkh4OE5Mck92N1k0QkFSN002cGpvMkNxaGNoQ0ttZEJHR0lPL2lVejIyRHVsZHNoR09GeGxsY0d3QXB2YkZzTkxJOWJCQTZob3hyS21FeS9iSmJJOU9YT2dUbVlWYXZnMGxmZmdUYUVmbFF4UG9ISzJodUVWNDcvcnZTMjNrVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74e3c6cb-db36-4000-a527-e273585fdabb1", "record_id": "flaws_cloudtrail:0000157:74e3c6cb-db36-4000-a527-e273585fdabb1", "row_index": 157, "timestamp": "2019-07-27T06:11:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74e3c6cb-db36-4000-a527-e273585fdabb1", "eventTime": "2019-07-27T06:11:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74e3c6cb-db36-4000-a527-e273585fdabb1", "record_id": "flaws_cloudtrail:0000158:74e3c6cb-db36-4000-a527-e273585fdabb1", "row_index": 158, "timestamp": "2019-07-27T06:11:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74e3c6cb-db36-4000-a527-e273585fdabb1", "eventTime": "2019-07-27T06:11:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6717df-4387-437a-96e8-d0b052cb820e", "record_id": "flaws_cloudtrail:0000159:1a6717df-4387-437a-96e8-d0b052cb820e", "row_index": 159, "timestamp": "2019-07-27T06:11:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6717df-4387-437a-96e8-d0b052cb820e", "eventTime": "2019-07-27T06:11:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcDc3TFZidUsrYlhON3VJbkpXM05KallXTFRhSnVIczgrSURvSCtCcWF4Q1lmTDBjZEdtMi92TUZnakx5L1FvREtIOW1LSEwzUXliWHdBbFRVSmRaZy8zbkUzenArNUdhMHYrUDBPc1cyRFVEbndtZXlCS2EzVytFWkRWMU5LcVZZQjQ0ci9pMHdFa0UvVzY5WmQwdTJqNUNQenhRZnJIVGwzMjdDSUUya3hVcWdEKzM0eTQrcFk1bGJlUGpteEJTcXc1dm1QNU1vZE1FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6717df-4387-437a-96e8-d0b052cb820e", "record_id": "flaws_cloudtrail:0000160:1a6717df-4387-437a-96e8-d0b052cb820e", "row_index": 160, "timestamp": "2019-07-27T06:11:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6717df-4387-437a-96e8-d0b052cb820e", "eventTime": "2019-07-27T06:11:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcDc3TFZidUsrYlhON3VJbkpXM05KallXTFRhSnVIczgrSURvSCtCcWF4Q1lmTDBjZEdtMi92TUZnakx5L1FvREtIOW1LSEwzUXliWHdBbFRVSmRaZy8zbkUzenArNUdhMHYrUDBPc1cyRFVEbndtZXlCS2EzVytFWkRWMU5LcVZZQjQ0ci9pMHdFa0UvVzY5WmQwdTJqNUNQenhRZnJIVGwzMjdDSUUya3hVcWdEKzM0eTQrcFk1bGJlUGpteEJTcXc1dm1QNU1vZE1FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "record_id": "flaws_cloudtrail:0000161:ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "row_index": 161, "timestamp": "2019-07-27T06:11:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "eventTime": "2019-07-27T06:11:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMbUlicnhxcFBUTFpUaDBVdDhYZ21BTjU1TFRPZXh4UmdVZkRWc0htZnNoQStxaWZUVWhmdjlQQjkwV1pKNVdhbWpvSU92MVVCOG56K0FVYmNWdVBNTlJQOXVTejFaMzJhRjJYbmgvaEFoSTc1bTZHZmZwTWV6MEpPVW1RTWVaYzk5R283VDdUSUsxTHNaYmdHRy9ZWFo2UXNHWXY0MDR1QVVhT0duLzd2a0ZJeHVTSW40NS9uaDBFMmlGaVpsSFBlZ29Uc3RNc1RKUXNpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "record_id": "flaws_cloudtrail:0000162:ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "row_index": 162, "timestamp": "2019-07-27T06:11:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca48c5b3-6dbc-4b98-90d1-41f6e4842da0", "eventTime": "2019-07-27T06:11:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMbUlicnhxcFBUTFpUaDBVdDhYZ21BTjU1TFRPZXh4UmdVZkRWc0htZnNoQStxaWZUVWhmdjlQQjkwV1pKNVdhbWpvSU92MVVCOG56K0FVYmNWdVBNTlJQOXVTejFaMzJhRjJYbmgvaEFoSTc1bTZHZmZwTWV6MEpPVW1RTWVaYzk5R283VDdUSUsxTHNaYmdHRy9ZWFo2UXNHWXY0MDR1QVVhT0duLzd2a0ZJeHVTSW40NS9uaDBFMmlGaVpsSFBlZ29Uc3RNc1RKUXNpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6256f53-b472-40eb-9dc8-817a36a512c5", "record_id": "flaws_cloudtrail:0000163:c6256f53-b472-40eb-9dc8-817a36a512c5", "row_index": 163, "timestamp": "2019-07-27T06:11:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6256f53-b472-40eb-9dc8-817a36a512c5", "eventTime": "2019-07-27T06:11:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VHFZU0xnbDF2RVdPcUJLdG5DTU02emhEbTBmbTRSSTFOZTNGQjZ3ekhpbm5BV3R5QWlCSTF5N3dLVnVnNnFoazBuempKVXBicHpjLzBsS2Jab3N6N1hqTGNFTE9BSFQ5OG04WTJYRm5IeVVyWFJsVHVkOGtoMlBrNTU4KzFHaDFkMnFOaGtnVlJ1WkRPRUVESlBuVVZIM1dNVmJHZ1ZCcXVVTWtLTk5XcEVWYkZ6bnc4MWhpdTEyWTFDUTltTmdLNG9TTGp0WlhuNjdwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6256f53-b472-40eb-9dc8-817a36a512c5", "record_id": "flaws_cloudtrail:0000164:c6256f53-b472-40eb-9dc8-817a36a512c5", "row_index": 164, "timestamp": "2019-07-27T06:11:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6256f53-b472-40eb-9dc8-817a36a512c5", "eventTime": "2019-07-27T06:11:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VHFZU0xnbDF2RVdPcUJLdG5DTU02emhEbTBmbTRSSTFOZTNGQjZ3ekhpbm5BV3R5QWlCSTF5N3dLVnVnNnFoazBuempKVXBicHpjLzBsS2Jab3N6N1hqTGNFTE9BSFQ5OG04WTJYRm5IeVVyWFJsVHVkOGtoMlBrNTU4KzFHaDFkMnFOaGtnVlJ1WkRPRUVESlBuVVZIM1dNVmJHZ1ZCcXVVTWtLTk5XcEVWYkZ6bnc4MWhpdTEyWTFDUTltTmdLNG9TTGp0WlhuNjdwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef5133c-7e31-46da-aacc-268461a8b654", "record_id": "flaws_cloudtrail:0000165:1ef5133c-7e31-46da-aacc-268461a8b654", "row_index": 165, "timestamp": "2019-07-27T06:11:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef5133c-7e31-46da-aacc-268461a8b654", "eventTime": "2019-07-27T06:11:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWSWNzVmExai9qVjJCU0JPOE8zZVBOeXdMYk9BOXZqNzJQMFZXZ0UyKzVkVG9ZdlBBK0pFdWx5eEk4Rkh6Y1hIZ2JUMmJqVFZ5R25ueThqU2lMRFpjMGs3S3ZsbDh1RWRBZERocGtEOFlOd1JmZ1lESUY4bFNZS1VaOTVkamtWK2R0cU1OMTFxZzQrSGNoVUZQb0RpMFNXNzMwWGNzUFdWRkpDbmM0ZVJvYUZ0NXM4WTlMdE1tRkEwSHZoUnRnTk4wQ0twNWhZMXloVkpVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef5133c-7e31-46da-aacc-268461a8b654", "record_id": "flaws_cloudtrail:0000166:1ef5133c-7e31-46da-aacc-268461a8b654", "row_index": 166, "timestamp": "2019-07-27T06:11:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef5133c-7e31-46da-aacc-268461a8b654", "eventTime": "2019-07-27T06:11:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWSWNzVmExai9qVjJCU0JPOE8zZVBOeXdMYk9BOXZqNzJQMFZXZ0UyKzVkVG9ZdlBBK0pFdWx5eEk4Rkh6Y1hIZ2JUMmJqVFZ5R25ueThqU2lMRFpjMGs3S3ZsbDh1RWRBZERocGtEOFlOd1JmZ1lESUY4bFNZS1VaOTVkamtWK2R0cU1OMTFxZzQrSGNoVUZQb0RpMFNXNzMwWGNzUFdWRkpDbmM0ZVJvYUZ0NXM4WTlMdE1tRkEwSHZoUnRnTk4wQ0twNWhZMXloVkpVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "record_id": "flaws_cloudtrail:0000167:fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "row_index": 167, "timestamp": "2019-07-27T06:11:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "eventTime": "2019-07-27T06:11:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYjAyK0pRcDFQQ0h2ZFkyeXJOU2IrUFBuZ0pJclE0bStWalFKMGJmaUhYdjA4ZHQ3ZUZvUDhYdTdGOWU2blBGYS9XOE4zNi9SaVlZdSt2eGFvb05KanY4TlgwdlNGVzV1cDZscU5tZVkzbUlWRk9hYStYWTl4Yy9VNG5vSXkwK0JYaUVnTWNJM2xnZlJtTkVCcG04b2pvN05MRElQUG5PRVVZSzZRSStBVUk3Z0JGeERrcDM2dEs5eWpBT2lKRmtKNDRvbW9JNnllbVlMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "record_id": "flaws_cloudtrail:0000168:fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "row_index": 168, "timestamp": "2019-07-27T06:11:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3c597b-6b64-44e4-8861-cf0b0b9a5fd5", "eventTime": "2019-07-27T06:11:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYjAyK0pRcDFQQ0h2ZFkyeXJOU2IrUFBuZ0pJclE0bStWalFKMGJmaUhYdjA4ZHQ3ZUZvUDhYdTdGOWU2blBGYS9XOE4zNi9SaVlZdSt2eGFvb05KanY4TlgwdlNGVzV1cDZscU5tZVkzbUlWRk9hYStYWTl4Yy9VNG5vSXkwK0JYaUVnTWNJM2xnZlJtTkVCcG04b2pvN05MRElQUG5PRVVZSzZRSStBVUk3Z0JGeERrcDM2dEs5eWpBT2lKRmtKNDRvbW9JNnllbVlMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53dd5040-f0c5-446b-9f18-59db10d2b9f9", "record_id": "flaws_cloudtrail:0000169:53dd5040-f0c5-446b-9f18-59db10d2b9f9", "row_index": 169, "timestamp": "2019-07-27T06:11:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53dd5040-f0c5-446b-9f18-59db10d2b9f9", "eventTime": "2019-07-27T06:11:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRERHOHdYdWI2Y0NuNVBicCt1ZUd3dUxlUzJJQWMwTk10MGdVOXBnVHFCMU81UkdaSXp5SW9kRmZmZE9yT0p5STBuWkcrcUxDVUt4cnE5ZFhycXBjRFZIR0F2K0FDdzdjUmZUb2hTSFp5Ym45Mmk3eVZqSmJUUm93Q1J6L2hLMUErRWNNRk4vODd0ZWJEWjdISC9FUmt0dnVZOXVOb3VEZmJNVk45QU5YSVpnbUx5TWJ0aDdwRTBzQ2dYZGhsRnpkem52bzdLRVVCQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53dd5040-f0c5-446b-9f18-59db10d2b9f9", "record_id": "flaws_cloudtrail:0000170:53dd5040-f0c5-446b-9f18-59db10d2b9f9", "row_index": 170, "timestamp": "2019-07-27T06:11:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53dd5040-f0c5-446b-9f18-59db10d2b9f9", "eventTime": "2019-07-27T06:11:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRERHOHdYdWI2Y0NuNVBicCt1ZUd3dUxlUzJJQWMwTk10MGdVOXBnVHFCMU81UkdaSXp5SW9kRmZmZE9yT0p5STBuWkcrcUxDVUt4cnE5ZFhycXBjRFZIR0F2K0FDdzdjUmZUb2hTSFp5Ym45Mmk3eVZqSmJUUm93Q1J6L2hLMUErRWNNRk4vODd0ZWJEWjdISC9FUmt0dnVZOXVOb3VEZmJNVk45QU5YSVpnbUx5TWJ0aDdwRTBzQ2dYZGhsRnpkem52bzdLRVVCQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "record_id": "flaws_cloudtrail:0000171:4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "row_index": 171, "timestamp": "2019-07-27T06:12:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "eventTime": "2019-07-27T06:12:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "record_id": "flaws_cloudtrail:0000172:4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "row_index": 172, "timestamp": "2019-07-27T06:12:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d4dd4cb-9d65-4ba2-a0d5-7c1aa0703bf8", "eventTime": "2019-07-27T06:12:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e452dea1-d768-49a4-b3b2-35e389012b4ec", "record_id": "flaws_cloudtrail:0000173:e452dea1-d768-49a4-b3b2-35e389012b4ec", "row_index": 173, "timestamp": "2019-07-27T06:12:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e452dea1-d768-49a4-b3b2-35e389012b4ec", "eventTime": "2019-07-27T06:12:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e452dea1-d768-49a4-b3b2-35e389012b4ec", "record_id": "flaws_cloudtrail:0000174:e452dea1-d768-49a4-b3b2-35e389012b4ec", "row_index": 174, "timestamp": "2019-07-27T06:12:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e452dea1-d768-49a4-b3b2-35e389012b4ec", "eventTime": "2019-07-27T06:12:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac1b291-539c-4ec2-befe-93501eb7bc3f", "record_id": "flaws_cloudtrail:0000175:6ac1b291-539c-4ec2-befe-93501eb7bc3f", "row_index": 175, "timestamp": "2019-07-27T06:12:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac1b291-539c-4ec2-befe-93501eb7bc3f", "eventTime": "2019-07-27T06:12:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac1b291-539c-4ec2-befe-93501eb7bc3f", "record_id": "flaws_cloudtrail:0000176:6ac1b291-539c-4ec2-befe-93501eb7bc3f", "row_index": 176, "timestamp": "2019-07-27T06:12:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac1b291-539c-4ec2-befe-93501eb7bc3f", "eventTime": "2019-07-27T06:12:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317bf28e-80ea-44de-90f0-3a1a8364d5a3", "record_id": "flaws_cloudtrail:0000177:317bf28e-80ea-44de-90f0-3a1a8364d5a3", "row_index": 177, "timestamp": "2019-07-27T06:12:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317bf28e-80ea-44de-90f0-3a1a8364d5a3", "eventTime": "2019-07-27T06:12:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317bf28e-80ea-44de-90f0-3a1a8364d5a3", "record_id": "flaws_cloudtrail:0000178:317bf28e-80ea-44de-90f0-3a1a8364d5a3", "row_index": 178, "timestamp": "2019-07-27T06:12:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317bf28e-80ea-44de-90f0-3a1a8364d5a3", "eventTime": "2019-07-27T06:12:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497b4cae-5781-4a36-a515-7ef4cda1b53f", "record_id": "flaws_cloudtrail:0000179:497b4cae-5781-4a36-a515-7ef4cda1b53f", "row_index": 179, "timestamp": "2019-07-27T06:13:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497b4cae-5781-4a36-a515-7ef4cda1b53f", "eventTime": "2019-07-27T06:13:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497b4cae-5781-4a36-a515-7ef4cda1b53f", "record_id": "flaws_cloudtrail:0000180:497b4cae-5781-4a36-a515-7ef4cda1b53f", "row_index": 180, "timestamp": "2019-07-27T06:13:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497b4cae-5781-4a36-a515-7ef4cda1b53f", "eventTime": "2019-07-27T06:13:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba065bb-0b69-4971-ae1a-f941edeacb3d", "record_id": "flaws_cloudtrail:0000181:8ba065bb-0b69-4971-ae1a-f941edeacb3d", "row_index": 181, "timestamp": "2019-07-27T06:13:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba065bb-0b69-4971-ae1a-f941edeacb3d", "eventTime": "2019-07-27T06:13:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba065bb-0b69-4971-ae1a-f941edeacb3d", "record_id": "flaws_cloudtrail:0000182:8ba065bb-0b69-4971-ae1a-f941edeacb3d", "row_index": 182, "timestamp": "2019-07-27T06:13:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba065bb-0b69-4971-ae1a-f941edeacb3d", "eventTime": "2019-07-27T06:13:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "record_id": "flaws_cloudtrail:0000183:b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "row_index": 183, "timestamp": "2019-07-27T06:14:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "eventTime": "2019-07-27T06:14:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "record_id": "flaws_cloudtrail:0000184:b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "row_index": 184, "timestamp": "2019-07-27T06:14:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b77c5c62-9f19-44a6-a575-1fcea7d7bbcb", "eventTime": "2019-07-27T06:14:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1387bea4-be5c-468b-a20a-914fd6301a91", "record_id": "flaws_cloudtrail:0000185:1387bea4-be5c-468b-a20a-914fd6301a91", "row_index": 185, "timestamp": "2019-07-27T06:14:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1387bea4-be5c-468b-a20a-914fd6301a91", "eventTime": "2019-07-27T06:14:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1387bea4-be5c-468b-a20a-914fd6301a91", "record_id": "flaws_cloudtrail:0000186:1387bea4-be5c-468b-a20a-914fd6301a91", "row_index": 186, "timestamp": "2019-07-27T06:14:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1387bea4-be5c-468b-a20a-914fd6301a91", "eventTime": "2019-07-27T06:14:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8ba4a0-b395-45c2-a36f-e641182f8eef", "record_id": "flaws_cloudtrail:0000187:1e8ba4a0-b395-45c2-a36f-e641182f8eef", "row_index": 187, "timestamp": "2019-07-27T06:15:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8ba4a0-b395-45c2-a36f-e641182f8eef", "eventTime": "2019-07-27T06:15:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8ba4a0-b395-45c2-a36f-e641182f8eef", "record_id": "flaws_cloudtrail:0000188:1e8ba4a0-b395-45c2-a36f-e641182f8eef", "row_index": 188, "timestamp": "2019-07-27T06:15:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8ba4a0-b395-45c2-a36f-e641182f8eef", "eventTime": "2019-07-27T06:15:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22659a4d-ee92-41c6-9535-8d10652f42b2", "record_id": "flaws_cloudtrail:0000189:22659a4d-ee92-41c6-9535-8d10652f42b2", "row_index": 189, "timestamp": "2019-07-27T06:15:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22659a4d-ee92-41c6-9535-8d10652f42b2", "eventTime": "2019-07-27T06:15:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22659a4d-ee92-41c6-9535-8d10652f42b2", "record_id": "flaws_cloudtrail:0000190:22659a4d-ee92-41c6-9535-8d10652f42b2", "row_index": 190, "timestamp": "2019-07-27T06:15:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22659a4d-ee92-41c6-9535-8d10652f42b2", "eventTime": "2019-07-27T06:15:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b233143d-4f41-41f0-9de9-f53bab6c1294", "record_id": "flaws_cloudtrail:0000191:3b233143d-4f41-41f0-9de9-f53bab6c1294", "row_index": 191, "timestamp": "2019-07-27T06:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b233143d-4f41-41f0-9de9-f53bab6c1294", "eventTime": "2019-07-27T06:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b233143d-4f41-41f0-9de9-f53bab6c1294", "record_id": "flaws_cloudtrail:0000192:3b233143d-4f41-41f0-9de9-f53bab6c1294", "row_index": 192, "timestamp": "2019-07-27T06:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b233143d-4f41-41f0-9de9-f53bab6c1294", "eventTime": "2019-07-27T06:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "164f68a3-73b8-4f41-9540-31a5d236ebba", "record_id": "flaws_cloudtrail:0000193:164f68a3-73b8-4f41-9540-31a5d236ebba", "row_index": 193, "timestamp": "2019-07-27T06:16:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "164f68a3-73b8-4f41-9540-31a5d236ebba", "eventTime": "2019-07-27T06:16:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "164f68a3-73b8-4f41-9540-31a5d236ebba", "record_id": "flaws_cloudtrail:0000194:164f68a3-73b8-4f41-9540-31a5d236ebba", "row_index": 194, "timestamp": "2019-07-27T06:16:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "164f68a3-73b8-4f41-9540-31a5d236ebba", "eventTime": "2019-07-27T06:16:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d07b5f-e95c-4066-9a2b-5671a999ba24", "record_id": "flaws_cloudtrail:0000195:c4d07b5f-e95c-4066-9a2b-5671a999ba24", "row_index": 195, "timestamp": "2019-07-27T06:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d07b5f-e95c-4066-9a2b-5671a999ba24", "eventTime": "2019-07-27T06:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d07b5f-e95c-4066-9a2b-5671a999ba24", "record_id": "flaws_cloudtrail:0000196:c4d07b5f-e95c-4066-9a2b-5671a999ba24", "row_index": 196, "timestamp": "2019-07-27T06:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d07b5f-e95c-4066-9a2b-5671a999ba24", "eventTime": "2019-07-27T06:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5181ff-9f46-466c-8258-d54512b51650", "record_id": "flaws_cloudtrail:0000197:9d5181ff-9f46-466c-8258-d54512b51650", "row_index": 197, "timestamp": "2019-07-27T06:17:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5181ff-9f46-466c-8258-d54512b51650", "eventTime": "2019-07-27T06:17:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5181ff-9f46-466c-8258-d54512b51650", "record_id": "flaws_cloudtrail:0000198:9d5181ff-9f46-466c-8258-d54512b51650", "row_index": 198, "timestamp": "2019-07-27T06:17:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5181ff-9f46-466c-8258-d54512b51650", "eventTime": "2019-07-27T06:17:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5013d36-f9d0-4e42-86f6-6253c42e665b", "record_id": "flaws_cloudtrail:0000199:a5013d36-f9d0-4e42-86f6-6253c42e665b", "row_index": 199, "timestamp": "2019-07-27T06:18:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5013d36-f9d0-4e42-86f6-6253c42e665b", "eventTime": "2019-07-27T06:18:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5013d36-f9d0-4e42-86f6-6253c42e665b", "record_id": "flaws_cloudtrail:0000200:a5013d36-f9d0-4e42-86f6-6253c42e665b", "row_index": 200, "timestamp": "2019-07-27T06:18:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5013d36-f9d0-4e42-86f6-6253c42e665b", "eventTime": "2019-07-27T06:18:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a13caff-8755-40ae-b8ff-704b245cc3cf", "record_id": "flaws_cloudtrail:0000201:9a13caff-8755-40ae-b8ff-704b245cc3cf", "row_index": 201, "timestamp": "2019-07-27T06:18:11Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a13caff-8755-40ae-b8ff-704b245cc3cf", "eventTime": "2019-07-27T06:18:11Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IJHSR13-5_MIfIqM-Xk_GJSmApotZ2ZEA2Eg5ZRWRS5oXrz0DiyBGVExq_EBs9q3qH5U4gDk97w2KQg5cgg_vHAqcTxfJPKXeXplTaqGn_2bTu8My7EY7rnFm49NcIYxAl1-3a1jSyMKa4T0o13V1VLo_jh3qkvUxjTQH89Nbsd68PFLXXfjY-JwnSuUyVIjDNIjPVKg_pjYe0R4LL2xcu5zow7FKWiRGXHfvuXMjbYD0aFpkdwAIMs6kkANSTfvKeeQTzFZJ5kUxysK8ApBtW-HOKqBzIFMN33clcynEG9pH_QXDVLjYRF-6FUxIDi0V_OErUL818cn63CTw9H57s_52q9AsJg8e3GgnVaLWS2U0FVsz64dw3ecwseirmynpILYdgAP7x-WyL7kPrqHRxBWHaBMl5fzkHiVHyHkp5h9Cuetg5_KtGRdGeJcqIph61VXTySSs61b28T05hzTIDFiu2pVpKtHs4CBH3EaK9pM87xdX6uvr96bMLnWB0E6BieiJn6ZsIYgJ3n8UH5yvRUe5EcVUPk_X6XtP8eoVZWfoqP8ilfUiYh7_PbWfWgisaEXRbZs1liP8872GYgD9pdn18bFmyHjz9AE4-JDZEXW3iRWQq6-C-NVTRLSy-ORKO4p5iAl8w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a13caff-8755-40ae-b8ff-704b245cc3cf", "record_id": "flaws_cloudtrail:0000202:9a13caff-8755-40ae-b8ff-704b245cc3cf", "row_index": 202, "timestamp": "2019-07-27T06:18:11Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a13caff-8755-40ae-b8ff-704b245cc3cf", "eventTime": "2019-07-27T06:18:11Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IJHSR13-5_MIfIqM-Xk_GJSmApotZ2ZEA2Eg5ZRWRS5oXrz0DiyBGVExq_EBs9q3qH5U4gDk97w2KQg5cgg_vHAqcTxfJPKXeXplTaqGn_2bTu8My7EY7rnFm49NcIYxAl1-3a1jSyMKa4T0o13V1VLo_jh3qkvUxjTQH89Nbsd68PFLXXfjY-JwnSuUyVIjDNIjPVKg_pjYe0R4LL2xcu5zow7FKWiRGXHfvuXMjbYD0aFpkdwAIMs6kkANSTfvKeeQTzFZJ5kUxysK8ApBtW-HOKqBzIFMN33clcynEG9pH_QXDVLjYRF-6FUxIDi0V_OErUL818cn63CTw9H57s_52q9AsJg8e3GgnVaLWS2U0FVsz64dw3ecwseirmynpILYdgAP7x-WyL7kPrqHRxBWHaBMl5fzkHiVHyHkp5h9Cuetg5_KtGRdGeJcqIph61VXTySSs61b28T05hzTIDFiu2pVpKtHs4CBH3EaK9pM87xdX6uvr96bMLnWB0E6BieiJn6ZsIYgJ3n8UH5yvRUe5EcVUPk_X6XtP8eoVZWfoqP8ilfUiYh7_PbWfWgisaEXRbZs1liP8872GYgD9pdn18bFmyHjz9AE4-JDZEXW3iRWQq6-C-NVTRLSy-ORKO4p5iAl8w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c95b507-d076-4a01-8e57-4741b8d0b74b", "record_id": "flaws_cloudtrail:0000203:8c95b507-d076-4a01-8e57-4741b8d0b74b", "row_index": 203, "timestamp": "2019-07-27T06:18:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c95b507-d076-4a01-8e57-4741b8d0b74b", "eventTime": "2019-07-27T06:18:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c95b507-d076-4a01-8e57-4741b8d0b74b", "record_id": "flaws_cloudtrail:0000204:8c95b507-d076-4a01-8e57-4741b8d0b74b", "row_index": 204, "timestamp": "2019-07-27T06:18:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c95b507-d076-4a01-8e57-4741b8d0b74b", "eventTime": "2019-07-27T06:18:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97391-44ae-43cc-97a9-88e36c883532", "record_id": "flaws_cloudtrail:0000205:e97391-44ae-43cc-97a9-88e36c883532", "row_index": 205, "timestamp": "2019-07-27T06:18:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97391-44ae-43cc-97a9-88e36c883532", "eventTime": "2019-07-27T06:18:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97391-44ae-43cc-97a9-88e36c883532", "record_id": "flaws_cloudtrail:0000206:e97391-44ae-43cc-97a9-88e36c883532", "row_index": 206, "timestamp": "2019-07-27T06:18:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97391-44ae-43cc-97a9-88e36c883532", "eventTime": "2019-07-27T06:18:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2e0e2c-708b-4b03-9f64-307559a6878", "record_id": "flaws_cloudtrail:0000207:7e2e0e2c-708b-4b03-9f64-307559a6878", "row_index": 207, "timestamp": "2019-07-27T06:19:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2e0e2c-708b-4b03-9f64-307559a6878", "eventTime": "2019-07-27T06:19:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2e0e2c-708b-4b03-9f64-307559a6878", "record_id": "flaws_cloudtrail:0000208:7e2e0e2c-708b-4b03-9f64-307559a6878", "row_index": 208, "timestamp": "2019-07-27T06:19:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2e0e2c-708b-4b03-9f64-307559a6878", "eventTime": "2019-07-27T06:19:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5669ad95-18e0-4d2b-bc54-94913db329a5", "record_id": "flaws_cloudtrail:0000209:5669ad95-18e0-4d2b-bc54-94913db329a5", "row_index": 209, "timestamp": "2019-07-27T06:19:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5669ad95-18e0-4d2b-bc54-94913db329a5", "eventTime": "2019-07-27T06:19:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5669ad95-18e0-4d2b-bc54-94913db329a5", "record_id": "flaws_cloudtrail:0000210:5669ad95-18e0-4d2b-bc54-94913db329a5", "row_index": 210, "timestamp": "2019-07-27T06:19:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5669ad95-18e0-4d2b-bc54-94913db329a5", "eventTime": "2019-07-27T06:19:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305df21e-e520-45cc-be33-8fbd75de637f", "record_id": "flaws_cloudtrail:0000211:305df21e-e520-45cc-be33-8fbd75de637f", "row_index": 211, "timestamp": "2019-07-27T06:19:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305df21e-e520-45cc-be33-8fbd75de637f", "eventTime": "2019-07-27T06:19:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aba0569-d3c8-4b46-9a47-fea5eb94a697", "record_id": "flaws_cloudtrail:0000212:0aba0569-d3c8-4b46-9a47-fea5eb94a697", "row_index": 212, "timestamp": "2019-07-27T06:19:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aba0569-d3c8-4b46-9a47-fea5eb94a697", "eventTime": "2019-07-27T06:19:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305df21e-e520-45cc-be33-8fbd75de637f", "record_id": "flaws_cloudtrail:0000213:305df21e-e520-45cc-be33-8fbd75de637f", "row_index": 213, "timestamp": "2019-07-27T06:19:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305df21e-e520-45cc-be33-8fbd75de637f", "eventTime": "2019-07-27T06:19:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aba0569-d3c8-4b46-9a47-fea5eb94a697", "record_id": "flaws_cloudtrail:0000214:0aba0569-d3c8-4b46-9a47-fea5eb94a697", "row_index": 214, "timestamp": "2019-07-27T06:19:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aba0569-d3c8-4b46-9a47-fea5eb94a697", "eventTime": "2019-07-27T06:19:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "record_id": "flaws_cloudtrail:0000215:1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "row_index": 215, "timestamp": "2019-07-27T06:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "eventTime": "2019-07-27T06:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "record_id": "flaws_cloudtrail:0000216:1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "row_index": 216, "timestamp": "2019-07-27T06:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a834c3e-7e8b-4dd2-b4b7-2a4b1c79db16", "eventTime": "2019-07-27T06:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "record_id": "flaws_cloudtrail:0000217:f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "row_index": 217, "timestamp": "2019-07-27T06:19:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "eventTime": "2019-07-27T06:19:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "record_id": "flaws_cloudtrail:0000218:f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "row_index": 218, "timestamp": "2019-07-27T06:19:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f459a96e-8b9d-459e-9f1d-96bb16c94e3d", "eventTime": "2019-07-27T06:19:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "[aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34eb0048-fd43-45c8-8152-c4573e72f0a9", "record_id": "flaws_cloudtrail:0000219:34eb0048-fd43-45c8-8152-c4573e72f0a9", "row_index": 219, "timestamp": "2019-07-27T06:19:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34eb0048-fd43-45c8-8152-c4573e72f0a9", "eventTime": "2019-07-27T06:19:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34eb0048-fd43-45c8-8152-c4573e72f0a9", "record_id": "flaws_cloudtrail:0000220:34eb0048-fd43-45c8-8152-c4573e72f0a9", "row_index": 220, "timestamp": "2019-07-27T06:19:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34eb0048-fd43-45c8-8152-c4573e72f0a9", "eventTime": "2019-07-27T06:19:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e8e562-6544-4ca4-898c-120de3b768f6", "record_id": "flaws_cloudtrail:0000221:84e8e562-6544-4ca4-898c-120de3b768f6", "row_index": 221, "timestamp": "2019-07-27T06:20:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e8e562-6544-4ca4-898c-120de3b768f6", "eventTime": "2019-07-27T06:20:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e8e562-6544-4ca4-898c-120de3b768f6", "record_id": "flaws_cloudtrail:0000222:84e8e562-6544-4ca4-898c-120de3b768f6", "row_index": 222, "timestamp": "2019-07-27T06:20:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e8e562-6544-4ca4-898c-120de3b768f6", "eventTime": "2019-07-27T06:20:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c979961-a510-4f28-857b-6605e0657b6f", "record_id": "flaws_cloudtrail:0000223:a9c979961-a510-4f28-857b-6605e0657b6f", "row_index": 223, "timestamp": "2019-07-27T06:20:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c979961-a510-4f28-857b-6605e0657b6f", "eventTime": "2019-07-27T06:20:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c979961-a510-4f28-857b-6605e0657b6f", "record_id": "flaws_cloudtrail:0000224:a9c979961-a510-4f28-857b-6605e0657b6f", "row_index": 224, "timestamp": "2019-07-27T06:20:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c979961-a510-4f28-857b-6605e0657b6f", "eventTime": "2019-07-27T06:20:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "record_id": "flaws_cloudtrail:0000225:6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "row_index": 225, "timestamp": "2019-07-27T06:20:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "eventTime": "2019-07-27T06:20:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f9259d-55b6-4f94-b1c5-048d803b3340", "record_id": "flaws_cloudtrail:0000226:08f9259d-55b6-4f94-b1c5-048d803b3340", "row_index": 226, "timestamp": "2019-07-27T06:20:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f9259d-55b6-4f94-b1c5-048d803b3340", "eventTime": "2019-07-27T06:20:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "record_id": "flaws_cloudtrail:0000227:6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "row_index": 227, "timestamp": "2019-07-27T06:20:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6542bfe5-df0a-45da-bbfb-2b9e701ade2c", "eventTime": "2019-07-27T06:20:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f9259d-55b6-4f94-b1c5-048d803b3340", "record_id": "flaws_cloudtrail:0000228:08f9259d-55b6-4f94-b1c5-048d803b3340", "row_index": 228, "timestamp": "2019-07-27T06:20:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f9259d-55b6-4f94-b1c5-048d803b3340", "eventTime": "2019-07-27T06:20:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee129166f-cd8f-4bb8-830f-da88752eadd7", "record_id": "flaws_cloudtrail:0000229:ee129166f-cd8f-4bb8-830f-da88752eadd7", "row_index": 229, "timestamp": "2019-07-27T06:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee129166f-cd8f-4bb8-830f-da88752eadd7", "eventTime": "2019-07-27T06:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee129166f-cd8f-4bb8-830f-da88752eadd7", "record_id": "flaws_cloudtrail:0000230:ee129166f-cd8f-4bb8-830f-da88752eadd7", "row_index": 230, "timestamp": "2019-07-27T06:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee129166f-cd8f-4bb8-830f-da88752eadd7", "eventTime": "2019-07-27T06:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7276c184-259d-4814-a882-672209c07f70", "record_id": "flaws_cloudtrail:0000231:7276c184-259d-4814-a882-672209c07f70", "row_index": 231, "timestamp": "2019-07-27T06:21:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7276c184-259d-4814-a882-672209c07f70", "eventTime": "2019-07-27T06:21:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7276c184-259d-4814-a882-672209c07f70", "record_id": "flaws_cloudtrail:0000232:7276c184-259d-4814-a882-672209c07f70", "row_index": 232, "timestamp": "2019-07-27T06:21:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7276c184-259d-4814-a882-672209c07f70", "eventTime": "2019-07-27T06:21:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "record_id": "flaws_cloudtrail:0000233:a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "row_index": 233, "timestamp": "2019-07-27T06:22:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "eventTime": "2019-07-27T06:22:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "record_id": "flaws_cloudtrail:0000234:a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "row_index": 234, "timestamp": "2019-07-27T06:22:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b0e8ac-70a4-4edf-aa8b-4f809edc1198", "eventTime": "2019-07-27T06:22:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01f6e4da-c707-4661-bf0c-044eedce3dde", "record_id": "flaws_cloudtrail:0000235:01f6e4da-c707-4661-bf0c-044eedce3dde", "row_index": 235, "timestamp": "2019-07-27T06:22:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01f6e4da-c707-4661-bf0c-044eedce3dde", "eventTime": "2019-07-27T06:22:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01f6e4da-c707-4661-bf0c-044eedce3dde", "record_id": "flaws_cloudtrail:0000236:01f6e4da-c707-4661-bf0c-044eedce3dde", "row_index": 236, "timestamp": "2019-07-27T06:22:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01f6e4da-c707-4661-bf0c-044eedce3dde", "eventTime": "2019-07-27T06:22:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85ecf7f-d067-4e25-a7be-1323b3b4be77", "record_id": "flaws_cloudtrail:0000237:f85ecf7f-d067-4e25-a7be-1323b3b4be77", "row_index": 237, "timestamp": "2019-07-27T06:22:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85ecf7f-d067-4e25-a7be-1323b3b4be77", "eventTime": "2019-07-27T06:22:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85ecf7f-d067-4e25-a7be-1323b3b4be77", "record_id": "flaws_cloudtrail:0000238:f85ecf7f-d067-4e25-a7be-1323b3b4be77", "row_index": 238, "timestamp": "2019-07-27T06:22:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85ecf7f-d067-4e25-a7be-1323b3b4be77", "eventTime": "2019-07-27T06:22:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "record_id": "flaws_cloudtrail:0000239:c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "row_index": 239, "timestamp": "2019-07-27T06:23:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "eventTime": "2019-07-27T06:23:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAORPWDFBR6TFDMUFU", "expiration": "Jul 27, 2019 7:23:11 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "record_id": "flaws_cloudtrail:0000240:c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "row_index": 240, "timestamp": "2019-07-27T06:23:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f2f023-451e-4b38-ae97-b3eb2b54d7be", "eventTime": "2019-07-27T06:23:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAORPWDFBR6TFDMUFU", "expiration": "Jul 27, 2019 7:23:11 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6adf1a11-d118-4eb3-9165-b273c157ce08", "record_id": "flaws_cloudtrail:0000241:6adf1a11-d118-4eb3-9165-b273c157ce08", "row_index": 241, "timestamp": "2019-07-27T06:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6adf1a11-d118-4eb3-9165-b273c157ce08", "eventTime": "2019-07-27T06:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA76EKWAO85QAPTLQA", "expiration": "Jul 27, 2019 12:38:40 PM", "sessionToken": "AgoJb3JpZ2luX2VjEMf//////////wEaCXVzLXdlc3QtMiJIMEYCIQCCiTlwVl0qzFJ11y0Fnjof/iiW3Wg86/PzLTXJ4HW4UwIhAMcP7xslCeqb4roLFGvPK0um0DZnivDxBiAm8+4hWbleKtoDCEAQABoMOTc1NDI2MjYyMDI5Igzjbfl9PtPlNURB0ZEqtwNA36+1o86dxeyOvs0ggigX+xarBLJyhk1WvmC0GP73rE7PBggvykddxu2eOMsCCE446dCXxZDJPROZjIS/iL8p+djo/LRXRUHMO1k7Yad0c08Vo5V/wiJaPPJZEtwp8lL6TjJ7dU1nleVjJsPGv4wkh1f1g6BaICWddmRpLzf5NEax/5I/oGMke4LDtTzrkrZ+X2JmVdnHU0mi27RoKKAJHyxo6FplHkaucdCRd7ZEH4qCrBWhAoisiLEUNXo0FyzMO720Bu091Ep6abHTS91z45Mm9u5oIQgGT0Du79vfgE9r7YI+GsdUoJPC/Gej75SaBkN7WezBuaFjez8YjT/O+2dYtvfd6uD82ZwDjwkjkOj440iM1YLwoiGLU6ElADLxj+oT5yeqCv9YdFHtJSIRJequDqsKdHYho916ubQakWZ+RtBYnXiGJF+So5QRO0GNNZJlBeVAAc/d9p74WubX0AHjaJTqcy7wBo7I5Eh4rxF7l/jVTP8N8XSD9kirCPdRbABFgdEP47KKIwl9QtSt5eS1UZQdJRNCzFTPppwMMlv3/hPCBu4jO+mqdyyQHwBLzZZzxuOeMMLf7+kFOrMBb9mk33mBwyh1fSHZUgIzX0HyJUEVt2bzNiaeqHhxZs02u1UhIvC94CSMiCsPIi9eYX5SubUDGAvQfbWZpoFs5u0mmI7rt2+3RKj84BuunYczJBQR8i4opTRcarXS7afZ8rUgC9CYFioZq6tXEjVnITqbwoou2d8ZCiuawpGac8ZUr4/nHHfzjF0P0vyGK6tJn4RAdz1Pc139K3uu6s3j8RMJ9vkKiHwraBqHbGNJbW2zOao="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6adf1a11-d118-4eb3-9165-b273c157ce08", "record_id": "flaws_cloudtrail:0000242:6adf1a11-d118-4eb3-9165-b273c157ce08", "row_index": 242, "timestamp": "2019-07-27T06:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6adf1a11-d118-4eb3-9165-b273c157ce08", "eventTime": "2019-07-27T06:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA76EKWAO85QAPTLQA", "expiration": "Jul 27, 2019 12:38:40 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d80d708c-5e39-4bbf-a80d-968080c6f3c6", "record_id": "flaws_cloudtrail:0000243:d80d708c-5e39-4bbf-a80d-968080c6f3c6", "row_index": 243, "timestamp": "2019-07-27T06:37:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.249.6.80", "user_agent": "[aws-cli/1.16.57 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.126]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d80d708c-5e39-4bbf-a80d-968080c6f3c6", "eventTime": "2019-07-27T06:37:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.249.6.80", "userAgent": "[aws-cli/1.16.57 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.126]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d80d708c-5e39-4bbf-a80d-968080c6f3c6", "record_id": "flaws_cloudtrail:0000244:d80d708c-5e39-4bbf-a80d-968080c6f3c6", "row_index": 244, "timestamp": "2019-07-27T06:37:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.249.6.80", "user_agent": "[aws-cli/1.16.57 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.126]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d80d708c-5e39-4bbf-a80d-968080c6f3c6", "eventTime": "2019-07-27T06:37:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.249.6.80", "userAgent": "[aws-cli/1.16.57 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.126]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52433ccf-9798-4b41-8b32-488178e9", "record_id": "flaws_cloudtrail:0000245:52433ccf-9798-4b41-8b32-488178e9", "row_index": 245, "timestamp": "2019-07-27T06:40:45Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52433ccf-9798-4b41-8b32-488178e9", "eventTime": "2019-07-27T06:40:45Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: km6i5e9VFukY93kDUVCTE3nhRp3SN1v90_7vwxNYrCr1222F-JgkNt2FX-H10fzX96RcLQEecVuM5W0835UreCfLRGhg1Iaqsa6pLHyNeufgJSsV120TGs2Dtpj2ZFi8TY067kAEUO5LJDgQZDMz5N0lTatsCPkriSORMEolGKIh56JwQ3t8is-2xeHxy9dC5XfwwyDNXp60-l2pFJ2-vFLKlzI7Z27q1YIN_l4OMMdvYUsQkrWQMc8n8TsG1oy777BK6qzfG3jyZphwe3krwkmB_imyd6VFK2VKKVjzhKqgVNIYw96XQXG4j8S6uXyDGp66-AmrwiS4BW7MBSav4YJlFtb0vP0svb8Hex22GA4U0380u9qLQDS3Y-2emgHFy_tFPPM7ou_bFX-C3HRgn4mGQ26MQu0Kd6FP03oXj1iGaYejicjH866LwVUaLhfIYRoa-DF-AVCK17VZ4oJjPbYYzjs8w5gLeqxTz2ZTDlGQS1U1r43pEXNV_P8qLhMimY2edrL0uHH-GohxGoPaVlKkQp1u4DYc49j48kQtwLBwdgBqLDvGT0Xnb4IwDTKPiiKL6_3eLGK4Fsl-g-VtyvJ1fDdXo1JLU5nH3iDaeZaq8eeCpbvd_vWaGlLldsrnArhzPEBE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52433ccf-9798-4b41-8b32-488178e9", "record_id": "flaws_cloudtrail:0000246:52433ccf-9798-4b41-8b32-488178e9", "row_index": 246, "timestamp": "2019-07-27T06:40:45Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52433ccf-9798-4b41-8b32-488178e9", "eventTime": "2019-07-27T06:40:45Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: km6i5e9VFukY93kDUVCTE3nhRp3SN1v90_7vwxNYrCr1222F-JgkNt2FX-H10fzX96RcLQEecVuM5W0835UreCfLRGhg1Iaqsa6pLHyNeufgJSsV120TGs2Dtpj2ZFi8TY067kAEUO5LJDgQZDMz5N0lTatsCPkriSORMEolGKIh56JwQ3t8is-2xeHxy9dC5XfwwyDNXp60-l2pFJ2-vFLKlzI7Z27q1YIN_l4OMMdvYUsQkrWQMc8n8TsG1oy777BK6qzfG3jyZphwe3krwkmB_imyd6VFK2VKKVjzhKqgVNIYw96XQXG4j8S6uXyDGp66-AmrwiS4BW7MBSav4YJlFtb0vP0svb8Hex22GA4U0380u9qLQDS3Y-2emgHFy_tFPPM7ou_bFX-C3HRgn4mGQ26MQu0Kd6FP03oXj1iGaYejicjH866LwVUaLhfIYRoa-DF-AVCK17VZ4oJjPbYYzjs8w5gLeqxTz2ZTDlGQS1U1r43pEXNV_P8qLhMimY2edrL0uHH-GohxGoPaVlKkQp1u4DYc49j48kQtwLBwdgBqLDvGT0Xnb4IwDTKPiiKL6_3eLGK4Fsl-g-VtyvJ1fDdXo1JLU5nH3iDaeZaq8eeCpbvd_vWaGlLldsrnArhzPEBE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "record_id": "flaws_cloudtrail:0000247:ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "row_index": 247, "timestamp": "2019-07-27T06:59:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "eventTime": "2019-07-27T06:59:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "record_id": "flaws_cloudtrail:0000248:ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "row_index": 248, "timestamp": "2019-07-27T06:59:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce0ec90e-7e43-4258-aec9-37d5e2ff2a30", "eventTime": "2019-07-27T06:59:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a0107b-2bee-4118-a601-bef2830aed95", "record_id": "flaws_cloudtrail:0000249:12a0107b-2bee-4118-a601-bef2830aed95", "row_index": 249, "timestamp": "2019-07-27T07:02:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a0107b-2bee-4118-a601-bef2830aed95", "eventTime": "2019-07-27T07:02:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a0107b-2bee-4118-a601-bef2830aed95", "record_id": "flaws_cloudtrail:0000250:12a0107b-2bee-4118-a601-bef2830aed95", "row_index": 250, "timestamp": "2019-07-27T07:02:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a0107b-2bee-4118-a601-bef2830aed95", "eventTime": "2019-07-27T07:02:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03229-2628-4cf1-9a1f-905f70ac883b", "record_id": "flaws_cloudtrail:0000251:b03229-2628-4cf1-9a1f-905f70ac883b", "row_index": 251, "timestamp": "2019-07-27T07:03:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA76EKWAO85QAPTLQA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "9.159.251.3", "user_agent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03229-2628-4cf1-9a1f-905f70ac883b", "eventTime": "2019-07-27T07:03:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA76EKWAO85QAPTLQA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T06:31:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03229-2628-4cf1-9a1f-905f70ac883b", "record_id": "flaws_cloudtrail:0000252:b03229-2628-4cf1-9a1f-905f70ac883b", "row_index": 252, "timestamp": "2019-07-27T07:03:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA76EKWAO85QAPTLQA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "9.159.251.3", "user_agent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03229-2628-4cf1-9a1f-905f70ac883b", "eventTime": "2019-07-27T07:03:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA76EKWAO85QAPTLQA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T06:31:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42047-fcb8-468f-a486-eb3e6020a532", "record_id": "flaws_cloudtrail:0000253:42047-fcb8-468f-a486-eb3e6020a532", "row_index": 253, "timestamp": "2019-07-27T07:06:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42047-fcb8-468f-a486-eb3e6020a532", "eventTime": "2019-07-27T07:06:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42047-fcb8-468f-a486-eb3e6020a532", "record_id": "flaws_cloudtrail:0000254:42047-fcb8-468f-a486-eb3e6020a532", "row_index": 254, "timestamp": "2019-07-27T07:06:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42047-fcb8-468f-a486-eb3e6020a532", "eventTime": "2019-07-27T07:06:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d528738-3d83-431c-8130-0510bcd82d05", "record_id": "flaws_cloudtrail:0000255:d528738-3d83-431c-8130-0510bcd82d05", "row_index": 255, "timestamp": "2019-07-27T07:06:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA76EKWAO85QAPTLQA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "9.159.251.3", "user_agent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d528738-3d83-431c-8130-0510bcd82d05", "eventTime": "2019-07-27T07:06:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA76EKWAO85QAPTLQA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T06:31:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d528738-3d83-431c-8130-0510bcd82d05", "record_id": "flaws_cloudtrail:0000256:d528738-3d83-431c-8130-0510bcd82d05", "row_index": 256, "timestamp": "2019-07-27T07:06:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA76EKWAO85QAPTLQA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "9.159.251.3", "user_agent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d528738-3d83-431c-8130-0510bcd82d05", "eventTime": "2019-07-27T07:06:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "[aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA76EKWAO85QAPTLQA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T06:31:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a3c20b-68dc-4897-8a86-9715fecd5ea8", "record_id": "flaws_cloudtrail:0000257:98a3c20b-68dc-4897-8a86-9715fecd5ea8", "row_index": 257, "timestamp": "2019-07-27T07:07:10Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a3c20b-68dc-4897-8a86-9715fecd5ea8", "eventTime": "2019-07-27T07:07:10Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a3c20b-68dc-4897-8a86-9715fecd5ea8", "record_id": "flaws_cloudtrail:0000258:98a3c20b-68dc-4897-8a86-9715fecd5ea8", "row_index": 258, "timestamp": "2019-07-27T07:07:10Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a3c20b-68dc-4897-8a86-9715fecd5ea8", "eventTime": "2019-07-27T07:07:10Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fa3bee-0958-43e5-b0c3-4cdcda301717", "record_id": "flaws_cloudtrail:0000259:95fa3bee-0958-43e5-b0c3-4cdcda301717", "row_index": 259, "timestamp": "2019-07-27T07:07:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fa3bee-0958-43e5-b0c3-4cdcda301717", "eventTime": "2019-07-27T07:07:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fa3bee-0958-43e5-b0c3-4cdcda301717", "record_id": "flaws_cloudtrail:0000260:95fa3bee-0958-43e5-b0c3-4cdcda301717", "row_index": 260, "timestamp": "2019-07-27T07:07:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "[aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fa3bee-0958-43e5-b0c3-4cdcda301717", "eventTime": "2019-07-27T07:07:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "[aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a363383c-4f5f-40f7-ace6-d34f059575cb0", "record_id": "flaws_cloudtrail:0000261:5a363383c-4f5f-40f7-ace6-d34f059575cb0", "row_index": 261, "timestamp": "2019-07-27T07:09:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a363383c-4f5f-40f7-ace6-d34f059575cb0", "eventTime": "2019-07-27T07:09:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a363383c-4f5f-40f7-ace6-d34f059575cb0", "record_id": "flaws_cloudtrail:0000262:5a363383c-4f5f-40f7-ace6-d34f059575cb0", "row_index": 262, "timestamp": "2019-07-27T07:09:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a363383c-4f5f-40f7-ace6-d34f059575cb0", "eventTime": "2019-07-27T07:09:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "record_id": "flaws_cloudtrail:0000263:bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "row_index": 263, "timestamp": "2019-07-27T07:09:32Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "eventTime": "2019-07-27T07:09:32Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "record_id": "flaws_cloudtrail:0000264:bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "row_index": 264, "timestamp": "2019-07-27T07:09:32Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde478d7-fbb1-465f-a2b7-bcfcf4f4aeb3", "eventTime": "2019-07-27T07:09:32Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933abf22-4508-407a-81ed-1a37bd886a22", "record_id": "flaws_cloudtrail:0000265:933abf22-4508-407a-81ed-1a37bd886a22", "row_index": 265, "timestamp": "2019-07-27T07:11:48Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933abf22-4508-407a-81ed-1a37bd886a22", "eventTime": "2019-07-27T07:11:48Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933abf22-4508-407a-81ed-1a37bd886a22", "record_id": "flaws_cloudtrail:0000266:933abf22-4508-407a-81ed-1a37bd886a22", "row_index": 266, "timestamp": "2019-07-27T07:11:48Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933abf22-4508-407a-81ed-1a37bd886a22", "eventTime": "2019-07-27T07:11:48Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bed17b-a801-4f63-a95b-ec1a41925f64", "record_id": "flaws_cloudtrail:0000267:b8bed17b-a801-4f63-a95b-ec1a41925f64", "row_index": 267, "timestamp": "2019-07-27T07:12:08Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bed17b-a801-4f63-a95b-ec1a41925f64", "eventTime": "2019-07-27T07:12:08Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bed17b-a801-4f63-a95b-ec1a41925f64", "record_id": "flaws_cloudtrail:0000268:b8bed17b-a801-4f63-a95b-ec1a41925f64", "row_index": 268, "timestamp": "2019-07-27T07:12:08Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bed17b-a801-4f63-a95b-ec1a41925f64", "eventTime": "2019-07-27T07:12:08Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccb14c4f-b632-4869-b538-2360deb841e1", "record_id": "flaws_cloudtrail:0000269:ccb14c4f-b632-4869-b538-2360deb841e1", "row_index": 269, "timestamp": "2019-07-27T07:12:09Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccb14c4f-b632-4869-b538-2360deb841e1", "eventTime": "2019-07-27T07:12:09Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "AA5qPe4JM/UzJDcctk02uttsRltzx5WneELsgYhB6gfFg7haz2Tjm1SrNtCBpeGp12SXKprZo4x3uXksl2wTVR+d7XQj0P4l18dkrGa6F7wVzQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccb14c4f-b632-4869-b538-2360deb841e1", "record_id": "flaws_cloudtrail:0000270:ccb14c4f-b632-4869-b538-2360deb841e1", "row_index": 270, "timestamp": "2019-07-27T07:12:09Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccb14c4f-b632-4869-b538-2360deb841e1", "eventTime": "2019-07-27T07:12:09Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "AA5qPe4JM/UzJDcctk02uttsRltzx5WneELsgYhB6gfFg7haz2Tjm1SrNtCBpeGp12SXKprZo4x3uXksl2wTVR+d7XQj0P4l18dkrGa6F7wVzQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f12f5d9-3314-494f-8b67-0ec79026aa62", "record_id": "flaws_cloudtrail:0000271:7f12f5d9-3314-494f-8b67-0ec79026aa62", "row_index": 271, "timestamp": "2019-07-27T07:12:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f12f5d9-3314-494f-8b67-0ec79026aa62", "eventTime": "2019-07-27T07:12:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "AA1RIqMoFwtLu57I/4QA9B5PeMAcFUmuMr+S1E7FsDnU5DJ82MsJNxYwhWEwq4+axQjfD66ROzsYbI850snoM4EkCO//Lt/M6VoXtjxAeAfrLA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "record_id": "flaws_cloudtrail:0000272:ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "row_index": 272, "timestamp": "2019-07-27T07:12:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "eventTime": "2019-07-27T07:12:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ACbkYaFBuCwwbe+o7c6n46qMNq8oN3ge3VY1DCMRWIGM05ROwGHvme3/dboFa62EJuIQbuWYt0yYSZtMi0q1gb0INffo8KQSNwIW9OntH5f3Gw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f12f5d9-3314-494f-8b67-0ec79026aa62", "record_id": "flaws_cloudtrail:0000273:7f12f5d9-3314-494f-8b67-0ec79026aa62", "row_index": 273, "timestamp": "2019-07-27T07:12:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f12f5d9-3314-494f-8b67-0ec79026aa62", "eventTime": "2019-07-27T07:12:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "AA1RIqMoFwtLu57I/4QA9B5PeMAcFUmuMr+S1E7FsDnU5DJ82MsJNxYwhWEwq4+axQjfD66ROzsYbI850snoM4EkCO//Lt/M6VoXtjxAeAfrLA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "record_id": "flaws_cloudtrail:0000274:ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "row_index": 274, "timestamp": "2019-07-27T07:12:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab12ff1d-9b95-48ad-b5f5-0843cafc2db4", "eventTime": "2019-07-27T07:12:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ACbkYaFBuCwwbe+o7c6n46qMNq8oN3ge3VY1DCMRWIGM05ROwGHvme3/dboFa62EJuIQbuWYt0yYSZtMi0q1gb0INffo8KQSNwIW9OntH5f3Gw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "record_id": "flaws_cloudtrail:0000275:56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "row_index": 275, "timestamp": "2019-07-27T07:12:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "eventTime": "2019-07-27T07:12:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ABHkM9luJ7DcWQjB6XKcWQd9V3eT9Z3U2GXfaPXa23EFpsO4Lov0SqBrpGxtgoArlA+QCZdUhujylKVQzT7/3YXUEwmZDSF6QzOcuda1jWyKqA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5cee6e2-4ff5-4be9-aded-d69c3556113c", "record_id": "flaws_cloudtrail:0000276:a5cee6e2-4ff5-4be9-aded-d69c3556113c", "row_index": 276, "timestamp": "2019-07-27T07:12:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5cee6e2-4ff5-4be9-aded-d69c3556113c", "eventTime": "2019-07-27T07:12:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ABryNE1IqYqanM9XwI+tj1wpBpg9pn9Q4JmbzvO6hxH8D4uinZe1ILtVFAnUx7BCMkNQiOO0JaopSAwu9dCjCMlZ+Y7fJjaksUAUEtYlWi747Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "record_id": "flaws_cloudtrail:0000277:56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "row_index": 277, "timestamp": "2019-07-27T07:12:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f846b0-48aa-4fe8-a4ae-3ca4f46bdc11", "eventTime": "2019-07-27T07:12:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ABHkM9luJ7DcWQjB6XKcWQd9V3eT9Z3U2GXfaPXa23EFpsO4Lov0SqBrpGxtgoArlA+QCZdUhujylKVQzT7/3YXUEwmZDSF6QzOcuda1jWyKqA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5cee6e2-4ff5-4be9-aded-d69c3556113c", "record_id": "flaws_cloudtrail:0000278:a5cee6e2-4ff5-4be9-aded-d69c3556113c", "row_index": 278, "timestamp": "2019-07-27T07:12:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5cee6e2-4ff5-4be9-aded-d69c3556113c", "eventTime": "2019-07-27T07:12:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "AWS", "marker": "ABryNE1IqYqanM9XwI+tj1wpBpg9pn9Q4JmbzvO6hxH8D4uinZe1ILtVFAnUx7BCMkNQiOO0JaopSAwu9dCjCMlZ+Y7fJjaksUAUEtYlWi747Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb937ebf-2553-4477-9b48-c9f21d724526", "record_id": "flaws_cloudtrail:0000279:eb937ebf-2553-4477-9b48-c9f21d724526", "row_index": 279, "timestamp": "2019-07-27T07:13:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb937ebf-2553-4477-9b48-c9f21d724526", "eventTime": "2019-07-27T07:13:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271b6269-a2d4-43d9-9556-796b88141f0", "record_id": "flaws_cloudtrail:0000280:271b6269-a2d4-43d9-9556-796b88141f0", "row_index": 280, "timestamp": "2019-07-27T07:13:18Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271b6269-a2d4-43d9-9556-796b88141f0", "eventTime": "2019-07-27T07:13:18Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb937ebf-2553-4477-9b48-c9f21d724526", "record_id": "flaws_cloudtrail:0000281:eb937ebf-2553-4477-9b48-c9f21d724526", "row_index": 281, "timestamp": "2019-07-27T07:13:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb937ebf-2553-4477-9b48-c9f21d724526", "eventTime": "2019-07-27T07:13:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271b6269-a2d4-43d9-9556-796b88141f0", "record_id": "flaws_cloudtrail:0000282:271b6269-a2d4-43d9-9556-796b88141f0", "row_index": 282, "timestamp": "2019-07-27T07:13:18Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271b6269-a2d4-43d9-9556-796b88141f0", "eventTime": "2019-07-27T07:13:18Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17951af-4db2-4253-8666-e23b7ece77f5", "record_id": "flaws_cloudtrail:0000283:17951af-4db2-4253-8666-e23b7ece77f5", "row_index": 283, "timestamp": "2019-07-27T07:14:16Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17951af-4db2-4253-8666-e23b7ece77f5", "eventTime": "2019-07-27T07:14:16Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17951af-4db2-4253-8666-e23b7ece77f5", "record_id": "flaws_cloudtrail:0000284:17951af-4db2-4253-8666-e23b7ece77f5", "row_index": 284, "timestamp": "2019-07-27T07:14:16Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17951af-4db2-4253-8666-e23b7ece77f5", "eventTime": "2019-07-27T07:14:16Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f7af76-1e4b-41ab-a140-5aaca41de96b", "record_id": "flaws_cloudtrail:0000285:48f7af76-1e4b-41ab-a140-5aaca41de96b", "row_index": 285, "timestamp": "2019-07-27T07:14:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f7af76-1e4b-41ab-a140-5aaca41de96b", "eventTime": "2019-07-27T07:14:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f7af76-1e4b-41ab-a140-5aaca41de96b", "record_id": "flaws_cloudtrail:0000286:48f7af76-1e4b-41ab-a140-5aaca41de96b", "row_index": 286, "timestamp": "2019-07-27T07:14:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f7af76-1e4b-41ab-a140-5aaca41de96b", "eventTime": "2019-07-27T07:14:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "record_id": "flaws_cloudtrail:0000287:b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "row_index": 287, "timestamp": "2019-07-27T07:14:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "eventTime": "2019-07-27T07:14:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "record_id": "flaws_cloudtrail:0000288:b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "row_index": 288, "timestamp": "2019-07-27T07:14:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c9705f-f710-4ed6-ae6b-ecb0d010c82d", "eventTime": "2019-07-27T07:14:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e319bf43-8b1f-4c25-8902-5a98ad09e357", "record_id": "flaws_cloudtrail:0000289:e319bf43-8b1f-4c25-8902-5a98ad09e357", "row_index": 289, "timestamp": "2019-07-27T07:15:46Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e319bf43-8b1f-4c25-8902-5a98ad09e357", "eventTime": "2019-07-27T07:15:46Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e319bf43-8b1f-4c25-8902-5a98ad09e357", "record_id": "flaws_cloudtrail:0000290:e319bf43-8b1f-4c25-8902-5a98ad09e357", "row_index": 290, "timestamp": "2019-07-27T07:15:46Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e319bf43-8b1f-4c25-8902-5a98ad09e357", "eventTime": "2019-07-27T07:15:46Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "record_id": "flaws_cloudtrail:0000291:bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "row_index": 291, "timestamp": "2019-07-27T07:16:29Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "eventTime": "2019-07-27T07:16:29Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "record_id": "flaws_cloudtrail:0000292:bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "row_index": 292, "timestamp": "2019-07-27T07:16:29Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd933a0-fc7b-49d0-b81a-5cfa0aec089e", "eventTime": "2019-07-27T07:16:29Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "record_id": "flaws_cloudtrail:0000293:9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "row_index": 293, "timestamp": "2019-07-27T07:16:35Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "eventTime": "2019-07-27T07:16:35Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "record_id": "flaws_cloudtrail:0000294:9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "row_index": 294, "timestamp": "2019-07-27T07:16:35Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f5f3162-02f6-4f4e-b7cd-ef7d1f85d27f", "eventTime": "2019-07-27T07:16:35Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30164c6-dde8-4169-9f77-c8f73dd666f3", "record_id": "flaws_cloudtrail:0000295:30164c6-dde8-4169-9f77-c8f73dd666f3", "row_index": 295, "timestamp": "2019-07-27T07:17:08Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30164c6-dde8-4169-9f77-c8f73dd666f3", "eventTime": "2019-07-27T07:17:08Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30164c6-dde8-4169-9f77-c8f73dd666f3", "record_id": "flaws_cloudtrail:0000296:30164c6-dde8-4169-9f77-c8f73dd666f3", "row_index": 296, "timestamp": "2019-07-27T07:17:08Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30164c6-dde8-4169-9f77-c8f73dd666f3", "eventTime": "2019-07-27T07:17:08Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e061c776-2b6e-4156-83e3-a5751b503fbf", "record_id": "flaws_cloudtrail:0000297:e061c776-2b6e-4156-83e3-a5751b503fbf", "row_index": 297, "timestamp": "2019-07-27T07:17:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e061c776-2b6e-4156-83e3-a5751b503fbf", "eventTime": "2019-07-27T07:17:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e061c776-2b6e-4156-83e3-a5751b503fbf", "record_id": "flaws_cloudtrail:0000298:e061c776-2b6e-4156-83e3-a5751b503fbf", "row_index": 298, "timestamp": "2019-07-27T07:17:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e061c776-2b6e-4156-83e3-a5751b503fbf", "eventTime": "2019-07-27T07:17:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "record_id": "flaws_cloudtrail:0000299:7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "row_index": 299, "timestamp": "2019-07-27T07:17:58Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "eventTime": "2019-07-27T07:17:58Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "record_id": "flaws_cloudtrail:0000300:7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "row_index": 300, "timestamp": "2019-07-27T07:17:58Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ab8b0cd-52cb-4161-b1a7-212a6fcf8de9", "eventTime": "2019-07-27T07:17:58Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d31de6-232f-4951-a858-334e19215d37", "record_id": "flaws_cloudtrail:0000301:77d31de6-232f-4951-a858-334e19215d37", "row_index": 301, "timestamp": "2019-07-27T07:18:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d31de6-232f-4951-a858-334e19215d37", "eventTime": "2019-07-27T07:18:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d31de6-232f-4951-a858-334e19215d37", "record_id": "flaws_cloudtrail:0000302:77d31de6-232f-4951-a858-334e19215d37", "row_index": 302, "timestamp": "2019-07-27T07:18:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d31de6-232f-4951-a858-334e19215d37", "eventTime": "2019-07-27T07:18:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8b9546-e8e8-42d4-9395-93612df305cd", "record_id": "flaws_cloudtrail:0000303:de8b9546-e8e8-42d4-9395-93612df305cd", "row_index": 303, "timestamp": "2019-07-27T07:18:38Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8b9546-e8e8-42d4-9395-93612df305cd", "eventTime": "2019-07-27T07:18:38Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8b9546-e8e8-42d4-9395-93612df305cd", "record_id": "flaws_cloudtrail:0000304:de8b9546-e8e8-42d4-9395-93612df305cd", "row_index": 304, "timestamp": "2019-07-27T07:18:38Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8b9546-e8e8-42d4-9395-93612df305cd", "eventTime": "2019-07-27T07:18:38Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361b8e21-a7ab-4bd5-810a-90674b46e78b", "record_id": "flaws_cloudtrail:0000305:361b8e21-a7ab-4bd5-810a-90674b46e78b", "row_index": 305, "timestamp": "2019-07-27T07:18:55Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361b8e21-a7ab-4bd5-810a-90674b46e78b", "eventTime": "2019-07-27T07:18:55Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361b8e21-a7ab-4bd5-810a-90674b46e78b", "record_id": "flaws_cloudtrail:0000306:361b8e21-a7ab-4bd5-810a-90674b46e78b", "row_index": 306, "timestamp": "2019-07-27T07:18:55Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361b8e21-a7ab-4bd5-810a-90674b46e78b", "eventTime": "2019-07-27T07:18:55Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "record_id": "flaws_cloudtrail:0000307:855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "row_index": 307, "timestamp": "2019-07-27T07:19:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "eventTime": "2019-07-27T07:19:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "record_id": "flaws_cloudtrail:0000308:855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "row_index": 308, "timestamp": "2019-07-27T07:19:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855e2e28-b3f2-4d9b-8b90-d132b1e393eb", "eventTime": "2019-07-27T07:19:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f382cbc3-59df-4760-8e9b-93976ce83961", "record_id": "flaws_cloudtrail:0000309:f382cbc3-59df-4760-8e9b-93976ce83961", "row_index": 309, "timestamp": "2019-07-27T07:19:30Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f382cbc3-59df-4760-8e9b-93976ce83961", "eventTime": "2019-07-27T07:19:30Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f382cbc3-59df-4760-8e9b-93976ce83961", "record_id": "flaws_cloudtrail:0000310:f382cbc3-59df-4760-8e9b-93976ce83961", "row_index": 310, "timestamp": "2019-07-27T07:19:30Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f382cbc3-59df-4760-8e9b-93976ce83961", "eventTime": "2019-07-27T07:19:30Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "record_id": "flaws_cloudtrail:0000311:70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "row_index": 311, "timestamp": "2019-07-27T07:19:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "eventTime": "2019-07-27T07:19:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "record_id": "flaws_cloudtrail:0000312:70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "row_index": 312, "timestamp": "2019-07-27T07:19:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70c768c6-10a0-40c3-83c6-32afcc4e7ae6", "eventTime": "2019-07-27T07:19:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "record_id": "flaws_cloudtrail:0000313:d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "row_index": 313, "timestamp": "2019-07-27T07:20:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "eventTime": "2019-07-27T07:20:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "record_id": "flaws_cloudtrail:0000314:d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "row_index": 314, "timestamp": "2019-07-27T07:20:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d94ad5fd-8ee4-4e78-9e3a-7b05b1ca2ef0", "eventTime": "2019-07-27T07:20:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "record_id": "flaws_cloudtrail:0000315:f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "row_index": 315, "timestamp": "2019-07-27T07:20:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "eventTime": "2019-07-27T07:20:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "record_id": "flaws_cloudtrail:0000316:f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "row_index": 316, "timestamp": "2019-07-27T07:20:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f342b7b5-3b66-4c3f-8e87-6ca2ca7f11fa", "eventTime": "2019-07-27T07:20:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "record_id": "flaws_cloudtrail:0000317:0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "row_index": 317, "timestamp": "2019-07-27T07:20:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "eventTime": "2019-07-27T07:20:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "record_id": "flaws_cloudtrail:0000318:0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "row_index": 318, "timestamp": "2019-07-27T07:20:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d27f68e-03ce-41ba-9de6-84b9e7f265a9", "eventTime": "2019-07-27T07:20:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e7d266-4e3e-4d30-90d9-cd0bb07021", "record_id": "flaws_cloudtrail:0000319:30e7d266-4e3e-4d30-90d9-cd0bb07021", "row_index": 319, "timestamp": "2019-07-27T07:22:06Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e7d266-4e3e-4d30-90d9-cd0bb07021", "eventTime": "2019-07-27T07:22:06Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e7d266-4e3e-4d30-90d9-cd0bb07021", "record_id": "flaws_cloudtrail:0000320:30e7d266-4e3e-4d30-90d9-cd0bb07021", "row_index": 320, "timestamp": "2019-07-27T07:22:06Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.8.1.250", "user_agent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e7d266-4e3e-4d30-90d9-cd0bb07021", "eventTime": "2019-07-27T07:22:06Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.8.1.250", "userAgent": "aws-cli/1.16.207 Python/3.6.0 Windows/10 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "record_id": "flaws_cloudtrail:0000321:0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "row_index": 321, "timestamp": "2019-07-27T07:22:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "eventTime": "2019-07-27T07:22:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "record_id": "flaws_cloudtrail:0000322:0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "row_index": 322, "timestamp": "2019-07-27T07:22:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0365cb4c-9890-4f2a-8654-7da8a8ba6cd8", "eventTime": "2019-07-27T07:22:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e953f00f-c367-428b-9961-b16f2bc552f7", "record_id": "flaws_cloudtrail:0000323:e953f00f-c367-428b-9961-b16f2bc552f7", "row_index": 323, "timestamp": "2019-07-27T07:22:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e953f00f-c367-428b-9961-b16f2bc552f7", "eventTime": "2019-07-27T07:22:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e953f00f-c367-428b-9961-b16f2bc552f7", "record_id": "flaws_cloudtrail:0000324:e953f00f-c367-428b-9961-b16f2bc552f7", "row_index": 324, "timestamp": "2019-07-27T07:22:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e953f00f-c367-428b-9961-b16f2bc552f7", "eventTime": "2019-07-27T07:22:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf326e4e-78ce-4523-81e9-372c6611a1a0", "record_id": "flaws_cloudtrail:0000325:cf326e4e-78ce-4523-81e9-372c6611a1a0", "row_index": 325, "timestamp": "2019-07-27T07:22:28Z", "event_type": "ListLayers126640", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf326e4e-78ce-4523-81e9-372c6611a1a0", "eventTime": "2019-07-27T07:22:28Z", "eventName": "ListLayers126640", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf326e4e-78ce-4523-81e9-372c6611a1a0", "record_id": "flaws_cloudtrail:0000326:cf326e4e-78ce-4523-81e9-372c6611a1a0", "row_index": 326, "timestamp": "2019-07-27T07:22:28Z", "event_type": "ListLayers126640", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf326e4e-78ce-4523-81e9-372c6611a1a0", "eventTime": "2019-07-27T07:22:28Z", "eventName": "ListLayers126640", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "record_id": "flaws_cloudtrail:0000327:65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "row_index": 327, "timestamp": "2019-07-27T07:23:11Z", "event_type": "ListLayerVersions126640", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "eventTime": "2019-07-27T07:23:11Z", "eventName": "ListLayerVersions126640", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"layerName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "record_id": "flaws_cloudtrail:0000328:65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "row_index": 328, "timestamp": "2019-07-27T07:23:11Z", "event_type": "ListLayerVersions126640", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d39b5d-fe78-48d2-aa8c-4ac9cff2444c", "eventTime": "2019-07-27T07:23:11Z", "eventName": "ListLayerVersions126640", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"layerName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288402f1-b63e-4de7-aae6-463ac380b2c8", "record_id": "flaws_cloudtrail:0000329:288402f1-b63e-4de7-aae6-463ac380b2c8", "row_index": 329, "timestamp": "2019-07-27T07:23:12Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288402f1-b63e-4de7-aae6-463ac380b2c8", "eventTime": "2019-07-27T07:23:12Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288402f1-b63e-4de7-aae6-463ac380b2c8", "record_id": "flaws_cloudtrail:0000330:288402f1-b63e-4de7-aae6-463ac380b2c8", "row_index": 330, "timestamp": "2019-07-27T07:23:12Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288402f1-b63e-4de7-aae6-463ac380b2c8", "eventTime": "2019-07-27T07:23:12Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15192c9-859e-4859-a030-4b73ef3ef3d9", "record_id": "flaws_cloudtrail:0000331:15192c9-859e-4859-a030-4b73ef3ef3d9", "row_index": 331, "timestamp": "2019-07-27T07:23:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15192c9-859e-4859-a030-4b73ef3ef3d9", "eventTime": "2019-07-27T07:23:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15192c9-859e-4859-a030-4b73ef3ef3d9", "record_id": "flaws_cloudtrail:0000332:15192c9-859e-4859-a030-4b73ef3ef3d9", "row_index": 332, "timestamp": "2019-07-27T07:23:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15192c9-859e-4859-a030-4b73ef3ef3d9", "eventTime": "2019-07-27T07:23:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "record_id": "flaws_cloudtrail:0000333:ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "row_index": 333, "timestamp": "2019-07-27T07:23:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "eventTime": "2019-07-27T07:23:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "record_id": "flaws_cloudtrail:0000334:ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "row_index": 334, "timestamp": "2019-07-27T07:23:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace9950d-b6af-4fa1-8a34-7e65cfdef40c", "eventTime": "2019-07-27T07:23:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "004364a1-90c7-4500-a220-43a06d60d39e", "record_id": "flaws_cloudtrail:0000335:004364a1-90c7-4500-a220-43a06d60d39e", "row_index": 335, "timestamp": "2019-07-27T07:24:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "004364a1-90c7-4500-a220-43a06d60d39e", "eventTime": "2019-07-27T07:24:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "004364a1-90c7-4500-a220-43a06d60d39e", "record_id": "flaws_cloudtrail:0000336:004364a1-90c7-4500-a220-43a06d60d39e", "row_index": 336, "timestamp": "2019-07-27T07:24:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "004364a1-90c7-4500-a220-43a06d60d39e", "eventTime": "2019-07-27T07:24:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87acb5f0-85bb-4b5c-a76d-3593b3d17635", "record_id": "flaws_cloudtrail:0000337:87acb5f0-85bb-4b5c-a76d-3593b3d17635", "row_index": 337, "timestamp": "2019-07-27T07:24:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87acb5f0-85bb-4b5c-a76d-3593b3d17635", "eventTime": "2019-07-27T07:24:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOO6QI79B1VXNJUP0", "expiration": "Jul 27, 2019 7:24:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "record_id": "flaws_cloudtrail:0000338:67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "row_index": 338, "timestamp": "2019-07-27T07:24:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAR7QR6LGSJ3OON6R9", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "230.78.255.227", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "eventTime": "2019-07-27T07:24:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "230.78.255.227", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAR7QR6LGSJ3OON6R9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T07:24:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/27/[$LATEST]f586cd906d7693d1f27186b6b85c68d6", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "record_id": "flaws_cloudtrail:0000339:a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "row_index": 339, "timestamp": "2019-07-27T07:24:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "eventTime": "2019-07-27T07:24:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR7QR6LGSJ3OON6R9", "expiration": "Jul 27, 2019 7:24:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87acb5f0-85bb-4b5c-a76d-3593b3d17635", "record_id": "flaws_cloudtrail:0000340:87acb5f0-85bb-4b5c-a76d-3593b3d17635", "row_index": 340, "timestamp": "2019-07-27T07:24:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87acb5f0-85bb-4b5c-a76d-3593b3d17635", "eventTime": "2019-07-27T07:24:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOO6QI79B1VXNJUP0", "expiration": "Jul 27, 2019 7:24:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "record_id": "flaws_cloudtrail:0000341:67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "row_index": 341, "timestamp": "2019-07-27T07:24:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAR7QR6LGSJ3OON6R9", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "230.78.255.227", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c8b48d-8d76-4d9d-aec1-c1a45253b4b4", "eventTime": "2019-07-27T07:24:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "230.78.255.227", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAR7QR6LGSJ3OON6R9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-27T07:24:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/27/[$LATEST]f586cd906d7693d1f27186b6b85c68d6", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "record_id": "flaws_cloudtrail:0000342:a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "row_index": 342, "timestamp": "2019-07-27T07:24:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37cf6e1-ec4b-485c-910f-ab2122bbb85c", "eventTime": "2019-07-27T07:24:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR7QR6LGSJ3OON6R9", "expiration": "Jul 27, 2019 7:24:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b735e454-09c1-4beb-aea0-a99ed34364c", "record_id": "flaws_cloudtrail:0000343:b735e454-09c1-4beb-aea0-a99ed34364c", "row_index": 343, "timestamp": "2019-07-27T07:24:14Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b735e454-09c1-4beb-aea0-a99ed34364c", "eventTime": "2019-07-27T07:24:14Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b735e454-09c1-4beb-aea0-a99ed34364c", "record_id": "flaws_cloudtrail:0000344:b735e454-09c1-4beb-aea0-a99ed34364c", "row_index": 344, "timestamp": "2019-07-27T07:24:14Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b735e454-09c1-4beb-aea0-a99ed34364c", "eventTime": "2019-07-27T07:24:14Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915f2892-d131-4a8d-b169-3f28530cdb25", "record_id": "flaws_cloudtrail:0000345:915f2892-d131-4a8d-b169-3f28530cdb25", "row_index": 345, "timestamp": "2019-07-27T07:24:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915f2892-d131-4a8d-b169-3f28530cdb25", "eventTime": "2019-07-27T07:24:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915f2892-d131-4a8d-b169-3f28530cdb25", "record_id": "flaws_cloudtrail:0000346:915f2892-d131-4a8d-b169-3f28530cdb25", "row_index": 346, "timestamp": "2019-07-27T07:24:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915f2892-d131-4a8d-b169-3f28530cdb25", "eventTime": "2019-07-27T07:24:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "record_id": "flaws_cloudtrail:0000347:4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "row_index": 347, "timestamp": "2019-07-27T07:24:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "eventTime": "2019-07-27T07:24:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "record_id": "flaws_cloudtrail:0000348:4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "row_index": 348, "timestamp": "2019-07-27T07:24:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b0beb1d-f9c2-4cab-8181-41fe6a8555e1", "eventTime": "2019-07-27T07:24:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.193 Python/3.6.0 Windows/10 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b87213f-1acb-46a7-a58c-cf093c6c1e68", "record_id": "flaws_cloudtrail:0000349:3b87213f-1acb-46a7-a58c-cf093c6c1e68", "row_index": 349, "timestamp": "2019-07-27T07:24:54Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b87213f-1acb-46a7-a58c-cf093c6c1e68", "eventTime": "2019-07-27T07:24:54Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b87213f-1acb-46a7-a58c-cf093c6c1e68", "record_id": "flaws_cloudtrail:0000350:3b87213f-1acb-46a7-a58c-cf093c6c1e68", "row_index": 350, "timestamp": "2019-07-27T07:24:54Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b87213f-1acb-46a7-a58c-cf093c6c1e68", "eventTime": "2019-07-27T07:24:54Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c68093-a807-4d46-b78d-52f8393f947a", "record_id": "flaws_cloudtrail:0000351:a7c68093-a807-4d46-b78d-52f8393f947a", "row_index": 351, "timestamp": "2019-07-27T07:25:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c68093-a807-4d46-b78d-52f8393f947a", "eventTime": "2019-07-27T07:25:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Policy arn:aws:iam::811596193553:policy/MySecurityAudit version v4 does not exist or is not attachable.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c68093-a807-4d46-b78d-52f8393f947a", "record_id": "flaws_cloudtrail:0000352:a7c68093-a807-4d46-b78d-52f8393f947a", "row_index": 352, "timestamp": "2019-07-27T07:25:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c68093-a807-4d46-b78d-52f8393f947a", "eventTime": "2019-07-27T07:25:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Policy arn:aws:iam::811596193553:policy/MySecurityAudit version v4 does not exist or is not attachable.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46781d0-8cbb-4041-bcb7-846187d9a248f", "record_id": "flaws_cloudtrail:0000353:46781d0-8cbb-4041-bcb7-846187d9a248f", "row_index": 353, "timestamp": "2019-07-27T07:26:13Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46781d0-8cbb-4041-bcb7-846187d9a248f", "eventTime": "2019-07-27T07:26:13Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "errorCode": "ResourceNotFoundException", "errorMessage": "Function not found: arn:aws:lambda:us-west-2:811596193553:function:level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46781d0-8cbb-4041-bcb7-846187d9a248f", "record_id": "flaws_cloudtrail:0000354:46781d0-8cbb-4041-bcb7-846187d9a248f", "row_index": 354, "timestamp": "2019-07-27T07:26:13Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46781d0-8cbb-4041-bcb7-846187d9a248f", "eventTime": "2019-07-27T07:26:13Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "errorCode": "ResourceNotFoundException", "errorMessage": "Function not found: arn:aws:lambda:us-west-2:811596193553:function:level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "record_id": "flaws_cloudtrail:0000355:bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "row_index": 355, "timestamp": "2019-07-27T07:26:26Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "eventTime": "2019-07-27T07:26:26Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "record_id": "flaws_cloudtrail:0000356:bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "row_index": 356, "timestamp": "2019-07-27T07:26:26Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc6b9a68-4a11-42b4-96f3-59d62e2c8da5", "eventTime": "2019-07-27T07:26:26Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "record_id": "flaws_cloudtrail:0000357:09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "row_index": 357, "timestamp": "2019-07-27T07:26:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "eventTime": "2019-07-27T07:26:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "record_id": "flaws_cloudtrail:0000358:09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "row_index": 358, "timestamp": "2019-07-27T07:26:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ff5a1e-9b9f-4f1f-972f-a240a4816a75", "eventTime": "2019-07-27T07:26:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83458d2-1c6e-4146-9e26-abb3f9a00577", "record_id": "flaws_cloudtrail:0000359:83458d2-1c6e-4146-9e26-abb3f9a00577", "row_index": 359, "timestamp": "2019-07-27T07:26:39Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83458d2-1c6e-4146-9e26-abb3f9a00577", "eventTime": "2019-07-27T07:26:39Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83458d2-1c6e-4146-9e26-abb3f9a00577", "record_id": "flaws_cloudtrail:0000360:83458d2-1c6e-4146-9e26-abb3f9a00577", "row_index": 360, "timestamp": "2019-07-27T07:26:39Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83458d2-1c6e-4146-9e26-abb3f9a00577", "eventTime": "2019-07-27T07:26:39Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c260062d2-9b6a-41cf-8484-d5ab7e69097", "record_id": "flaws_cloudtrail:0000361:c260062d2-9b6a-41cf-8484-d5ab7e69097", "row_index": 361, "timestamp": "2019-07-27T07:27:17Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c260062d2-9b6a-41cf-8484-d5ab7e69097", "eventTime": "2019-07-27T07:27:17Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c260062d2-9b6a-41cf-8484-d5ab7e69097", "record_id": "flaws_cloudtrail:0000362:c260062d2-9b6a-41cf-8484-d5ab7e69097", "row_index": 362, "timestamp": "2019-07-27T07:27:17Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c260062d2-9b6a-41cf-8484-d5ab7e69097", "eventTime": "2019-07-27T07:27:17Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15ee3318-9e48-43ac-9978-7d5cdc295b20", "record_id": "flaws_cloudtrail:0000363:15ee3318-9e48-43ac-9978-7d5cdc295b20", "row_index": 363, "timestamp": "2019-07-27T07:27:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15ee3318-9e48-43ac-9978-7d5cdc295b20", "eventTime": "2019-07-27T07:27:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15ee3318-9e48-43ac-9978-7d5cdc295b20", "record_id": "flaws_cloudtrail:0000364:15ee3318-9e48-43ac-9978-7d5cdc295b20", "row_index": 364, "timestamp": "2019-07-27T07:27:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15ee3318-9e48-43ac-9978-7d5cdc295b20", "eventTime": "2019-07-27T07:27:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38c0987-b840-4695-bfee-96f850780e7f", "record_id": "flaws_cloudtrail:0000365:c38c0987-b840-4695-bfee-96f850780e7f", "row_index": 365, "timestamp": "2019-07-27T07:27:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38c0987-b840-4695-bfee-96f850780e7f", "eventTime": "2019-07-27T07:27:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38c0987-b840-4695-bfee-96f850780e7f", "record_id": "flaws_cloudtrail:0000366:c38c0987-b840-4695-bfee-96f850780e7f", "row_index": 366, "timestamp": "2019-07-27T07:27:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38c0987-b840-4695-bfee-96f850780e7f", "eventTime": "2019-07-27T07:27:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "record_id": "flaws_cloudtrail:0000367:beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "row_index": 367, "timestamp": "2019-07-27T07:27:39Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "eventTime": "2019-07-27T07:27:39Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "record_id": "flaws_cloudtrail:0000368:beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "row_index": 368, "timestamp": "2019-07-27T07:27:39Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb3ff25-9d0d-4804-a8a0-b1e40d344af6", "eventTime": "2019-07-27T07:27:39Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c012bae8-83e3-4e12-9d60-53940bfcc30", "record_id": "flaws_cloudtrail:0000369:c012bae8-83e3-4e12-9d60-53940bfcc30", "row_index": 369, "timestamp": "2019-07-27T07:27:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c012bae8-83e3-4e12-9d60-53940bfcc30", "eventTime": "2019-07-27T07:27:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c012bae8-83e3-4e12-9d60-53940bfcc30", "record_id": "flaws_cloudtrail:0000370:c012bae8-83e3-4e12-9d60-53940bfcc30", "row_index": 370, "timestamp": "2019-07-27T07:27:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c012bae8-83e3-4e12-9d60-53940bfcc30", "eventTime": "2019-07-27T07:27:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/3.6.0 Windows/10 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc086b5c-3a8d-4742-8263-8317c54ef709", "record_id": "flaws_cloudtrail:0000371:dc086b5c-3a8d-4742-8263-8317c54ef709", "row_index": 371, "timestamp": "2019-07-27T07:28:09Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc086b5c-3a8d-4742-8263-8317c54ef709", "eventTime": "2019-07-27T07:28:09Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc086b5c-3a8d-4742-8263-8317c54ef709", "record_id": "flaws_cloudtrail:0000372:dc086b5c-3a8d-4742-8263-8317c54ef709", "row_index": 372, "timestamp": "2019-07-27T07:28:09Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc086b5c-3a8d-4742-8263-8317c54ef709", "eventTime": "2019-07-27T07:28:09Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "record_id": "flaws_cloudtrail:0000373:05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "row_index": 373, "timestamp": "2019-07-27T07:28:40Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "eventTime": "2019-07-27T07:28:40Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "record_id": "flaws_cloudtrail:0000374:05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "row_index": 374, "timestamp": "2019-07-27T07:28:40Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d6d38d-9fb2-400a-a16b-5c49dffc84d4", "eventTime": "2019-07-27T07:28:40Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d13a62ba-367c-443b-b8a6-28005d53d703", "record_id": "flaws_cloudtrail:0000375:d13a62ba-367c-443b-b8a6-28005d53d703", "row_index": 375, "timestamp": "2019-07-27T07:29:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d13a62ba-367c-443b-b8a6-28005d53d703", "eventTime": "2019-07-27T07:29:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d13a62ba-367c-443b-b8a6-28005d53d703", "record_id": "flaws_cloudtrail:0000376:d13a62ba-367c-443b-b8a6-28005d53d703", "row_index": 376, "timestamp": "2019-07-27T07:29:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d13a62ba-367c-443b-b8a6-28005d53d703", "eventTime": "2019-07-27T07:29:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17825f6-25bf-4eed-a6f4-7ad3da7ebead", "record_id": "flaws_cloudtrail:0000377:17825f6-25bf-4eed-a6f4-7ad3da7ebead", "row_index": 377, "timestamp": "2019-07-27T07:29:45Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17825f6-25bf-4eed-a6f4-7ad3da7ebead", "eventTime": "2019-07-27T07:29:45Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17825f6-25bf-4eed-a6f4-7ad3da7ebead", "record_id": "flaws_cloudtrail:0000378:17825f6-25bf-4eed-a6f4-7ad3da7ebead", "row_index": 378, "timestamp": "2019-07-27T07:29:45Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17825f6-25bf-4eed-a6f4-7ad3da7ebead", "eventTime": "2019-07-27T07:29:45Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8c75b29-030c-4023-8446-a4bc82121b", "record_id": "flaws_cloudtrail:0000379:a8c75b29-030c-4023-8446-a4bc82121b", "row_index": 379, "timestamp": "2019-07-27T07:29:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8c75b29-030c-4023-8446-a4bc82121b", "eventTime": "2019-07-27T07:29:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8c75b29-030c-4023-8446-a4bc82121b", "record_id": "flaws_cloudtrail:0000380:a8c75b29-030c-4023-8446-a4bc82121b", "row_index": 380, "timestamp": "2019-07-27T07:29:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8c75b29-030c-4023-8446-a4bc82121b", "eventTime": "2019-07-27T07:29:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340219e89-c28f-458b-bd6b-aedb33d34c9c", "record_id": "flaws_cloudtrail:0000381:340219e89-c28f-458b-bd6b-aedb33d34c9c", "row_index": 381, "timestamp": "2019-07-27T07:30:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340219e89-c28f-458b-bd6b-aedb33d34c9c", "eventTime": "2019-07-27T07:30:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340219e89-c28f-458b-bd6b-aedb33d34c9c", "record_id": "flaws_cloudtrail:0000382:340219e89-c28f-458b-bd6b-aedb33d34c9c", "row_index": 382, "timestamp": "2019-07-27T07:30:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340219e89-c28f-458b-bd6b-aedb33d34c9c", "eventTime": "2019-07-27T07:30:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f140d922-cda5-4b77-91a5-0ea250a1a1d1", "record_id": "flaws_cloudtrail:0000383:f140d922-cda5-4b77-91a5-0ea250a1a1d1", "row_index": 383, "timestamp": "2019-07-27T07:31:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f140d922-cda5-4b77-91a5-0ea250a1a1d1", "eventTime": "2019-07-27T07:31:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f140d922-cda5-4b77-91a5-0ea250a1a1d1", "record_id": "flaws_cloudtrail:0000384:f140d922-cda5-4b77-91a5-0ea250a1a1d1", "row_index": 384, "timestamp": "2019-07-27T07:31:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f140d922-cda5-4b77-91a5-0ea250a1a1d1", "eventTime": "2019-07-27T07:31:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "record_id": "flaws_cloudtrail:0000385:834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "row_index": 385, "timestamp": "2019-07-27T07:31:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "eventTime": "2019-07-27T07:31:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "record_id": "flaws_cloudtrail:0000386:834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "row_index": 386, "timestamp": "2019-07-27T07:31:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834061cbc-84b0-44f8-8cdc-22fbad4d7e04", "eventTime": "2019-07-27T07:31:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "record_id": "flaws_cloudtrail:0000387:6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "row_index": 387, "timestamp": "2019-07-27T07:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "eventTime": "2019-07-27T07:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXX42UT3J5GRCRZT8", "expiration": "Jul 27, 2019 1:54:44 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "record_id": "flaws_cloudtrail:0000388:6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "row_index": 388, "timestamp": "2019-07-27T07:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6188e02a-b9df-4926-944e-d8cf6dd5a4e4", "eventTime": "2019-07-27T07:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXX42UT3J5GRCRZT8", "expiration": "Jul 27, 2019 1:54:44 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e363fd4-8951-4bd0-af00-6e900034f", "record_id": "flaws_cloudtrail:0000389:2e363fd4-8951-4bd0-af00-6e900034f", "row_index": 389, "timestamp": "2019-07-27T07:32:06Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e363fd4-8951-4bd0-af00-6e900034f", "eventTime": "2019-07-27T07:32:06Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e363fd4-8951-4bd0-af00-6e900034f", "record_id": "flaws_cloudtrail:0000390:2e363fd4-8951-4bd0-af00-6e900034f", "row_index": 390, "timestamp": "2019-07-27T07:32:06Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e363fd4-8951-4bd0-af00-6e900034f", "eventTime": "2019-07-27T07:32:06Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7b31ac8-84a4-437a-847d-d138d65053e5", "record_id": "flaws_cloudtrail:0000391:c7b31ac8-84a4-437a-847d-d138d65053e5", "row_index": 391, "timestamp": "2019-07-27T07:32:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7b31ac8-84a4-437a-847d-d138d65053e5", "eventTime": "2019-07-27T07:32:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7b31ac8-84a4-437a-847d-d138d65053e5", "record_id": "flaws_cloudtrail:0000392:c7b31ac8-84a4-437a-847d-d138d65053e5", "row_index": 392, "timestamp": "2019-07-27T07:32:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7b31ac8-84a4-437a-847d-d138d65053e5", "eventTime": "2019-07-27T07:32:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0924d4db-0c68-4e5e-bb1c-3115be320baf", "record_id": "flaws_cloudtrail:0000393:0924d4db-0c68-4e5e-bb1c-3115be320baf", "row_index": 393, "timestamp": "2019-07-27T07:32:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0924d4db-0c68-4e5e-bb1c-3115be320baf", "eventTime": "2019-07-27T07:32:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0924d4db-0c68-4e5e-bb1c-3115be320baf", "record_id": "flaws_cloudtrail:0000394:0924d4db-0c68-4e5e-bb1c-3115be320baf", "row_index": 394, "timestamp": "2019-07-27T07:32:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0924d4db-0c68-4e5e-bb1c-3115be320baf", "eventTime": "2019-07-27T07:32:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fecd76bc-654d-4565-bfa3-df8b25568a9", "record_id": "flaws_cloudtrail:0000395:fecd76bc-654d-4565-bfa3-df8b25568a9", "row_index": 395, "timestamp": "2019-07-27T07:32:58Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fecd76bc-654d-4565-bfa3-df8b25568a9", "eventTime": "2019-07-27T07:32:58Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fecd76bc-654d-4565-bfa3-df8b25568a9", "record_id": "flaws_cloudtrail:0000396:fecd76bc-654d-4565-bfa3-df8b25568a9", "row_index": 396, "timestamp": "2019-07-27T07:32:58Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fecd76bc-654d-4565-bfa3-df8b25568a9", "eventTime": "2019-07-27T07:32:58Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.6.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "record_id": "flaws_cloudtrail:0000397:8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "row_index": 397, "timestamp": "2019-07-27T07:33:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "eventTime": "2019-07-27T07:33:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "record_id": "flaws_cloudtrail:0000398:8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "row_index": 398, "timestamp": "2019-07-27T07:33:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f4c2874-a1fe-4103-8c14-a1ad51d8b1be", "eventTime": "2019-07-27T07:33:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef800c5d-8c80-4872-a5e8-fd89384d542", "record_id": "flaws_cloudtrail:0000399:ef800c5d-8c80-4872-a5e8-fd89384d542", "row_index": 399, "timestamp": "2019-07-27T07:33:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef800c5d-8c80-4872-a5e8-fd89384d542", "eventTime": "2019-07-27T07:33:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef800c5d-8c80-4872-a5e8-fd89384d542", "record_id": "flaws_cloudtrail:0000400:ef800c5d-8c80-4872-a5e8-fd89384d542", "row_index": 400, "timestamp": "2019-07-27T07:33:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.203.213.190", "user_agent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef800c5d-8c80-4872-a5e8-fd89384d542", "eventTime": "2019-07-27T07:33:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.203.213.190", "userAgent": "aws-cli/1.16.207 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "record_id": "flaws_cloudtrail:0000401:27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "row_index": 401, "timestamp": "2019-07-27T07:33:22Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "eventTime": "2019-07-27T07:33:22Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "record_id": "flaws_cloudtrail:0000402:27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "row_index": 402, "timestamp": "2019-07-27T07:33:22Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27c4db4a-d717-4db0-bb3a-7884cd34f9cc", "eventTime": "2019-07-27T07:33:22Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.207 Python/3.5.2 Linux/4.18.5-63965-tsurugi botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49fdd803-f93b-49b7-b291-34bac5b1495d", "record_id": "flaws_cloudtrail:0000403:49fdd803-f93b-49b7-b291-34bac5b1495d", "row_index": 403, "timestamp": "2019-07-27T07:33:26Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49fdd803-f93b-49b7-b291-34bac5b1495d", "eventTime": "2019-07-27T07:33:26Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49fdd803-f93b-49b7-b291-34bac5b1495d", "record_id": "flaws_cloudtrail:0000404:49fdd803-f93b-49b7-b291-34bac5b1495d", "row_index": 404, "timestamp": "2019-07-27T07:33:26Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49fdd803-f93b-49b7-b291-34bac5b1495d", "eventTime": "2019-07-27T07:33:26Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17022-f645-442e-96d9-b05537bb39b4", "record_id": "flaws_cloudtrail:0000405:17022-f645-442e-96d9-b05537bb39b4", "row_index": 405, "timestamp": "2019-07-27T07:34:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17022-f645-442e-96d9-b05537bb39b4", "eventTime": "2019-07-27T07:34:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:\u201cs33ppypa75\u201d", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "\u201cs33ppypa75\u201d", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17022-f645-442e-96d9-b05537bb39b4", "record_id": "flaws_cloudtrail:0000406:17022-f645-442e-96d9-b05537bb39b4", "row_index": 406, "timestamp": "2019-07-27T07:34:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17022-f645-442e-96d9-b05537bb39b4", "eventTime": "2019-07-27T07:34:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:\u201cs33ppypa75\u201d", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "\u201cs33ppypa75\u201d", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "537f59b7-6c0d-4628-827b-6d8a6adf894f", "record_id": "flaws_cloudtrail:0000407:537f59b7-6c0d-4628-827b-6d8a6adf894f", "row_index": 407, "timestamp": "2019-07-27T07:34:18Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "537f59b7-6c0d-4628-827b-6d8a6adf894f", "eventTime": "2019-07-27T07:34:18Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "537f59b7-6c0d-4628-827b-6d8a6adf894f", "record_id": "flaws_cloudtrail:0000408:537f59b7-6c0d-4628-827b-6d8a6adf894f", "row_index": 408, "timestamp": "2019-07-27T07:34:18Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "537f59b7-6c0d-4628-827b-6d8a6adf894f", "eventTime": "2019-07-27T07:34:18Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001cff33-9d35-49ae-bbb4-2a9f93319cd9", "record_id": "flaws_cloudtrail:0000409:001cff33-9d35-49ae-bbb4-2a9f93319cd9", "row_index": 409, "timestamp": "2019-07-27T07:35:49Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001cff33-9d35-49ae-bbb4-2a9f93319cd9", "eventTime": "2019-07-27T07:35:49Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001cff33-9d35-49ae-bbb4-2a9f93319cd9", "record_id": "flaws_cloudtrail:0000410:001cff33-9d35-49ae-bbb4-2a9f93319cd9", "row_index": 410, "timestamp": "2019-07-27T07:35:49Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001cff33-9d35-49ae-bbb4-2a9f93319cd9", "eventTime": "2019-07-27T07:35:49Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.206 Python/2.7.15 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58212-2608-4056-b9c0-dd27cb687c66", "record_id": "flaws_cloudtrail:0000411:58212-2608-4056-b9c0-dd27cb687c66", "row_index": 411, "timestamp": "2019-07-27T07:36:20Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58212-2608-4056-b9c0-dd27cb687c66", "eventTime": "2019-07-27T07:36:20Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:\u201cs33ppypa75\u201d", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "\u201cs33ppypa75\u201d", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58212-2608-4056-b9c0-dd27cb687c66", "record_id": "flaws_cloudtrail:0000412:58212-2608-4056-b9c0-dd27cb687c66", "row_index": 412, "timestamp": "2019-07-27T07:36:20Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.207.187.4", "user_agent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58212-2608-4056-b9c0-dd27cb687c66", "eventTime": "2019-07-27T07:36:20Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.207.187.4", "userAgent": "aws-cli/1.16.205 Python/3.7.3 Darwin/18.7.0 botocore/1.12.195", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:\u201cs33ppypa75\u201d", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "\u201cs33ppypa75\u201d", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8a135f-827d-482f-b585-587574016912", "record_id": "flaws_cloudtrail:0000413:6e8a135f-827d-482f-b585-587574016912", "row_index": 413, "timestamp": "2019-07-27T07:36:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8a135f-827d-482f-b585-587574016912", "eventTime": "2019-07-27T07:36:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8a135f-827d-482f-b585-587574016912", "record_id": "flaws_cloudtrail:0000414:6e8a135f-827d-482f-b585-587574016912", "row_index": 414, "timestamp": "2019-07-27T07:36:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8a135f-827d-482f-b585-587574016912", "eventTime": "2019-07-27T07:36:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "record_id": "flaws_cloudtrail:0000415:4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "row_index": 415, "timestamp": "2019-07-27T07:37:10Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "eventTime": "2019-07-27T07:37:10Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "record_id": "flaws_cloudtrail:0000416:4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "row_index": 416, "timestamp": "2019-07-27T07:37:10Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7e0db6-f7dd-42c2-9069-7631c7962fcf", "eventTime": "2019-07-27T07:37:10Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15335fb-295f-49a7-956d-efd2e79c2719", "record_id": "flaws_cloudtrail:0000417:15335fb-295f-49a7-956d-efd2e79c2719", "row_index": 417, "timestamp": "2019-07-27T07:37:38Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15335fb-295f-49a7-956d-efd2e79c2719", "eventTime": "2019-07-27T07:37:38Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15335fb-295f-49a7-956d-efd2e79c2719", "record_id": "flaws_cloudtrail:0000418:15335fb-295f-49a7-956d-efd2e79c2719", "row_index": 418, "timestamp": "2019-07-27T07:37:38Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.1.61.251", "user_agent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15335fb-295f-49a7-956d-efd2e79c2719", "eventTime": "2019-07-27T07:37:38Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.61.251", "userAgent": "aws-cli/1.16.207 Python/2.7.10 Darwin/18.6.0 botocore/1.12.197", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee3c3d1-882d-4ba2-8061-9046f1b3041f", "record_id": "flaws_cloudtrail:0000419:cee3c3d1-882d-4ba2-8061-9046f1b3041f", "row_index": 419, "timestamp": "2019-07-27T07:39:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee3c3d1-882d-4ba2-8061-9046f1b3041f", "eventTime": "2019-07-27T07:39:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee3c3d1-882d-4ba2-8061-9046f1b3041f", "record_id": "flaws_cloudtrail:0000420:cee3c3d1-882d-4ba2-8061-9046f1b3041f", "row_index": 420, "timestamp": "2019-07-27T07:39:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.159.251.3", "user_agent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee3c3d1-882d-4ba2-8061-9046f1b3041f", "eventTime": "2019-07-27T07:39:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.159.251.3", "userAgent": "aws-cli/1.16.207 Python/3.4.9 Linux/3.10.0-957.el7.x86_64 botocore/1.12.197", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd1fada8-4182-4a4e-80d6-659f84a3c595", "record_id": "flaws_cloudtrail:0000421:dd1fada8-4182-4a4e-80d6-659f84a3c595", "row_index": 421, "timestamp": "2019-07-27T07:58:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd1fada8-4182-4a4e-80d6-659f84a3c595", "eventTime": "2019-07-27T07:58:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4388f5be-4834-4725-aa95-5ebc80d1cf9b", "record_id": "flaws_cloudtrail:0000422:4388f5be-4834-4725-aa95-5ebc80d1cf9b", "row_index": 422, "timestamp": "2019-07-27T08:00:06Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4388f5be-4834-4725-aa95-5ebc80d1cf9b", "eventTime": "2019-07-27T08:00:06Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57eb189b-bfc7-4e4e-92cc-9c930897607d", "record_id": "flaws_cloudtrail:0000423:57eb189b-bfc7-4e4e-92cc-9c930897607d", "row_index": 423, "timestamp": "2019-07-27T08:01:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 563, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57eb189b-bfc7-4e4e-92cc-9c930897607d", "eventTime": "2019-07-27T08:01:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55084fb6-7e93-4f8b-b696-8bd232922752", "record_id": "flaws_cloudtrail:0000424:55084fb6-7e93-4f8b-b696-8bd232922752", "row_index": 424, "timestamp": "2019-07-27T08:04:37Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 546, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55084fb6-7e93-4f8b-b696-8bd232922752", "eventTime": "2019-07-27T08:04:37Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23f9126d-3323-42f4-96f1-cdee1a91b005", "record_id": "flaws_cloudtrail:0000425:23f9126d-3323-42f4-96f1-cdee1a91b005", "row_index": 425, "timestamp": "2019-07-27T08:08:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/backup-elevated-46"], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23f9126d-3323-42f4-96f1-cdee1a91b005", "eventTime": "2019-07-27T08:08:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/backup-elevated-46", "roleSessionName": "backup-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/backup-elevated-46"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c0401b0-6085-4046-944f-5f85722c3a8d", "record_id": "flaws_cloudtrail:0000426:1c0401b0-6085-4046-944f-5f85722c3a8d", "row_index": 426, "timestamp": "2019-07-27T08:10:51Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAU8JI8QK8ZTBXB0E2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "186.135.220.33", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-6660"], "raw_record_size_bytes": 633, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c0401b0-6085-4046-944f-5f85722c3a8d", "eventTime": "2019-07-27T08:10:51Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "186.135.220.33", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAU8JI8QK8ZTBXB0E2", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-6660", "key": "reports/665.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-6660"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389e5e96-ee6c-48c2-ab28-b37793f328c0", "record_id": "flaws_cloudtrail:0000427:389e5e96-ee6c-48c2-ab28-b37793f328c0", "row_index": 427, "timestamp": "2019-07-27T08:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389e5e96-ee6c-48c2-ab28-b37793f328c0", "eventTime": "2019-07-27T08:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3VDJGIBT0HEDWTC5", "expiration": "Jul 27, 2019 2:33:51 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389e5e96-ee6c-48c2-ab28-b37793f328c0", "record_id": "flaws_cloudtrail:0000428:389e5e96-ee6c-48c2-ab28-b37793f328c0", "row_index": 428, "timestamp": "2019-07-27T08:31:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389e5e96-ee6c-48c2-ab28-b37793f328c0", "eventTime": "2019-07-27T08:31:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3VDJGIBT0HEDWTC5", "expiration": "Jul 27, 2019 2:33:51 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99eda0c5-7178-4104-b1e0-bf2e103c72ab", "record_id": "flaws_cloudtrail:0000429:99eda0c5-7178-4104-b1e0-bf2e103c72ab", "row_index": 429, "timestamp": "2019-07-27T08:47:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99eda0c5-7178-4104-b1e0-bf2e103c72ab", "eventTime": "2019-07-27T08:47:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99eda0c5-7178-4104-b1e0-bf2e103c72ab", "record_id": "flaws_cloudtrail:0000430:99eda0c5-7178-4104-b1e0-bf2e103c72ab", "row_index": 430, "timestamp": "2019-07-27T08:47:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99eda0c5-7178-4104-b1e0-bf2e103c72ab", "eventTime": "2019-07-27T08:47:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "record_id": "flaws_cloudtrail:0000431:b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "row_index": 431, "timestamp": "2019-07-27T08:47:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "eventTime": "2019-07-27T08:47:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "record_id": "flaws_cloudtrail:0000432:b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "row_index": 432, "timestamp": "2019-07-27T08:47:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b900d8cb-d38c-4b93-b75e-1d8a0aaaa03a", "eventTime": "2019-07-27T08:47:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5647cc7f-bf48-4ba5-b644-91a66791c", "record_id": "flaws_cloudtrail:0000433:5647cc7f-bf48-4ba5-b644-91a66791c", "row_index": 433, "timestamp": "2019-07-27T08:47:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5647cc7f-bf48-4ba5-b644-91a66791c", "eventTime": "2019-07-27T08:47:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5647cc7f-bf48-4ba5-b644-91a66791c", "record_id": "flaws_cloudtrail:0000434:5647cc7f-bf48-4ba5-b644-91a66791c", "row_index": 434, "timestamp": "2019-07-27T08:47:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5647cc7f-bf48-4ba5-b644-91a66791c", "eventTime": "2019-07-27T08:47:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c1ac675-79da-4e0b-9271-f439294d64a", "record_id": "flaws_cloudtrail:0000435:1c1ac675-79da-4e0b-9271-f439294d64a", "row_index": 435, "timestamp": "2019-07-27T08:47:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c1ac675-79da-4e0b-9271-f439294d64a", "eventTime": "2019-07-27T08:47:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "DSfsaaxisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c1ac675-79da-4e0b-9271-f439294d64a", "record_id": "flaws_cloudtrail:0000436:1c1ac675-79da-4e0b-9271-f439294d64a", "row_index": 436, "timestamp": "2019-07-27T08:47:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c1ac675-79da-4e0b-9271-f439294d64a", "eventTime": "2019-07-27T08:47:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "DSfsaaxisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "record_id": "flaws_cloudtrail:0000437:ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "row_index": 437, "timestamp": "2019-07-27T08:48:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "eventTime": "2019-07-27T08:48:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "record_id": "flaws_cloudtrail:0000438:ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "row_index": 438, "timestamp": "2019-07-27T08:48:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb8ff7d-4ece-42fd-8343-e12a7ff94eb0", "eventTime": "2019-07-27T08:48:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "aws-cli/1.16.57 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.47", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe6c5eff-7a69-4343-a781-eb0da73c2d15", "record_id": "flaws_cloudtrail:0000439:fe6c5eff-7a69-4343-a781-eb0da73c2d15", "row_index": 439, "timestamp": "2019-07-27T08:48:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe6c5eff-7a69-4343-a781-eb0da73c2d15", "eventTime": "2019-07-27T08:48:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe6c5eff-7a69-4343-a781-eb0da73c2d15", "record_id": "flaws_cloudtrail:0000440:fe6c5eff-7a69-4343-a781-eb0da73c2d15", "row_index": 440, "timestamp": "2019-07-27T08:48:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe6c5eff-7a69-4343-a781-eb0da73c2d15", "eventTime": "2019-07-27T08:48:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1706bd-b22f-49b3-9d2f-dc741367fe19", "record_id": "flaws_cloudtrail:0000441:ab1706bd-b22f-49b3-9d2f-dc741367fe19", "row_index": 441, "timestamp": "2019-07-27T08:48:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1706bd-b22f-49b3-9d2f-dc741367fe19", "eventTime": "2019-07-27T08:48:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "007.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1706bd-b22f-49b3-9d2f-dc741367fe19", "record_id": "flaws_cloudtrail:0000442:ab1706bd-b22f-49b3-9d2f-dc741367fe19", "row_index": 442, "timestamp": "2019-07-27T08:48:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1706bd-b22f-49b3-9d2f-dc741367fe19", "eventTime": "2019-07-27T08:48:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "007.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "402bbabe-5f8c-4f39-b839-dc90b79179e", "record_id": "flaws_cloudtrail:0000443:402bbabe-5f8c-4f39-b839-dc90b79179e", "row_index": 443, "timestamp": "2019-07-27T08:48:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "402bbabe-5f8c-4f39-b839-dc90b79179e", "eventTime": "2019-07-27T08:48:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "01.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "402bbabe-5f8c-4f39-b839-dc90b79179e", "record_id": "flaws_cloudtrail:0000444:402bbabe-5f8c-4f39-b839-dc90b79179e", "row_index": 444, "timestamp": "2019-07-27T08:48:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "402bbabe-5f8c-4f39-b839-dc90b79179e", "eventTime": "2019-07-27T08:48:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "01.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862ec435-4556-4bf6-bd62-e018c9db2d9a", "record_id": "flaws_cloudtrail:0000445:862ec435-4556-4bf6-bd62-e018c9db2d9a", "row_index": 445, "timestamp": "2019-07-27T08:48:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862ec435-4556-4bf6-bd62-e018c9db2d9a", "eventTime": "2019-07-27T08:48:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "02.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862ec435-4556-4bf6-bd62-e018c9db2d9a", "record_id": "flaws_cloudtrail:0000446:862ec435-4556-4bf6-bd62-e018c9db2d9a", "row_index": 446, "timestamp": "2019-07-27T08:48:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862ec435-4556-4bf6-bd62-e018c9db2d9a", "eventTime": "2019-07-27T08:48:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "02.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "record_id": "flaws_cloudtrail:0000447:b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "row_index": 447, "timestamp": "2019-07-27T08:48:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "eventTime": "2019-07-27T08:48:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "080.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "record_id": "flaws_cloudtrail:0000448:b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "row_index": 448, "timestamp": "2019-07-27T08:48:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3bf3e63-8ba5-4f1d-bb93-1950df73cd74", "eventTime": "2019-07-27T08:48:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "080.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c94ace78-02c5-41a2-ac26-8b117896ed99a", "record_id": "flaws_cloudtrail:0000449:c94ace78-02c5-41a2-ac26-8b117896ed99a", "row_index": 449, "timestamp": "2019-07-27T08:48:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c94ace78-02c5-41a2-ac26-8b117896ed99a", "eventTime": "2019-07-27T08:48:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "0.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c94ace78-02c5-41a2-ac26-8b117896ed99a", "record_id": "flaws_cloudtrail:0000450:c94ace78-02c5-41a2-ac26-8b117896ed99a", "row_index": 450, "timestamp": "2019-07-27T08:48:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c94ace78-02c5-41a2-ac26-8b117896ed99a", "eventTime": "2019-07-27T08:48:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "0.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1379ed54-ebcb-4296-b516-9f3d258f0ea8", "record_id": "flaws_cloudtrail:0000451:1379ed54-ebcb-4296-b516-9f3d258f0ea8", "row_index": 451, "timestamp": "2019-07-27T08:48:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1379ed54-ebcb-4296-b516-9f3d258f0ea8", "eventTime": "2019-07-27T08:48:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1379ed54-ebcb-4296-b516-9f3d258f0ea8", "record_id": "flaws_cloudtrail:0000452:1379ed54-ebcb-4296-b516-9f3d258f0ea8", "row_index": 452, "timestamp": "2019-07-27T08:48:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1379ed54-ebcb-4296-b516-9f3d258f0ea8", "eventTime": "2019-07-27T08:48:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "record_id": "flaws_cloudtrail:0000453:cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "row_index": 453, "timestamp": "2019-07-27T08:48:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "eventTime": "2019-07-27T08:48:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "100.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "record_id": "flaws_cloudtrail:0000454:cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "row_index": 454, "timestamp": "2019-07-27T08:48:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce152f8-6ed7-4c57-b05b-c3c235c3d15f", "eventTime": "2019-07-27T08:48:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "100.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728a237f-e341-4a5f-87ee-85e4a5856d5b", "record_id": "flaws_cloudtrail:0000455:728a237f-e341-4a5f-87ee-85e4a5856d5b", "row_index": 455, "timestamp": "2019-07-27T08:48:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728a237f-e341-4a5f-87ee-85e4a5856d5b", "eventTime": "2019-07-27T08:48:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "101.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728a237f-e341-4a5f-87ee-85e4a5856d5b", "record_id": "flaws_cloudtrail:0000456:728a237f-e341-4a5f-87ee-85e4a5856d5b", "row_index": 456, "timestamp": "2019-07-27T08:48:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728a237f-e341-4a5f-87ee-85e4a5856d5b", "eventTime": "2019-07-27T08:48:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "101.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e68916-e9df-48e7-8de5-39c2e44ff8a3", "record_id": "flaws_cloudtrail:0000457:0e68916-e9df-48e7-8de5-39c2e44ff8a3", "row_index": 457, "timestamp": "2019-07-27T08:48:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e68916-e9df-48e7-8de5-39c2e44ff8a3", "eventTime": "2019-07-27T08:48:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "103.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e68916-e9df-48e7-8de5-39c2e44ff8a3", "record_id": "flaws_cloudtrail:0000458:0e68916-e9df-48e7-8de5-39c2e44ff8a3", "row_index": 458, "timestamp": "2019-07-27T08:48:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e68916-e9df-48e7-8de5-39c2e44ff8a3", "eventTime": "2019-07-27T08:48:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "103.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80b336f7-4fe5-410c-92e9-8d6551c88f18", "record_id": "flaws_cloudtrail:0000459:80b336f7-4fe5-410c-92e9-8d6551c88f18", "row_index": 459, "timestamp": "2019-07-27T08:48:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80b336f7-4fe5-410c-92e9-8d6551c88f18", "eventTime": "2019-07-27T08:48:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "105.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80b336f7-4fe5-410c-92e9-8d6551c88f18", "record_id": "flaws_cloudtrail:0000460:80b336f7-4fe5-410c-92e9-8d6551c88f18", "row_index": 460, "timestamp": "2019-07-27T08:48:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80b336f7-4fe5-410c-92e9-8d6551c88f18", "eventTime": "2019-07-27T08:48:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "105.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666487b-f8dc-4ffc-ba05-58ad3755d6c3", "record_id": "flaws_cloudtrail:0000461:666487b-f8dc-4ffc-ba05-58ad3755d6c3", "row_index": 461, "timestamp": "2019-07-27T08:49:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666487b-f8dc-4ffc-ba05-58ad3755d6c3", "eventTime": "2019-07-27T08:49:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "106.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666487b-f8dc-4ffc-ba05-58ad3755d6c3", "record_id": "flaws_cloudtrail:0000462:666487b-f8dc-4ffc-ba05-58ad3755d6c3", "row_index": 462, "timestamp": "2019-07-27T08:49:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666487b-f8dc-4ffc-ba05-58ad3755d6c3", "eventTime": "2019-07-27T08:49:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "106.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07bf925f-3913-4c7a-bec7-f46e1473ceeb", "record_id": "flaws_cloudtrail:0000463:07bf925f-3913-4c7a-bec7-f46e1473ceeb", "row_index": 463, "timestamp": "2019-07-27T08:49:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07bf925f-3913-4c7a-bec7-f46e1473ceeb", "eventTime": "2019-07-27T08:49:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "109.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07bf925f-3913-4c7a-bec7-f46e1473ceeb", "record_id": "flaws_cloudtrail:0000464:07bf925f-3913-4c7a-bec7-f46e1473ceeb", "row_index": 464, "timestamp": "2019-07-27T08:49:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07bf925f-3913-4c7a-bec7-f46e1473ceeb", "eventTime": "2019-07-27T08:49:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "109.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "record_id": "flaws_cloudtrail:0000465:046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "row_index": 465, "timestamp": "2019-07-27T08:49:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "eventTime": "2019-07-27T08:49:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "10.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "record_id": "flaws_cloudtrail:0000466:046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "row_index": 466, "timestamp": "2019-07-27T08:49:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046b3fe0-d7a5-49ca-a2a7-033d833fb80f", "eventTime": "2019-07-27T08:49:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "10.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c88ce232-bd15-43b4-a327-abdf101b1888", "record_id": "flaws_cloudtrail:0000467:c88ce232-bd15-43b4-a327-abdf101b1888", "row_index": 467, "timestamp": "2019-07-27T08:49:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c88ce232-bd15-43b4-a327-abdf101b1888", "eventTime": "2019-07-27T08:49:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "23763708973880.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c88ce232-bd15-43b4-a327-abdf101b1888", "record_id": "flaws_cloudtrail:0000468:c88ce232-bd15-43b4-a327-abdf101b1888", "row_index": 468, "timestamp": "2019-07-27T08:49:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c88ce232-bd15-43b4-a327-abdf101b1888", "eventTime": "2019-07-27T08:49:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "23763708973880.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fa5802-fca8-4023-bb64-36059b697", "record_id": "flaws_cloudtrail:0000469:91fa5802-fca8-4023-bb64-36059b697", "row_index": 469, "timestamp": "2019-07-27T08:49:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fa5802-fca8-4023-bb64-36059b697", "eventTime": "2019-07-27T08:49:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "110.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fa5802-fca8-4023-bb64-36059b697", "record_id": "flaws_cloudtrail:0000470:91fa5802-fca8-4023-bb64-36059b697", "row_index": 470, "timestamp": "2019-07-27T08:49:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fa5802-fca8-4023-bb64-36059b697", "eventTime": "2019-07-27T08:49:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "110.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "record_id": "flaws_cloudtrail:0000471:a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "row_index": 471, "timestamp": "2019-07-27T08:49:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "eventTime": "2019-07-27T08:49:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "25233367957916.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "record_id": "flaws_cloudtrail:0000472:a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "row_index": 472, "timestamp": "2019-07-27T08:49:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d5db08-f5e4-4af3-927b-9c7e230f3eaa", "eventTime": "2019-07-27T08:49:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "25233367957916.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "record_id": "flaws_cloudtrail:0000473:a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "row_index": 473, "timestamp": "2019-07-27T08:49:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "eventTime": "2019-07-27T08:49:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "43126418915712.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "record_id": "flaws_cloudtrail:0000474:a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "row_index": 474, "timestamp": "2019-07-27T08:49:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a7fec4-c946-4680-8b8b-8c4bb95d9843", "eventTime": "2019-07-27T08:49:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "43126418915712.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "record_id": "flaws_cloudtrail:0000475:7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "row_index": 475, "timestamp": "2019-07-27T08:49:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "eventTime": "2019-07-27T08:49:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "111.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "record_id": "flaws_cloudtrail:0000476:7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "row_index": 476, "timestamp": "2019-07-27T08:49:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b704874-6bd3-4702-bbbb-bc4cf0cf3c20", "eventTime": "2019-07-27T08:49:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "111.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7330e4d3-7f4a-4805-8cba-99756c6ee67d", "record_id": "flaws_cloudtrail:0000477:7330e4d3-7f4a-4805-8cba-99756c6ee67d", "row_index": 477, "timestamp": "2019-07-27T08:49:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7330e4d3-7f4a-4805-8cba-99756c6ee67d", "eventTime": "2019-07-27T08:49:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "34984138985866.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7330e4d3-7f4a-4805-8cba-99756c6ee67d", "record_id": "flaws_cloudtrail:0000478:7330e4d3-7f4a-4805-8cba-99756c6ee67d", "row_index": 478, "timestamp": "2019-07-27T08:49:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7330e4d3-7f4a-4805-8cba-99756c6ee67d", "eventTime": "2019-07-27T08:49:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "34984138985866.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "record_id": "flaws_cloudtrail:0000479:9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "row_index": 479, "timestamp": "2019-07-27T08:49:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "eventTime": "2019-07-27T08:49:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "82077833468982.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "record_id": "flaws_cloudtrail:0000480:9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "row_index": 480, "timestamp": "2019-07-27T08:49:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fe67275-3f8d-4f4f-84d4-36e6ce052f4e", "eventTime": "2019-07-27T08:49:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "82077833468982.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "record_id": "flaws_cloudtrail:0000481:a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "row_index": 481, "timestamp": "2019-07-27T08:49:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "eventTime": "2019-07-27T08:49:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "112.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "record_id": "flaws_cloudtrail:0000482:a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "row_index": 482, "timestamp": "2019-07-27T08:49:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6fa6697-3434-4e4e-a9dc-5b822527f0d7", "eventTime": "2019-07-27T08:49:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "112.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e51ef05-9e72-45da-beb3-9acb996c1354", "record_id": "flaws_cloudtrail:0000483:5e51ef05-9e72-45da-beb3-9acb996c1354", "row_index": 483, "timestamp": "2019-07-27T08:49:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e51ef05-9e72-45da-beb3-9acb996c1354", "eventTime": "2019-07-27T08:49:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "114.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e51ef05-9e72-45da-beb3-9acb996c1354", "record_id": "flaws_cloudtrail:0000484:5e51ef05-9e72-45da-beb3-9acb996c1354", "row_index": 484, "timestamp": "2019-07-27T08:49:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e51ef05-9e72-45da-beb3-9acb996c1354", "eventTime": "2019-07-27T08:49:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "114.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68bd58de-10e7-4574-b688-f684c202dc7b", "record_id": "flaws_cloudtrail:0000485:68bd58de-10e7-4574-b688-f684c202dc7b", "row_index": 485, "timestamp": "2019-07-27T08:49:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68bd58de-10e7-4574-b688-f684c202dc7b", "eventTime": "2019-07-27T08:49:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "117.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68bd58de-10e7-4574-b688-f684c202dc7b", "record_id": "flaws_cloudtrail:0000486:68bd58de-10e7-4574-b688-f684c202dc7b", "row_index": 486, "timestamp": "2019-07-27T08:49:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68bd58de-10e7-4574-b688-f684c202dc7b", "eventTime": "2019-07-27T08:49:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "117.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a05b8a6-e311-4742-8080-edc27644f", "record_id": "flaws_cloudtrail:0000487:0a05b8a6-e311-4742-8080-edc27644f", "row_index": 487, "timestamp": "2019-07-27T08:49:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a05b8a6-e311-4742-8080-edc27644f", "eventTime": "2019-07-27T08:49:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "118.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a05b8a6-e311-4742-8080-edc27644f", "record_id": "flaws_cloudtrail:0000488:0a05b8a6-e311-4742-8080-edc27644f", "row_index": 488, "timestamp": "2019-07-27T08:49:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a05b8a6-e311-4742-8080-edc27644f", "eventTime": "2019-07-27T08:49:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "118.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e129661-805d-42bf-a0dc-54ad59830cb3", "record_id": "flaws_cloudtrail:0000489:e129661-805d-42bf-a0dc-54ad59830cb3", "row_index": 489, "timestamp": "2019-07-27T08:49:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e129661-805d-42bf-a0dc-54ad59830cb3", "eventTime": "2019-07-27T08:49:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "119.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e129661-805d-42bf-a0dc-54ad59830cb3", "record_id": "flaws_cloudtrail:0000490:e129661-805d-42bf-a0dc-54ad59830cb3", "row_index": 490, "timestamp": "2019-07-27T08:49:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e129661-805d-42bf-a0dc-54ad59830cb3", "eventTime": "2019-07-27T08:49:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "119.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734ac390-52f3-4354-bc28-8b31862e", "record_id": "flaws_cloudtrail:0000491:734ac390-52f3-4354-bc28-8b31862e", "row_index": 491, "timestamp": "2019-07-27T08:49:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734ac390-52f3-4354-bc28-8b31862e", "eventTime": "2019-07-27T08:49:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "11.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734ac390-52f3-4354-bc28-8b31862e", "record_id": "flaws_cloudtrail:0000492:734ac390-52f3-4354-bc28-8b31862e", "row_index": 492, "timestamp": "2019-07-27T08:49:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734ac390-52f3-4354-bc28-8b31862e", "eventTime": "2019-07-27T08:49:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "11.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "record_id": "flaws_cloudtrail:0000493:a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "row_index": 493, "timestamp": "2019-07-27T08:49:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "eventTime": "2019-07-27T08:49:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "120.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "record_id": "flaws_cloudtrail:0000494:a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "row_index": 494, "timestamp": "2019-07-27T08:49:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79d78c4-ca2a-4ee5-a78a-4a1fe4c7046f", "eventTime": "2019-07-27T08:49:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "120.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bafec91c-9035-4943-bbad-0c271cadd07a", "record_id": "flaws_cloudtrail:0000495:bafec91c-9035-4943-bbad-0c271cadd07a", "row_index": 495, "timestamp": "2019-07-27T08:49:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bafec91c-9035-4943-bbad-0c271cadd07a", "eventTime": "2019-07-27T08:49:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "121.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bafec91c-9035-4943-bbad-0c271cadd07a", "record_id": "flaws_cloudtrail:0000496:bafec91c-9035-4943-bbad-0c271cadd07a", "row_index": 496, "timestamp": "2019-07-27T08:49:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bafec91c-9035-4943-bbad-0c271cadd07a", "eventTime": "2019-07-27T08:49:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "121.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4be534e-5c6f-4d75-8bf7-2404affae363", "record_id": "flaws_cloudtrail:0000497:f4be534e-5c6f-4d75-8bf7-2404affae363", "row_index": 497, "timestamp": "2019-07-27T08:49:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4be534e-5c6f-4d75-8bf7-2404affae363", "eventTime": "2019-07-27T08:49:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "122.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4be534e-5c6f-4d75-8bf7-2404affae363", "record_id": "flaws_cloudtrail:0000498:f4be534e-5c6f-4d75-8bf7-2404affae363", "row_index": 498, "timestamp": "2019-07-27T08:49:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4be534e-5c6f-4d75-8bf7-2404affae363", "eventTime": "2019-07-27T08:49:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "122.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5265b66d-ca35-4600-9e73-be9021f29adb", "record_id": "flaws_cloudtrail:0000499:5265b66d-ca35-4600-9e73-be9021f29adb", "row_index": 499, "timestamp": "2019-07-27T08:49:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5265b66d-ca35-4600-9e73-be9021f29adb", "eventTime": "2019-07-27T08:49:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "707068.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5265b66d-ca35-4600-9e73-be9021f29adb", "record_id": "flaws_cloudtrail:0000500:5265b66d-ca35-4600-9e73-be9021f29adb", "row_index": 500, "timestamp": "2019-07-27T08:49:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5265b66d-ca35-4600-9e73-be9021f29adb", "eventTime": "2019-07-27T08:49:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "707068.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090d4215-4be1-4463-9caf-8931396e0eaf", "record_id": "flaws_cloudtrail:0000501:090d4215-4be1-4463-9caf-8931396e0eaf", "row_index": 501, "timestamp": "2019-07-27T08:49:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090d4215-4be1-4463-9caf-8931396e0eaf", "eventTime": "2019-07-27T08:49:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "05815.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090d4215-4be1-4463-9caf-8931396e0eaf", "record_id": "flaws_cloudtrail:0000502:090d4215-4be1-4463-9caf-8931396e0eaf", "row_index": 502, "timestamp": "2019-07-27T08:49:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090d4215-4be1-4463-9caf-8931396e0eaf", "eventTime": "2019-07-27T08:49:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "05815.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1691a772-5d9f-4157-8a50-cca212781", "record_id": "flaws_cloudtrail:0000503:1691a772-5d9f-4157-8a50-cca212781", "row_index": 503, "timestamp": "2019-07-27T08:49:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1691a772-5d9f-4157-8a50-cca212781", "eventTime": "2019-07-27T08:49:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1234.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1691a772-5d9f-4157-8a50-cca212781", "record_id": "flaws_cloudtrail:0000504:1691a772-5d9f-4157-8a50-cca212781", "row_index": 504, "timestamp": "2019-07-27T08:49:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1691a772-5d9f-4157-8a50-cca212781", "eventTime": "2019-07-27T08:49:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1234.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "record_id": "flaws_cloudtrail:0000505:659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "row_index": 505, "timestamp": "2019-07-27T08:49:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "eventTime": "2019-07-27T08:49:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "123.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "record_id": "flaws_cloudtrail:0000506:659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "row_index": 506, "timestamp": "2019-07-27T08:49:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659ba672-c47e-43b5-a00e-3a5ba0c85bd9", "eventTime": "2019-07-27T08:49:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "123.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a244a029-bcc1-4c1c-9157-b0a896bef61d", "record_id": "flaws_cloudtrail:0000507:a244a029-bcc1-4c1c-9157-b0a896bef61d", "row_index": 507, "timestamp": "2019-07-27T08:49:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a244a029-bcc1-4c1c-9157-b0a896bef61d", "eventTime": "2019-07-27T08:49:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "126.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a244a029-bcc1-4c1c-9157-b0a896bef61d", "record_id": "flaws_cloudtrail:0000508:a244a029-bcc1-4c1c-9157-b0a896bef61d", "row_index": 508, "timestamp": "2019-07-27T08:49:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a244a029-bcc1-4c1c-9157-b0a896bef61d", "eventTime": "2019-07-27T08:49:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "126.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e40d19cf-04bb-4206-8398-e0ac7072a9d6", "record_id": "flaws_cloudtrail:0000509:e40d19cf-04bb-4206-8398-e0ac7072a9d6", "row_index": 509, "timestamp": "2019-07-27T08:49:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e40d19cf-04bb-4206-8398-e0ac7072a9d6", "eventTime": "2019-07-27T08:49:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "127.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e40d19cf-04bb-4206-8398-e0ac7072a9d6", "record_id": "flaws_cloudtrail:0000510:e40d19cf-04bb-4206-8398-e0ac7072a9d6", "row_index": 510, "timestamp": "2019-07-27T08:49:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e40d19cf-04bb-4206-8398-e0ac7072a9d6", "eventTime": "2019-07-27T08:49:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "127.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16992a-0aa7-4210-bb53-5055d4af338f", "record_id": "flaws_cloudtrail:0000511:16992a-0aa7-4210-bb53-5055d4af338f", "row_index": 511, "timestamp": "2019-07-27T08:49:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16992a-0aa7-4210-bb53-5055d4af338f", "eventTime": "2019-07-27T08:49:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "128.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16992a-0aa7-4210-bb53-5055d4af338f", "record_id": "flaws_cloudtrail:0000512:16992a-0aa7-4210-bb53-5055d4af338f", "row_index": 512, "timestamp": "2019-07-27T08:49:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16992a-0aa7-4210-bb53-5055d4af338f", "eventTime": "2019-07-27T08:49:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "128.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474c1932-ea73-468f-bf13-240d25eb3957", "record_id": "flaws_cloudtrail:0000513:474c1932-ea73-468f-bf13-240d25eb3957", "row_index": 513, "timestamp": "2019-07-27T08:49:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474c1932-ea73-468f-bf13-240d25eb3957", "eventTime": "2019-07-27T08:49:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "129.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474c1932-ea73-468f-bf13-240d25eb3957", "record_id": "flaws_cloudtrail:0000514:474c1932-ea73-468f-bf13-240d25eb3957", "row_index": 514, "timestamp": "2019-07-27T08:49:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474c1932-ea73-468f-bf13-240d25eb3957", "eventTime": "2019-07-27T08:49:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "129.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57128bc2-d135-4672-b7b2-df3a72fb6793", "record_id": "flaws_cloudtrail:0000515:57128bc2-d135-4672-b7b2-df3a72fb6793", "row_index": 515, "timestamp": "2019-07-27T08:49:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57128bc2-d135-4672-b7b2-df3a72fb6793", "eventTime": "2019-07-27T08:49:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "12.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57128bc2-d135-4672-b7b2-df3a72fb6793", "record_id": "flaws_cloudtrail:0000516:57128bc2-d135-4672-b7b2-df3a72fb6793", "row_index": 516, "timestamp": "2019-07-27T08:49:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57128bc2-d135-4672-b7b2-df3a72fb6793", "eventTime": "2019-07-27T08:49:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "12.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "record_id": "flaws_cloudtrail:0000517:974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "row_index": 517, "timestamp": "2019-07-27T08:49:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "eventTime": "2019-07-27T08:49:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "130.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "record_id": "flaws_cloudtrail:0000518:974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "row_index": 518, "timestamp": "2019-07-27T08:49:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974ad3cb-0da9-47bf-bf6c-3cecf895e22c", "eventTime": "2019-07-27T08:49:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "130.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15b1ed39-b2ed-4971-a517-18567e00e", "record_id": "flaws_cloudtrail:0000519:15b1ed39-b2ed-4971-a517-18567e00e", "row_index": 519, "timestamp": "2019-07-27T08:49:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15b1ed39-b2ed-4971-a517-18567e00e", "eventTime": "2019-07-27T08:49:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "131.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15b1ed39-b2ed-4971-a517-18567e00e", "record_id": "flaws_cloudtrail:0000520:15b1ed39-b2ed-4971-a517-18567e00e", "row_index": 520, "timestamp": "2019-07-27T08:49:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15b1ed39-b2ed-4971-a517-18567e00e", "eventTime": "2019-07-27T08:49:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "131.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1045b1-eaf8-442d-9533-221282ab0a2f", "record_id": "flaws_cloudtrail:0000521:fd1045b1-eaf8-442d-9533-221282ab0a2f", "row_index": 521, "timestamp": "2019-07-27T08:49:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1045b1-eaf8-442d-9533-221282ab0a2f", "eventTime": "2019-07-27T08:49:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "132.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1045b1-eaf8-442d-9533-221282ab0a2f", "record_id": "flaws_cloudtrail:0000522:fd1045b1-eaf8-442d-9533-221282ab0a2f", "row_index": 522, "timestamp": "2019-07-27T08:49:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1045b1-eaf8-442d-9533-221282ab0a2f", "eventTime": "2019-07-27T08:49:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "132.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "record_id": "flaws_cloudtrail:0000523:c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "row_index": 523, "timestamp": "2019-07-27T08:49:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "eventTime": "2019-07-27T08:49:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "134.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "record_id": "flaws_cloudtrail:0000524:c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "row_index": 524, "timestamp": "2019-07-27T08:49:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c68cea59-4e7e-4ed2-9ec0-42c8ccd677162", "eventTime": "2019-07-27T08:49:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "134.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "138642f82-cf19-40e3-9f85-696ce64abe01", "record_id": "flaws_cloudtrail:0000525:138642f82-cf19-40e3-9f85-696ce64abe01", "row_index": 525, "timestamp": "2019-07-27T08:49:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "138642f82-cf19-40e3-9f85-696ce64abe01", "eventTime": "2019-07-27T08:49:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "135.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "138642f82-cf19-40e3-9f85-696ce64abe01", "record_id": "flaws_cloudtrail:0000526:138642f82-cf19-40e3-9f85-696ce64abe01", "row_index": 526, "timestamp": "2019-07-27T08:49:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "138642f82-cf19-40e3-9f85-696ce64abe01", "eventTime": "2019-07-27T08:49:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "135.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "828316fee-85b2-42d0-a22b-0b878abd0d31", "record_id": "flaws_cloudtrail:0000527:828316fee-85b2-42d0-a22b-0b878abd0d31", "row_index": 527, "timestamp": "2019-07-27T08:49:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "828316fee-85b2-42d0-a22b-0b878abd0d31", "eventTime": "2019-07-27T08:49:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "137.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "828316fee-85b2-42d0-a22b-0b878abd0d31", "record_id": "flaws_cloudtrail:0000528:828316fee-85b2-42d0-a22b-0b878abd0d31", "row_index": 528, "timestamp": "2019-07-27T08:49:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "828316fee-85b2-42d0-a22b-0b878abd0d31", "eventTime": "2019-07-27T08:49:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "137.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401676-292c-464f-af69-2b7b4692dfd9", "record_id": "flaws_cloudtrail:0000529:401676-292c-464f-af69-2b7b4692dfd9", "row_index": 529, "timestamp": "2019-07-27T08:49:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401676-292c-464f-af69-2b7b4692dfd9", "eventTime": "2019-07-27T08:49:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "13.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401676-292c-464f-af69-2b7b4692dfd9", "record_id": "flaws_cloudtrail:0000530:401676-292c-464f-af69-2b7b4692dfd9", "row_index": 530, "timestamp": "2019-07-27T08:49:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401676-292c-464f-af69-2b7b4692dfd9", "eventTime": "2019-07-27T08:49:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "13.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7791c429-ba7c-471c-b884-ef5f00cc076f", "record_id": "flaws_cloudtrail:0000531:7791c429-ba7c-471c-b884-ef5f00cc076f", "row_index": 531, "timestamp": "2019-07-27T08:49:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7791c429-ba7c-471c-b884-ef5f00cc076f", "eventTime": "2019-07-27T08:49:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "14.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7791c429-ba7c-471c-b884-ef5f00cc076f", "record_id": "flaws_cloudtrail:0000532:7791c429-ba7c-471c-b884-ef5f00cc076f", "row_index": 532, "timestamp": "2019-07-27T08:49:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7791c429-ba7c-471c-b884-ef5f00cc076f", "eventTime": "2019-07-27T08:49:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "14.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "557981cd3-afe3-4248-8db1-99b93bec0abd", "record_id": "flaws_cloudtrail:0000533:557981cd3-afe3-4248-8db1-99b93bec0abd", "row_index": 533, "timestamp": "2019-07-27T08:49:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "557981cd3-afe3-4248-8db1-99b93bec0abd", "eventTime": "2019-07-27T08:49:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "15.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "557981cd3-afe3-4248-8db1-99b93bec0abd", "record_id": "flaws_cloudtrail:0000534:557981cd3-afe3-4248-8db1-99b93bec0abd", "row_index": 534, "timestamp": "2019-07-27T08:49:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "557981cd3-afe3-4248-8db1-99b93bec0abd", "eventTime": "2019-07-27T08:49:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "15.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834c019c-707f-4c91-88c9-8eff5c0bf02c", "record_id": "flaws_cloudtrail:0000535:834c019c-707f-4c91-88c9-8eff5c0bf02c", "row_index": 535, "timestamp": "2019-07-27T08:49:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834c019c-707f-4c91-88c9-8eff5c0bf02c", "eventTime": "2019-07-27T08:49:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "162.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834c019c-707f-4c91-88c9-8eff5c0bf02c", "record_id": "flaws_cloudtrail:0000536:834c019c-707f-4c91-88c9-8eff5c0bf02c", "row_index": 536, "timestamp": "2019-07-27T08:49:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834c019c-707f-4c91-88c9-8eff5c0bf02c", "eventTime": "2019-07-27T08:49:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "162.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44e9ff7-377c-49aa-9364-5e278d731cc2", "record_id": "flaws_cloudtrail:0000537:f44e9ff7-377c-49aa-9364-5e278d731cc2", "row_index": 537, "timestamp": "2019-07-27T08:50:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44e9ff7-377c-49aa-9364-5e278d731cc2", "eventTime": "2019-07-27T08:50:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "163.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44e9ff7-377c-49aa-9364-5e278d731cc2", "record_id": "flaws_cloudtrail:0000538:f44e9ff7-377c-49aa-9364-5e278d731cc2", "row_index": 538, "timestamp": "2019-07-27T08:50:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44e9ff7-377c-49aa-9364-5e278d731cc2", "eventTime": "2019-07-27T08:50:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "163.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cede4447-8175-4b0a-b6ec-e871c2d83e95", "record_id": "flaws_cloudtrail:0000539:cede4447-8175-4b0a-b6ec-e871c2d83e95", "row_index": 539, "timestamp": "2019-07-27T08:50:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cede4447-8175-4b0a-b6ec-e871c2d83e95", "eventTime": "2019-07-27T08:50:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "168.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cede4447-8175-4b0a-b6ec-e871c2d83e95", "record_id": "flaws_cloudtrail:0000540:cede4447-8175-4b0a-b6ec-e871c2d83e95", "row_index": 540, "timestamp": "2019-07-27T08:50:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cede4447-8175-4b0a-b6ec-e871c2d83e95", "eventTime": "2019-07-27T08:50:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "168.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "record_id": "flaws_cloudtrail:0000541:ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "row_index": 541, "timestamp": "2019-07-27T08:50:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "eventTime": "2019-07-27T08:50:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "169.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "record_id": "flaws_cloudtrail:0000542:ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "row_index": 542, "timestamp": "2019-07-27T08:50:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3947ea-e06d-4a0d-a1bf-d330a5b7960f", "eventTime": "2019-07-27T08:50:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "169.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4504a6-b3f4-4422-970f-599b306a2fd5", "record_id": "flaws_cloudtrail:0000543:bf4504a6-b3f4-4422-970f-599b306a2fd5", "row_index": 543, "timestamp": "2019-07-27T08:50:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4504a6-b3f4-4422-970f-599b306a2fd5", "eventTime": "2019-07-27T08:50:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "16.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4504a6-b3f4-4422-970f-599b306a2fd5", "record_id": "flaws_cloudtrail:0000544:bf4504a6-b3f4-4422-970f-599b306a2fd5", "row_index": 544, "timestamp": "2019-07-27T08:50:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4504a6-b3f4-4422-970f-599b306a2fd5", "eventTime": "2019-07-27T08:50:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "16.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786954a-c86c-40de-9734-1aadd7d29030", "record_id": "flaws_cloudtrail:0000545:786954a-c86c-40de-9734-1aadd7d29030", "row_index": 545, "timestamp": "2019-07-27T08:50:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786954a-c86c-40de-9734-1aadd7d29030", "eventTime": "2019-07-27T08:50:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "170.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786954a-c86c-40de-9734-1aadd7d29030", "record_id": "flaws_cloudtrail:0000546:786954a-c86c-40de-9734-1aadd7d29030", "row_index": 546, "timestamp": "2019-07-27T08:50:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786954a-c86c-40de-9734-1aadd7d29030", "eventTime": "2019-07-27T08:50:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "170.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9447d037-9746-4277-85c8-a3911a3e9c07", "record_id": "flaws_cloudtrail:0000547:9447d037-9746-4277-85c8-a3911a3e9c07", "row_index": 547, "timestamp": "2019-07-27T08:50:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9447d037-9746-4277-85c8-a3911a3e9c07", "eventTime": "2019-07-27T08:50:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "17.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9447d037-9746-4277-85c8-a3911a3e9c07", "record_id": "flaws_cloudtrail:0000548:9447d037-9746-4277-85c8-a3911a3e9c07", "row_index": 548, "timestamp": "2019-07-27T08:50:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9447d037-9746-4277-85c8-a3911a3e9c07", "eventTime": "2019-07-27T08:50:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "17.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ac04b85-d579-4525-86f9-f550765f8063f", "record_id": "flaws_cloudtrail:0000549:9ac04b85-d579-4525-86f9-f550765f8063f", "row_index": 549, "timestamp": "2019-07-27T08:50:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ac04b85-d579-4525-86f9-f550765f8063f", "eventTime": "2019-07-27T08:50:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "18.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ac04b85-d579-4525-86f9-f550765f8063f", "record_id": "flaws_cloudtrail:0000550:9ac04b85-d579-4525-86f9-f550765f8063f", "row_index": 550, "timestamp": "2019-07-27T08:50:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ac04b85-d579-4525-86f9-f550765f8063f", "eventTime": "2019-07-27T08:50:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "18.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "record_id": "flaws_cloudtrail:0000551:9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "row_index": 551, "timestamp": "2019-07-27T08:50:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "eventTime": "2019-07-27T08:50:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "19.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "record_id": "flaws_cloudtrail:0000552:9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "row_index": 552, "timestamp": "2019-07-27T08:50:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1bce8e-dfeb-4540-bbac-b9bafdcce1c9", "eventTime": "2019-07-27T08:50:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "19.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab26b448-9921-461c-9978-ffe229a44f8d", "record_id": "flaws_cloudtrail:0000553:ab26b448-9921-461c-9978-ffe229a44f8d", "row_index": 553, "timestamp": "2019-07-27T08:50:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab26b448-9921-461c-9978-ffe229a44f8d", "eventTime": "2019-07-27T08:50:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab26b448-9921-461c-9978-ffe229a44f8d", "record_id": "flaws_cloudtrail:0000554:ab26b448-9921-461c-9978-ffe229a44f8d", "row_index": 554, "timestamp": "2019-07-27T08:50:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab26b448-9921-461c-9978-ffe229a44f8d", "eventTime": "2019-07-27T08:50:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd5f5488-70be-4f6d-a940-af64158f003a", "record_id": "flaws_cloudtrail:0000555:cd5f5488-70be-4f6d-a940-af64158f003a", "row_index": 555, "timestamp": "2019-07-27T08:50:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd5f5488-70be-4f6d-a940-af64158f003a", "eventTime": "2019-07-27T08:50:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1c.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd5f5488-70be-4f6d-a940-af64158f003a", "record_id": "flaws_cloudtrail:0000556:cd5f5488-70be-4f6d-a940-af64158f003a", "row_index": 556, "timestamp": "2019-07-27T08:50:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd5f5488-70be-4f6d-a940-af64158f003a", "eventTime": "2019-07-27T08:50:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1c.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "record_id": "flaws_cloudtrail:0000557:53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "row_index": 557, "timestamp": "2019-07-27T08:50:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "eventTime": "2019-07-27T08:50:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1trmst2hn.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "record_id": "flaws_cloudtrail:0000558:53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "row_index": 558, "timestamp": "2019-07-27T08:50:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53881c9f-f5ce-4adf-bf68-cdaf8ad907f8", "eventTime": "2019-07-27T08:50:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "1trmst2hn.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f70cbf78-ab26-46cb-85c2-20455f15a8", "record_id": "flaws_cloudtrail:0000559:f70cbf78-ab26-46cb-85c2-20455f15a8", "row_index": 559, "timestamp": "2019-07-27T08:50:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f70cbf78-ab26-46cb-85c2-20455f15a8", "eventTime": "2019-07-27T08:50:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f70cbf78-ab26-46cb-85c2-20455f15a8", "record_id": "flaws_cloudtrail:0000560:f70cbf78-ab26-46cb-85c2-20455f15a8", "row_index": 560, "timestamp": "2019-07-27T08:50:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f70cbf78-ab26-46cb-85c2-20455f15a8", "eventTime": "2019-07-27T08:50:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2000.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1ccfbe7-2613-4045-a915-135341b48", "record_id": "flaws_cloudtrail:0000561:c1ccfbe7-2613-4045-a915-135341b48", "row_index": 561, "timestamp": "2019-07-27T08:50:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1ccfbe7-2613-4045-a915-135341b48", "eventTime": "2019-07-27T08:50:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2006.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1ccfbe7-2613-4045-a915-135341b48", "record_id": "flaws_cloudtrail:0000562:c1ccfbe7-2613-4045-a915-135341b48", "row_index": 562, "timestamp": "2019-07-27T08:50:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1ccfbe7-2613-4045-a915-135341b48", "eventTime": "2019-07-27T08:50:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2006.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "record_id": "flaws_cloudtrail:0000563:b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "row_index": 563, "timestamp": "2019-07-27T08:50:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "eventTime": "2019-07-27T08:50:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2007.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "record_id": "flaws_cloudtrail:0000564:b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "row_index": 564, "timestamp": "2019-07-27T08:50:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7695fc1-88ff-41b6-9b3d-7cda12ccc9aa", "eventTime": "2019-07-27T08:50:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2007.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "record_id": "flaws_cloudtrail:0000565:a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "row_index": 565, "timestamp": "2019-07-27T08:50:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "eventTime": "2019-07-27T08:50:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2008.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "record_id": "flaws_cloudtrail:0000566:a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "row_index": 566, "timestamp": "2019-07-27T08:50:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3ad5b4d-25b9-496b-82c0-c64ed70382eb", "eventTime": "2019-07-27T08:50:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2008.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb869e7d-06ec-4813-8fc3-ecf207752e7", "record_id": "flaws_cloudtrail:0000567:cb869e7d-06ec-4813-8fc3-ecf207752e7", "row_index": 567, "timestamp": "2019-07-27T08:50:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb869e7d-06ec-4813-8fc3-ecf207752e7", "eventTime": "2019-07-27T08:50:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2009.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb869e7d-06ec-4813-8fc3-ecf207752e7", "record_id": "flaws_cloudtrail:0000568:cb869e7d-06ec-4813-8fc3-ecf207752e7", "row_index": 568, "timestamp": "2019-07-27T08:50:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb869e7d-06ec-4813-8fc3-ecf207752e7", "eventTime": "2019-07-27T08:50:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2009.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd615491-2006-47f9-9074-4018b1bce253", "record_id": "flaws_cloudtrail:0000569:dcd615491-2006-47f9-9074-4018b1bce253", "row_index": 569, "timestamp": "2019-07-27T08:50:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd615491-2006-47f9-9074-4018b1bce253", "eventTime": "2019-07-27T08:50:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2010.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd615491-2006-47f9-9074-4018b1bce253", "record_id": "flaws_cloudtrail:0000570:dcd615491-2006-47f9-9074-4018b1bce253", "row_index": 570, "timestamp": "2019-07-27T08:50:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd615491-2006-47f9-9074-4018b1bce253", "eventTime": "2019-07-27T08:50:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2010.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d062be7a-f5b3-41f7-9b90-f059997f9aed4", "record_id": "flaws_cloudtrail:0000571:d062be7a-f5b3-41f7-9b90-f059997f9aed4", "row_index": 571, "timestamp": "2019-07-27T08:50:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d062be7a-f5b3-41f7-9b90-f059997f9aed4", "eventTime": "2019-07-27T08:50:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2011.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d062be7a-f5b3-41f7-9b90-f059997f9aed4", "record_id": "flaws_cloudtrail:0000572:d062be7a-f5b3-41f7-9b90-f059997f9aed4", "row_index": 572, "timestamp": "2019-07-27T08:50:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d062be7a-f5b3-41f7-9b90-f059997f9aed4", "eventTime": "2019-07-27T08:50:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2011.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "record_id": "flaws_cloudtrail:0000573:d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "row_index": 573, "timestamp": "2019-07-27T08:50:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "eventTime": "2019-07-27T08:50:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2012.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "record_id": "flaws_cloudtrail:0000574:d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "row_index": 574, "timestamp": "2019-07-27T08:50:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d850ef08-a3e1-4d82-9ef1-a6b6a0ae7008", "eventTime": "2019-07-27T08:50:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2012.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31098-3140-4423-8147-deac1d39146", "record_id": "flaws_cloudtrail:0000575:b31098-3140-4423-8147-deac1d39146", "row_index": 575, "timestamp": "2019-07-27T08:50:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31098-3140-4423-8147-deac1d39146", "eventTime": "2019-07-27T08:50:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2013.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31098-3140-4423-8147-deac1d39146", "record_id": "flaws_cloudtrail:0000576:b31098-3140-4423-8147-deac1d39146", "row_index": 576, "timestamp": "2019-07-27T08:50:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31098-3140-4423-8147-deac1d39146", "eventTime": "2019-07-27T08:50:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "2013.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855286-8d66-4f3b-b635-320fae0913dc", "record_id": "flaws_cloudtrail:0000577:855286-8d66-4f3b-b635-320fae0913dc", "row_index": 577, "timestamp": "2019-07-27T08:50:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855286-8d66-4f3b-b635-320fae0913dc", "eventTime": "2019-07-27T08:50:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "202.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855286-8d66-4f3b-b635-320fae0913dc", "record_id": "flaws_cloudtrail:0000578:855286-8d66-4f3b-b635-320fae0913dc", "row_index": 578, "timestamp": "2019-07-27T08:50:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855286-8d66-4f3b-b635-320fae0913dc", "eventTime": "2019-07-27T08:50:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "202.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001e35f6-d129-4459-8ae7-97400f690691", "record_id": "flaws_cloudtrail:0000579:001e35f6-d129-4459-8ae7-97400f690691", "row_index": 579, "timestamp": "2019-07-27T08:50:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001e35f6-d129-4459-8ae7-97400f690691", "eventTime": "2019-07-27T08:50:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "203.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001e35f6-d129-4459-8ae7-97400f690691", "record_id": "flaws_cloudtrail:0000580:001e35f6-d129-4459-8ae7-97400f690691", "row_index": 580, "timestamp": "2019-07-27T08:50:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001e35f6-d129-4459-8ae7-97400f690691", "eventTime": "2019-07-27T08:50:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "203.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff42d68-4880-40cd-9851-b8b4c7632b97", "record_id": "flaws_cloudtrail:0000581:bff42d68-4880-40cd-9851-b8b4c7632b97", "row_index": 581, "timestamp": "2019-07-27T08:50:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff42d68-4880-40cd-9851-b8b4c7632b97", "eventTime": "2019-07-27T08:50:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "204.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff42d68-4880-40cd-9851-b8b4c7632b97", "record_id": "flaws_cloudtrail:0000582:bff42d68-4880-40cd-9851-b8b4c7632b97", "row_index": 582, "timestamp": "2019-07-27T08:50:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff42d68-4880-40cd-9851-b8b4c7632b97", "eventTime": "2019-07-27T08:50:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "204.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "record_id": "flaws_cloudtrail:0000583:3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "row_index": 583, "timestamp": "2019-07-27T08:50:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "eventTime": "2019-07-27T08:50:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "205.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "record_id": "flaws_cloudtrail:0000584:3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "row_index": 584, "timestamp": "2019-07-27T08:50:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a321c5e-ea71-4f94-ba7f-260cf9a94ce2", "eventTime": "2019-07-27T08:50:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "205.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf104f16-f8a6-4b74-a2c1-cd705b82959c", "record_id": "flaws_cloudtrail:0000585:cf104f16-f8a6-4b74-a2c1-cd705b82959c", "row_index": 585, "timestamp": "2019-07-27T08:50:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf104f16-f8a6-4b74-a2c1-cd705b82959c", "eventTime": "2019-07-27T08:50:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "209.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf104f16-f8a6-4b74-a2c1-cd705b82959c", "record_id": "flaws_cloudtrail:0000586:cf104f16-f8a6-4b74-a2c1-cd705b82959c", "row_index": 586, "timestamp": "2019-07-27T08:50:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf104f16-f8a6-4b74-a2c1-cd705b82959c", "eventTime": "2019-07-27T08:50:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "209.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "record_id": "flaws_cloudtrail:0000587:d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "row_index": 587, "timestamp": "2019-07-27T08:50:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "eventTime": "2019-07-27T08:50:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "20.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "record_id": "flaws_cloudtrail:0000588:d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "row_index": 588, "timestamp": "2019-07-27T08:50:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d2499c-ef96-4b3a-b24d-379b3e658ca0", "eventTime": "2019-07-27T08:50:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "20.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8629abf3-d0d6-4dff-94be-61d0503c060b", "record_id": "flaws_cloudtrail:0000589:8629abf3-d0d6-4dff-94be-61d0503c060b", "row_index": 589, "timestamp": "2019-07-27T08:50:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8629abf3-d0d6-4dff-94be-61d0503c060b", "eventTime": "2019-07-27T08:50:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "211.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8629abf3-d0d6-4dff-94be-61d0503c060b", "record_id": "flaws_cloudtrail:0000590:8629abf3-d0d6-4dff-94be-61d0503c060b", "row_index": 590, "timestamp": "2019-07-27T08:50:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8629abf3-d0d6-4dff-94be-61d0503c060b", "eventTime": "2019-07-27T08:50:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "211.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "record_id": "flaws_cloudtrail:0000591:2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "row_index": 591, "timestamp": "2019-07-27T08:50:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "eventTime": "2019-07-27T08:50:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "21.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "record_id": "flaws_cloudtrail:0000592:2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "row_index": 592, "timestamp": "2019-07-27T08:50:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1ea6b3-b66b-4a1f-94de-f5ead569bc9f", "eventTime": "2019-07-27T08:50:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "21.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853f3ab7-18e1-4240-943d-0562211c2c90", "record_id": "flaws_cloudtrail:0000593:853f3ab7-18e1-4240-943d-0562211c2c90", "row_index": 593, "timestamp": "2019-07-27T08:50:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853f3ab7-18e1-4240-943d-0562211c2c90", "eventTime": "2019-07-27T08:50:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "228.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853f3ab7-18e1-4240-943d-0562211c2c90", "record_id": "flaws_cloudtrail:0000594:853f3ab7-18e1-4240-943d-0562211c2c90", "row_index": 594, "timestamp": "2019-07-27T08:50:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853f3ab7-18e1-4240-943d-0562211c2c90", "eventTime": "2019-07-27T08:50:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "228.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "204bc804-ab68-47d5-aae4-788b6ff9c799", "record_id": "flaws_cloudtrail:0000595:204bc804-ab68-47d5-aae4-788b6ff9c799", "row_index": 595, "timestamp": "2019-07-27T08:50:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "204bc804-ab68-47d5-aae4-788b6ff9c799", "eventTime": "2019-07-27T08:50:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "22.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "204bc804-ab68-47d5-aae4-788b6ff9c799", "record_id": "flaws_cloudtrail:0000596:204bc804-ab68-47d5-aae4-788b6ff9c799", "row_index": 596, "timestamp": "2019-07-27T08:50:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "204bc804-ab68-47d5-aae4-788b6ff9c799", "eventTime": "2019-07-27T08:50:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "22.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7050d6-829a-46e6-80f0-8dc251a3af9d", "record_id": "flaws_cloudtrail:0000597:ec7050d6-829a-46e6-80f0-8dc251a3af9d", "row_index": 597, "timestamp": "2019-07-27T08:50:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7050d6-829a-46e6-80f0-8dc251a3af9d", "eventTime": "2019-07-27T08:50:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "230.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7050d6-829a-46e6-80f0-8dc251a3af9d", "record_id": "flaws_cloudtrail:0000598:ec7050d6-829a-46e6-80f0-8dc251a3af9d", "row_index": 598, "timestamp": "2019-07-27T08:50:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7050d6-829a-46e6-80f0-8dc251a3af9d", "eventTime": "2019-07-27T08:50:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "230.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "record_id": "flaws_cloudtrail:0000599:5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "row_index": 599, "timestamp": "2019-07-27T08:50:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "eventTime": "2019-07-27T08:50:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "233.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "record_id": "flaws_cloudtrail:0000600:5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "row_index": 600, "timestamp": "2019-07-27T08:50:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad86a5c-cdac-4871-89a6-9ff79259c6a4", "eventTime": "2019-07-27T08:50:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "233.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3670f009-9722-4175-b39b-2dd588099e6c", "record_id": "flaws_cloudtrail:0000601:3670f009-9722-4175-b39b-2dd588099e6c", "row_index": 601, "timestamp": "2019-07-27T08:51:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3670f009-9722-4175-b39b-2dd588099e6c", "eventTime": "2019-07-27T08:51:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "234.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3670f009-9722-4175-b39b-2dd588099e6c", "record_id": "flaws_cloudtrail:0000602:3670f009-9722-4175-b39b-2dd588099e6c", "row_index": 602, "timestamp": "2019-07-27T08:51:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3670f009-9722-4175-b39b-2dd588099e6c", "eventTime": "2019-07-27T08:51:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "234.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b48c792-ed13-4f35-bd1e-37ce40b71cee", "record_id": "flaws_cloudtrail:0000603:6b48c792-ed13-4f35-bd1e-37ce40b71cee", "row_index": 603, "timestamp": "2019-07-27T08:51:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b48c792-ed13-4f35-bd1e-37ce40b71cee", "eventTime": "2019-07-27T08:51:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "23.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b48c792-ed13-4f35-bd1e-37ce40b71cee", "record_id": "flaws_cloudtrail:0000604:6b48c792-ed13-4f35-bd1e-37ce40b71cee", "row_index": 604, "timestamp": "2019-07-27T08:51:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b48c792-ed13-4f35-bd1e-37ce40b71cee", "eventTime": "2019-07-27T08:51:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "23.axisbank.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d904062f2-0163-4d81-a3c0-2a3465f8d611", "record_id": "flaws_cloudtrail:0000605:d904062f2-0163-4d81-a3c0-2a3465f8d611", "row_index": 605, "timestamp": "2019-07-27T08:51:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "70.185.129.94", "user_agent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d904062f2-0163-4d81-a3c0-2a3465f8d611", "eventTime": "2019-07-27T08:51:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "70.185.129.94", "userAgent": "[Boto3/1.9.47 Python/2.7.15+ Linux/4.18.0-kali1-amd64 Botocore/1.12.47 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "24.axisbank.com", "acl": [""]}, "resources": []}}