Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c792f568-6e22-4368-a92b-7ebbb8781302", "record_id": "flaws_cloudtrail:0000000:c792f568-6e22-4368-a92b-7ebbb8781302", "row_index": 0, "timestamp": "2019-06-18T22:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c792f568-6e22-4368-a92b-7ebbb8781302", "eventTime": "2019-06-18T22:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5OC2LPKPTTOL5ZYM", "expiration": "Jun 19, 2019 4:27:55 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "record_id": "flaws_cloudtrail:0000001:3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "row_index": 1, "timestamp": "2019-06-18T23:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1867, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "eventTime": "2019-06-18T23:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVCR1E91QNX8HQQ0B", "expiration": "Jun 19, 2019 5:52:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "record_id": "flaws_cloudtrail:0000002:3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "row_index": 2, "timestamp": "2019-06-18T23:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1867, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bd9bcfb-c1a2-4b78-af21-a6f00f81c47d", "eventTime": "2019-06-18T23:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVCR1E91QNX8HQQ0B", "expiration": "Jun 19, 2019 5:52:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "record_id": "flaws_cloudtrail:0000003:2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "row_index": 3, "timestamp": "2019-06-19T00:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "eventTime": "2019-06-19T00:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABKIOTO9HN6HZJ68P", "expiration": "Jun 19, 2019 6:29:11 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "record_id": "flaws_cloudtrail:0000004:2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "row_index": 4, "timestamp": "2019-06-19T00:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2de1990b-6cc6-4421-91e6-ec9eb3d7426d", "eventTime": "2019-06-19T00:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABKIOTO9HN6HZJ68P", "expiration": "Jun 19, 2019 6:29:11 AM", "sessionToken": "AgoJb3JpZ2luX2VjEDEaCXVzLXdlc3QtMiJIMEYCIQCGwMbaaon7V+E107xM7ywZQNJAznXOlEWnxKhbUFquEgIhAKIQZLStMTfDf3Iu1wUtm0YmBPlSddCvOhWAbuz2+Rs6KtoDCGoQABoMOTc1NDI2MjYyMDI5IgxkAy0W4Oye1ItZKzAqtwNJPpwSgQ8osehDKOKGSMUSNTt7YDS5cjjmuLi6c3ialyjCoKJmyp/Ri9WbfNrnlSAvBYfW6s/O1ndLb8wCvxx5SEy7MQwJHKBK+1cVynSQ3t9w3mTyYV/Q5TG4gzSYqCfABK2KclvOzBRHIiPWwcdVQGisH5pnIRnTDIhfip8LZIDjHmYwlDARnLGh4ViETVADpSHstUFrjhglmuxzRIq3vPpJJnrXn5MazUqHl4nROOhv5n/Upr0YEUSBLECz1L3x3O7tp8t0hohqIzF9aZwKZE5HKcxKUyqNdluIib3N8qVFBFAHumXXvxwYvN7t/A4NyqaE2sC7PJ8QYNcjQq9HfadFE5ev2jZQmcitjPGb54SaJL+Bwon4+tGUDQEY7Nr/PHRZLwV3aPnO7gpnCH3akTNmjyfILGDhYiBeVYW7Kf/cjzMYsE18Uq2jFOHK/cjS3vtujf+BC8sDQpNcoE8sDWydzhW6D4HKgw1yji2E4jIUlJw60YakhFy0rLMbs4h1heaYSzKRe63C5spDILxdVQt0Ve1gkU4GB+v59HWvpwe+PA1qzl+/T5LqjNL/rnvwGuZ4B88VMM2CpugFOrMBJnucH1rb2mcofnNQKn+3LK9P3gO6YTmvHjaU+JkWJw0+7nYMEDGA9fTkPubxauGrZl7gh1X5kohI4uIP04TqOdBO+9OlqFvW49k+9jsr9QQ/nrti77XdBRwIO8vmt1qg2wLt+5lwZUzgHdFHZqMduVDiEcvmfU7WG5gBvk5+1v67UH5MfAndTAhK+aML9UE57ZH4E7D/7JFM9rLnrqpc5noA2XFsj1q/v97Bt1Qu587bFnc="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fa44a4-a111-493c-8426-a81b6ce424913", "record_id": "flaws_cloudtrail:0000005:a1fa44a4-a111-493c-8426-a81b6ce424913", "row_index": 5, "timestamp": "2019-06-19T00:27:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1939, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fa44a4-a111-493c-8426-a81b6ce424913", "eventTime": "2019-06-19T00:27:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1VK8UUXX4JMK5GAX", "expiration": "Jun 19, 2019 1:27:56 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fa44a4-a111-493c-8426-a81b6ce424913", "record_id": "flaws_cloudtrail:0000006:a1fa44a4-a111-493c-8426-a81b6ce424913", "row_index": 6, "timestamp": "2019-06-19T00:27:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1939, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fa44a4-a111-493c-8426-a81b6ce424913", "eventTime": "2019-06-19T00:27:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1VK8UUXX4JMK5GAX", "expiration": "Jun 19, 2019 1:27:56 AM", "sessionToken": "AgoGb3JpZ2luEIT//////////wEaCXVzLXdlc3QtMiKAAl+fK2lBJfCfJyunl47xzC3dOl6fUkOs19FhijIsBswe9ZIYLDeDQ1JJUIzoBEguasvsWcrroYc/GGc49Rv2nbFqTF0ik7Um/VeNp25BX0q0/JR4O+zE8S0j6tM/mon5+3XcNF4ZGMPanlKWmmDeBwCBvem1oIA8IIqABthk2CyaCUpMQBGQD74wHFiZNEwIvh7Mx4HdliFRRPV02LCO04CGNofk+aBAEvi4ArkAEncyGI+Qf+iERGB/Gxla3GIVYXR35chCZkXT2HVmGxOikLc+f+Qjh5QoKBuiukZ+cmQTJ6UNWL4nZ0Mw+bDFlB6rYLfoOE1T97npGxdUPBUoduQq6AIIahAAGgw5NzU0MjYyNjIwMjkiDA4UPnCq0U9CMw6v7yrFAuiP5vVP34hUvhqBkhsAbYeYNsK0Ejk1AUpprUPr+ozwSEKhrmBQTRS6vI/1yFr8Pz9SUcaoghoDkIqwMe08VhKrccTMVQhO0OeHQUsy3tSR9+zb5DOQxj37ONAZmOWUCdmshKDsR4EuedKVIK3t/Ix5bjY23mBIcXhY7YuyusvoXffvPaga35xfBRh88jdo34Lo0+TM0DBsIlOTEzN6Nkn3c9731H7p5kkgrk8Tl0kst7KZtrGo/MRXjq5Tx0wNZBplj61Ac4w+5eWF9B+PawSDW+us/31xKWO+RlASJy1r4x5Y022755sBiAGV3Ikp80u3UmfbHyXE8bTGxqVTbiKNdWl3wOYMqzb/7h6bY10WRN6YlwX27NjIRlPggRlcjioszETn+pon5iK8Cl8cNYrhQc9d8mu3Myu+UtdkZB1lG5fiVGs4wjIOm6AU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "record_id": "flaws_cloudtrail:0000007:ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "row_index": 7, "timestamp": "2019-06-19T01:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "eventTime": "2019-06-19T01:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV1DIAOX6I7FM7MT7", "expiration": "Jun 19, 2019 7:29:50 AM", "sessionToken": "AgoJb3JpZ2luX2VjEDIaCXVzLXdlc3QtMiJHMEUCIQDqAPaGLpOxfhrojuP2pjdBVTirbuHQA0eFnHG7ULHn9wIgCTwB/TO3SVd1zqvmA6hIJkYwWcqYzyKUG6aaRhRcR14q2gMIaxAAGgw5NzU0MjYyNjIwMjkiDC1t7ZLJkDVtG+OUMiq3A1CGcy/DkdtVsk1hkxteE+neKJtzamYRLWTkEweuxEpnQEgruVwmMi+7KQFR3idcn92fosopifWpbYizod9pSm5HSuml5F4mfINS7+d1MxxFkmxgFeR1Muk9luYiphelqr9zdEo535GlMaLFckDJyScIYjuDcO97eC3+OVmmFEURrVMnt3t1vygvC3AZiNfHnEz+MPcP52hBVesIrWTq6GuT2u9ljDT+5LV2vmgL74QB2hpWZaH5sRimVIg+xJ3GyFA7JyiysBIHTpFYgf0UJRLDLcIAmEnowuR8Sb3Uba1OBoK83GjPAzspw2hUy6paxyArSloZHwmE4pNyVyNOngl11fdox3+wSJIVy0TcWzjySyeb5RtYCU0u1nnAmHSuXSUWPiGckpY823oHxSsSkq7JWSboGukc3gESFxDh5XZw89mdQLHucjYzATxGiv1YC+XWOqBhp3kPsE+IBrZVyYbq9thoXtHndxy0vHHbztN72PDtvCpNOTSodd68bFr7NuZzBDooiFdZBWsXeKnsSloNRZgJ0u//is2ffbdykT52ceK3QdREbr2VxWyd3K3RZHZ7IN7fMAow3Z6m6AU6tAF3ZO0PTFR2m7Tfr+ZNC1mrkAokJJCOmRCQWKI5yQ5ilS0OzR/bQGjez7CUhEz/hiAuY4JBmEsjG4FIni+P7mUBykPmAGSMzbcYUrUwnohi9HuH4CCUldaf1Ad0jaAwASDEIPYDSCWpOkyqiXYtzrTOdG1sk1MHZkebeAsn5ZHh3W5zr84cwa5KkBGdGORw8uDiSU+QJkeuz9seGaEHjhTyiw7d8J8lpbvd51a7rn1y7NLfWvo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "record_id": "flaws_cloudtrail:0000008:ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "row_index": 8, "timestamp": "2019-06-19T01:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef9d3fff-3bf9-47ac-8312-2da9a3a54aab", "eventTime": "2019-06-19T01:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV1DIAOX6I7FM7MT7", "expiration": "Jun 19, 2019 7:29:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "record_id": "flaws_cloudtrail:0000009:c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "row_index": 9, "timestamp": "2019-06-19T02:23:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "eventTime": "2019-06-19T02:23:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "record_id": "flaws_cloudtrail:0000010:c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "row_index": 10, "timestamp": "2019-06-19T02:23:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c17a7f3c-1ac2-4667-a23d-b89bf0233b93", "eventTime": "2019-06-19T02:23:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e770ac-d06c-4e98-870e-028c4cc5c3d2", "record_id": "flaws_cloudtrail:0000011:24e770ac-d06c-4e98-870e-028c4cc5c3d2", "row_index": 11, "timestamp": "2019-06-19T02:26:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e770ac-d06c-4e98-870e-028c4cc5c3d2", "eventTime": "2019-06-19T02:26:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e770ac-d06c-4e98-870e-028c4cc5c3d2", "record_id": "flaws_cloudtrail:0000012:24e770ac-d06c-4e98-870e-028c4cc5c3d2", "row_index": 12, "timestamp": "2019-06-19T02:26:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e770ac-d06c-4e98-870e-028c4cc5c3d2", "eventTime": "2019-06-19T02:26:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "[aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dff5b641-afb0-4c20-8661-e6f87a9f98c3", "record_id": "flaws_cloudtrail:0000013:dff5b641-afb0-4c20-8661-e6f87a9f98c3", "row_index": 13, "timestamp": "2019-06-19T02:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dff5b641-afb0-4c20-8661-e6f87a9f98c3", "eventTime": "2019-06-19T02:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMPR4PVD4NEC1MYHW", "expiration": "Jun 19, 2019 8:28:00 AM", "sessionToken": "AgoJb3JpZ2luX2VjEDMaCXVzLXdlc3QtMiJHMEUCIExT0hl+FPKsd5PKUML7KXhpfY15M4Hz2k2HuupP/I/yAiEA2Rb2yy5z5DQGXVcBSpw7mfmUFo8PfvMaLro1rkYliy4q2gMIbBAAGgw5NzU0MjYyNjIwMjkiDM5vTTxFV/PaWcUAiiq3A6Gw5I5eIlO6hSjv/X2X48djLzV586NLbooioPboQsCA4lcGoxIOgvpnGKrC7T60vO3CUdARMKWbMpVooEpsP/cFJpN7uNB8zZdKyL9ISfKomzgK9B+mY4oDehtuknADO89NjeOues3vRZTtFv/bWjPn32AM6rIF2/VuSd6eppMKJ/9sfbheTaLKREw0qC3GigYoySWjNJvDk75Rk+qfpAHcvLDOg+78DBeF+fjnJJJaAAWbzDEG2U5A4MVcQkXDZ4qtdU/qhN6Arilfnhylzo9ypn9YRAOjaP5lFcwDP9bZPwOckqsIaCvmRIfEPIw9AsLhsQIayfNaKvLhd/j2+ZrjhA+gYa6Yta2n3Gc774PMD+x6kxiDwCBKrjJNIUjIDGefrLGosf9U7orqRqCu/0Q4BfusDSdyjOLtW2D1r82onYwqQQlaY/sE1idyG5Wm3SIB1CUUtZqzndOnutAQsp/fBici0yiwlODZNzIfJ0jNEoNUaioNlX5Nz2BkNq1k4SMWsm/SNQzHXol/Odn54Y8Jz0MNo/kmR0tuPIc7YUjpNLS/m68/Sp9fISrwI7tzxts1/DX4Wxgw7bqm6AU6tAFTB2dxqbHn/uXI7L7+xcmfaWvrCAy0577l4aSQdqHnSiqWdwBLjSLkZSEyAMT1Ob8QMj2wUD5Ex0mJZRWTNPmDxnUHBSzSv6r1UNIqZk/mBYuhEm2FWJ6nXyGTxIQIrvj3z1asZwFXtfgufpO8gZh+SoKFoQm9M9oCheCnxpGQmmRWzZHQAfOiVjLVTyDmbKocqQlnBA+gJk67UyKzqyhx5JRjnabHDtbrW1YmPva7YV5eoBI="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dff5b641-afb0-4c20-8661-e6f87a9f98c3", "record_id": "flaws_cloudtrail:0000014:dff5b641-afb0-4c20-8661-e6f87a9f98c3", "row_index": 14, "timestamp": "2019-06-19T02:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dff5b641-afb0-4c20-8661-e6f87a9f98c3", "eventTime": "2019-06-19T02:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMPR4PVD4NEC1MYHW", "expiration": "Jun 19, 2019 8:28:00 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "record_id": "flaws_cloudtrail:0000015:09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "row_index": 15, "timestamp": "2019-06-19T02:34:14Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "eventTime": "2019-06-19T02:34:14Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "record_id": "flaws_cloudtrail:0000016:09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "row_index": 16, "timestamp": "2019-06-19T02:34:14Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09cd1c82-56e2-47c0-9d87-90e9a92cbb2c", "eventTime": "2019-06-19T02:34:14Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861de197-1e9b-4fd0-b956-5bf346854e", "record_id": "flaws_cloudtrail:0000017:861de197-1e9b-4fd0-b956-5bf346854e", "row_index": 17, "timestamp": "2019-06-19T02:35:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861de197-1e9b-4fd0-b956-5bf346854e", "eventTime": "2019-06-19T02:35:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861de197-1e9b-4fd0-b956-5bf346854e", "record_id": "flaws_cloudtrail:0000018:861de197-1e9b-4fd0-b956-5bf346854e", "row_index": 18, "timestamp": "2019-06-19T02:35:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861de197-1e9b-4fd0-b956-5bf346854e", "eventTime": "2019-06-19T02:35:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18af581-27e8-46da-a9fb-2ec33f6c7d38", "record_id": "flaws_cloudtrail:0000019:f18af581-27e8-46da-a9fb-2ec33f6c7d38", "row_index": 19, "timestamp": "2019-06-19T02:36:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18af581-27e8-46da-a9fb-2ec33f6c7d38", "eventTime": "2019-06-19T02:36:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTE1yUG40ZGpkQURTTXBSZTVyd2g4U0JGRDV0V2tFYkd4ZE5WQXF5ampjai9CN1B3R0UrMFpId3VER0llRDR3RmpOVExtUUVnQW5ydWdrb0JERFMraHBET0tVK3VkZm9aTXhYazhyd3cyWFZ3SWFzTmNESXVUZHB6MkZ0WmJIMHRxODU1QzlsM3JKMzdyNHVzWkxrb3NQWVRsWjhtOWE0eHV1eTEzdkZPMEo2SEtKbGxYMFJzZHRBV3lmS0pYM3JuWWlpTXlHRTN5cGpjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18af581-27e8-46da-a9fb-2ec33f6c7d38", "record_id": "flaws_cloudtrail:0000020:f18af581-27e8-46da-a9fb-2ec33f6c7d38", "row_index": 20, "timestamp": "2019-06-19T02:36:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18af581-27e8-46da-a9fb-2ec33f6c7d38", "eventTime": "2019-06-19T02:36:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTE1yUG40ZGpkQURTTXBSZTVyd2g4U0JGRDV0V2tFYkd4ZE5WQXF5ampjai9CN1B3R0UrMFpId3VER0llRDR3RmpOVExtUUVnQW5ydWdrb0JERFMraHBET0tVK3VkZm9aTXhYazhyd3cyWFZ3SWFzTmNESXVUZHB6MkZ0WmJIMHRxODU1QzlsM3JKMzdyNHVzWkxrb3NQWVRsWjhtOWE0eHV1eTEzdkZPMEo2SEtKbGxYMFJzZHRBV3lmS0pYM3JuWWlpTXlHRTN5cGpjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260877d78-6e50-4caf-987d-5bc5e3e1e951", "record_id": "flaws_cloudtrail:0000021:260877d78-6e50-4caf-987d-5bc5e3e1e951", "row_index": 21, "timestamp": "2019-06-19T02:36:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260877d78-6e50-4caf-987d-5bc5e3e1e951", "eventTime": "2019-06-19T02:36:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyUUcvbzE2b2psMTlrcTNiZkZBSnV5RmovRmVrY09mUHBDdWhlZUYyVmMzOWkwZW5FUnJOYW42QlBIUFhvWHpQSW1Pck5FRXpEL1R3TXM1OEpFU0tMZy9LeGJXc0JUOXhjTWdpV2dXNTFSV2JVeFRSL3Bjdzc3VGJWTzhpN0RwMVprWlYyWlFpNWdFcDN2WXo2Y2F3Mzh6cjBJT3NFUmVLdDVDOXJzU3NvY1Fpa1dOeGUveUM2bEthTGxveVFWd2JpbjBnekU1c1BjR2w1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260877d78-6e50-4caf-987d-5bc5e3e1e951", "record_id": "flaws_cloudtrail:0000022:260877d78-6e50-4caf-987d-5bc5e3e1e951", "row_index": 22, "timestamp": "2019-06-19T02:36:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260877d78-6e50-4caf-987d-5bc5e3e1e951", "eventTime": "2019-06-19T02:36:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyUUcvbzE2b2psMTlrcTNiZkZBSnV5RmovRmVrY09mUHBDdWhlZUYyVmMzOWkwZW5FUnJOYW42QlBIUFhvWHpQSW1Pck5FRXpEL1R3TXM1OEpFU0tMZy9LeGJXc0JUOXhjTWdpV2dXNTFSV2JVeFRSL3Bjdzc3VGJWTzhpN0RwMVprWlYyWlFpNWdFcDN2WXo2Y2F3Mzh6cjBJT3NFUmVLdDVDOXJzU3NvY1Fpa1dOeGUveUM2bEthTGxveVFWd2JpbjBnekU1c1BjR2w1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9097e508-cc86-4731-bfb5-171967c0bd082", "record_id": "flaws_cloudtrail:0000023:9097e508-cc86-4731-bfb5-171967c0bd082", "row_index": 23, "timestamp": "2019-06-19T02:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9097e508-cc86-4731-bfb5-171967c0bd082", "eventTime": "2019-06-19T02:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNU9VSjhKZ1FOZVViU1RXcjFwNXpkdWF3dE9iTk9UazFFMGNQd3ptNnJITjV0dXpiRmtLTitBdi9DNTF1ZXNUVmljRkVsdnB6VFIwSkQzRXZXaTJjczk3VnovZGwxWFRiZk1JOWw3ZUxlWkZuYThKeDlpOGVHSCtGam1CazN1VmpIcTV0NDllNWN0aW5lWmJQVUF2TEd6SzRrQnVKRmtCTjVscDZBREhIbXdoSVA0QzNJNC84RFpHRGNWMlcwSmNteUk4TkpYT3FSMFlTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9097e508-cc86-4731-bfb5-171967c0bd082", "record_id": "flaws_cloudtrail:0000024:9097e508-cc86-4731-bfb5-171967c0bd082", "row_index": 24, "timestamp": "2019-06-19T02:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9097e508-cc86-4731-bfb5-171967c0bd082", "eventTime": "2019-06-19T02:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNU9VSjhKZ1FOZVViU1RXcjFwNXpkdWF3dE9iTk9UazFFMGNQd3ptNnJITjV0dXpiRmtLTitBdi9DNTF1ZXNUVmljRkVsdnB6VFIwSkQzRXZXaTJjczk3VnovZGwxWFRiZk1JOWw3ZUxlWkZuYThKeDlpOGVHSCtGam1CazN1VmpIcTV0NDllNWN0aW5lWmJQVUF2TEd6SzRrQnVKRmtCTjVscDZBREhIbXdoSVA0QzNJNC84RFpHRGNWMlcwSmNteUk4TkpYT3FSMFlTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bfe7175-80b3-4687-9ca6-112601c51d62", "record_id": "flaws_cloudtrail:0000025:2bfe7175-80b3-4687-9ca6-112601c51d62", "row_index": 25, "timestamp": "2019-06-19T02:36:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bfe7175-80b3-4687-9ca6-112601c51d62", "eventTime": "2019-06-19T02:36:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbE9GVkVOVGtTNmhBbnkyMjZQRy9zRG0xalRuQzQ5ZWZmekwzU1Q3N2QyUms3Q1JyN0JUcGhkWWFScS9Rcy9KV0FFOWltNXlmNjhQaUZ0TVhZNm5IdnR6S3IydkxQZWwxS2dOdFVJeXZQYmF0OGxWRjdZQkU4UVNMSFFLd0orSTVid3JuUzllUmJmN3FzUW5vMmNtZ3RkeUFVellHV3ZFc1A2TkJkSUp1Nk81R1BrVjlFM3RCZEVKZXozK1V3Sks1d2RPS3UvWGhJUWVXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bfe7175-80b3-4687-9ca6-112601c51d62", "record_id": "flaws_cloudtrail:0000026:2bfe7175-80b3-4687-9ca6-112601c51d62", "row_index": 26, "timestamp": "2019-06-19T02:36:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bfe7175-80b3-4687-9ca6-112601c51d62", "eventTime": "2019-06-19T02:36:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbE9GVkVOVGtTNmhBbnkyMjZQRy9zRG0xalRuQzQ5ZWZmekwzU1Q3N2QyUms3Q1JyN0JUcGhkWWFScS9Rcy9KV0FFOWltNXlmNjhQaUZ0TVhZNm5IdnR6S3IydkxQZWwxS2dOdFVJeXZQYmF0OGxWRjdZQkU4UVNMSFFLd0orSTVid3JuUzllUmJmN3FzUW5vMmNtZ3RkeUFVellHV3ZFc1A2TkJkSUp1Nk81R1BrVjlFM3RCZEVKZXozK1V3Sks1d2RPS3UvWGhJUWVXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "record_id": "flaws_cloudtrail:0000027:0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "row_index": 27, "timestamp": "2019-06-19T02:36:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "eventTime": "2019-06-19T02:36:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2aC9FaHpPWm9wZ2NNOEZlVzVlN1AxK1RIMHVyV0Yvc1ZtbjR3N1pIOWdrUXd4eHJyYko3OHd3a0UrUTN5MGxKcFVwK1NWYlhnSW4wOFFWMGNUS3VpRkNTNW5Cb3dUUmlDRXVKcW1WNDRUZjIzWENXNUFEYWk1L3lKMjV4UlZYWDJMKy9oRGJuVUR0UE81V2l4aVlPQVdkMDNoNEJ2ZGtJckl6WVdpemVmT0VaWVdLK2V6MWFzNFVKeEFoak5PcTE0MjhNTjUxV3RRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "record_id": "flaws_cloudtrail:0000028:0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "row_index": 28, "timestamp": "2019-06-19T02:36:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b27d1b2-d8c8-4c5e-934b-3e6cc065cb6f", "eventTime": "2019-06-19T02:36:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2aC9FaHpPWm9wZ2NNOEZlVzVlN1AxK1RIMHVyV0Yvc1ZtbjR3N1pIOWdrUXd4eHJyYko3OHd3a0UrUTN5MGxKcFVwK1NWYlhnSW4wOFFWMGNUS3VpRkNTNW5Cb3dUUmlDRXVKcW1WNDRUZjIzWENXNUFEYWk1L3lKMjV4UlZYWDJMKy9oRGJuVUR0UE81V2l4aVlPQVdkMDNoNEJ2ZGtJckl6WVdpemVmT0VaWVdLK2V6MWFzNFVKeEFoak5PcTE0MjhNTjUxV3RRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34991c79-3ab7-41a5-b77e-99c8773610a3", "record_id": "flaws_cloudtrail:0000029:34991c79-3ab7-41a5-b77e-99c8773610a3", "row_index": 29, "timestamp": "2019-06-19T02:36:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34991c79-3ab7-41a5-b77e-99c8773610a3", "eventTime": "2019-06-19T02:36:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0VExROW93eEtobEZwMG9menFJVjdSWXE4SjlUMkhUQkZUWHJIRzRERjNjSHYzZk5BWXd6aURQV3c3WmI1RTJURENnczdhenJ5T3E5dFhXV2tGMTNtYzFEZXFEZ0EzQlhKVlNOZE8raVFGWHdXMWJHZUF5Vjdiei9GWUthaENrVmd3TkhvcXgwSHdSQkdtNTBrMFlmcklhb1VFWDN0WXBVeFcyZGZaMHFPbUJYSUVTVHlUejBJNjNHUWdJVENWMTU0T2V2L1V1eC9McHBOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34991c79-3ab7-41a5-b77e-99c8773610a3", "record_id": "flaws_cloudtrail:0000030:34991c79-3ab7-41a5-b77e-99c8773610a3", "row_index": 30, "timestamp": "2019-06-19T02:36:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34991c79-3ab7-41a5-b77e-99c8773610a3", "eventTime": "2019-06-19T02:36:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0VExROW93eEtobEZwMG9menFJVjdSWXE4SjlUMkhUQkZUWHJIRzRERjNjSHYzZk5BWXd6aURQV3c3WmI1RTJURENnczdhenJ5T3E5dFhXV2tGMTNtYzFEZXFEZ0EzQlhKVlNOZE8raVFGWHdXMWJHZUF5Vjdiei9GWUthaENrVmd3TkhvcXgwSHdSQkdtNTBrMFlmcklhb1VFWDN0WXBVeFcyZGZaMHFPbUJYSUVTVHlUejBJNjNHUWdJVENWMTU0T2V2L1V1eC9McHBOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "record_id": "flaws_cloudtrail:0000031:a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "row_index": 31, "timestamp": "2019-06-19T02:36:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "eventTime": "2019-06-19T02:36:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WGxYV09lZmZXZlBVWWxoKytrNVRIRjRlSWl4QWdqcE1na0kyeG4wWk80MFFBTE5YTHBEM2hPY0UveWdSY0JjcjNNNVdJV09BRExlOTBYd1FXRzY0SHo2VDZKNEVlOTNieFYzQXhOUVNRMzJZWEZ3R1Q3aWp2K21hRnAzTUprVDZpTWVSZHpreTRRWjdxMGxOelZyM2JrdVFkM3Z2ME5aSzJ3RXRDZDBjSGVIRTNjMWZHQ2RXUVdKRFRUbkJ1aU92aDRwMUorZ3ZucWwzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "record_id": "flaws_cloudtrail:0000032:a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "row_index": 32, "timestamp": "2019-06-19T02:36:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2fd9b6e-08fe-4315-b2f6-085456f0f32c", "eventTime": "2019-06-19T02:36:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WGxYV09lZmZXZlBVWWxoKytrNVRIRjRlSWl4QWdqcE1na0kyeG4wWk80MFFBTE5YTHBEM2hPY0UveWdSY0JjcjNNNVdJV09BRExlOTBYd1FXRzY0SHo2VDZKNEVlOTNieFYzQXhOUVNRMzJZWEZ3R1Q3aWp2K21hRnAzTUprVDZpTWVSZHpreTRRWjdxMGxOelZyM2JrdVFkM3Z2ME5aSzJ3RXRDZDBjSGVIRTNjMWZHQ2RXUVdKRFRUbkJ1aU92aDRwMUorZ3ZucWwzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cae9f150-8ced-48fa-9f7a-e2b50808d780", "record_id": "flaws_cloudtrail:0000033:cae9f150-8ced-48fa-9f7a-e2b50808d780", "row_index": 33, "timestamp": "2019-06-19T02:36:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cae9f150-8ced-48fa-9f7a-e2b50808d780", "eventTime": "2019-06-19T02:36:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyZVBTUkMzMTlVM0FKQnBPRkFOT3ZCcTg0NGxhellMbW52azN3U09aLzdBWDI2UlRwNGFZVVorb2tUS1ArYU5adk1RMjlPUFhDeUpLM3QybEJLK0N5TGJ1NkFZenVESENzQlpuM2xyOTR2cWk1ODhIcG5tSFpGRWhwclRFa1JmZmV6cWZEN3d3MUpjZDREZ3AvMmpHMjQza0JhWHdVeGNUcjQ5TFA4UllpbncyQm42UldhdFdIeXJoV3Y4QVdSN2Q1UkRvczFaVmZ2ekttdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cae9f150-8ced-48fa-9f7a-e2b50808d780", "record_id": "flaws_cloudtrail:0000034:cae9f150-8ced-48fa-9f7a-e2b50808d780", "row_index": 34, "timestamp": "2019-06-19T02:36:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cae9f150-8ced-48fa-9f7a-e2b50808d780", "eventTime": "2019-06-19T02:36:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyZVBTUkMzMTlVM0FKQnBPRkFOT3ZCcTg0NGxhellMbW52azN3U09aLzdBWDI2UlRwNGFZVVorb2tUS1ArYU5adk1RMjlPUFhDeUpLM3QybEJLK0N5TGJ1NkFZenVESENzQlpuM2xyOTR2cWk1ODhIcG5tSFpGRWhwclRFa1JmZmV6cWZEN3d3MUpjZDREZ3AvMmpHMjQza0JhWHdVeGNUcjQ5TFA4UllpbncyQm42UldhdFdIeXJoV3Y4QVdSN2Q1UkRvczFaVmZ2ekttdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5797b75-c86f-42a1-997f-84d6fee83f44", "record_id": "flaws_cloudtrail:0000035:c5797b75-c86f-42a1-997f-84d6fee83f44", "row_index": 35, "timestamp": "2019-06-19T02:36:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5797b75-c86f-42a1-997f-84d6fee83f44", "eventTime": "2019-06-19T02:36:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvWU1kYkZNVXc5L3czTXkvK2hrcXNEZWVMMkhpYkFCa1hsQmw5bDRWYUFlell5KzJVcExoMWZEOXFqQzNUSkkwMDNjVytDN0ZaUHlCRWViM0swemFKTWZJU2huWStocmJ0S2xBQlFzS2VtZUl3NG9STzNoMDJwMmY0cTRPcHMxMG1zdzhzN0kzTGg1aHFDb3dSVUp2SWNOS1RIelZLUG8ycEZ5TVZRU2ZseWo0UzVnM3UybUlnT2s4ZmJ2TEVjT2NMWWloamM0ajYxM1VDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5797b75-c86f-42a1-997f-84d6fee83f44", "record_id": "flaws_cloudtrail:0000036:c5797b75-c86f-42a1-997f-84d6fee83f44", "row_index": 36, "timestamp": "2019-06-19T02:36:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5797b75-c86f-42a1-997f-84d6fee83f44", "eventTime": "2019-06-19T02:36:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvWU1kYkZNVXc5L3czTXkvK2hrcXNEZWVMMkhpYkFCa1hsQmw5bDRWYUFlell5KzJVcExoMWZEOXFqQzNUSkkwMDNjVytDN0ZaUHlCRWViM0swemFKTWZJU2huWStocmJ0S2xBQlFzS2VtZUl3NG9STzNoMDJwMmY0cTRPcHMxMG1zdzhzN0kzTGg1aHFDb3dSVUp2SWNOS1RIelZLUG8ycEZ5TVZRU2ZseWo0UzVnM3UybUlnT2s4ZmJ2TEVjT2NMWWloamM0ajYxM1VDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f044167-fc0b-4102-812b-7b798a6fc982", "record_id": "flaws_cloudtrail:0000037:f6f044167-fc0b-4102-812b-7b798a6fc982", "row_index": 37, "timestamp": "2019-06-19T02:36:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f044167-fc0b-4102-812b-7b798a6fc982", "eventTime": "2019-06-19T02:36:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNaXNLZ0NOU2JCUklsVHNjVkNYUEloZ3I4YVZCejdzTVZZT0Ezckc4elhKZHp0ZEFPMkhzZWpvdTl4alNsODBGOVdxR3FSaXhxQVYvR1lsd1J1aUppU3JtaXdTRGJVdmpwMG5YY3lLQ0lXYW5CTjR3VzFUb0hCWGl1U0MwdUFHL3pPektHU1lyTnZzbFMzMGVWNUdsaTlZY0pFNkdkSW5sSzN3ZXE1RS9KTDZaWXhvUVhDTkZKTDluY0RTVytJYml5VjlhVGJFRXUydjhBUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f044167-fc0b-4102-812b-7b798a6fc982", "record_id": "flaws_cloudtrail:0000038:f6f044167-fc0b-4102-812b-7b798a6fc982", "row_index": 38, "timestamp": "2019-06-19T02:36:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f044167-fc0b-4102-812b-7b798a6fc982", "eventTime": "2019-06-19T02:36:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNaXNLZ0NOU2JCUklsVHNjVkNYUEloZ3I4YVZCejdzTVZZT0Ezckc4elhKZHp0ZEFPMkhzZWpvdTl4alNsODBGOVdxR3FSaXhxQVYvR1lsd1J1aUppU3JtaXdTRGJVdmpwMG5YY3lLQ0lXYW5CTjR3VzFUb0hCWGl1U0MwdUFHL3pPektHU1lyTnZzbFMzMGVWNUdsaTlZY0pFNkdkSW5sSzN3ZXE1RS9KTDZaWXhvUVhDTkZKTDluY0RTVytJYml5VjlhVGJFRXUydjhBUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4af44145-369e-481d-b857-857cf59838bb", "record_id": "flaws_cloudtrail:0000039:4af44145-369e-481d-b857-857cf59838bb", "row_index": 39, "timestamp": "2019-06-19T02:36:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4af44145-369e-481d-b857-857cf59838bb", "eventTime": "2019-06-19T02:36:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMDRrOFlOUWdVSlFtbE9HeHhTUEtTN1Biem40cDNXK21iZHN6Rlk3TTBObjBXNkJ5dGpyVSs1NFNULzJ5WDQ1aVFSdithM2JMK3RMSkRrUDRncTNwelBDSXE5dE5GOXVlSzFveS9tS3Fsbjk5K1Y5OTJIL28zL29Gb0dIRHRuUkhvTW1tWVBoZEQyc2FZWVhIUS81aW5rTHN2WGhEWkZZd0VEREVnVGJqMklZQzI2bmpHWVd5alJZSFNWaTBrdHgwQ0Vyd212ZDh0Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4af44145-369e-481d-b857-857cf59838bb", "record_id": "flaws_cloudtrail:0000040:4af44145-369e-481d-b857-857cf59838bb", "row_index": 40, "timestamp": "2019-06-19T02:36:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4af44145-369e-481d-b857-857cf59838bb", "eventTime": "2019-06-19T02:36:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMDRrOFlOUWdVSlFtbE9HeHhTUEtTN1Biem40cDNXK21iZHN6Rlk3TTBObjBXNkJ5dGpyVSs1NFNULzJ5WDQ1aVFSdithM2JMK3RMSkRrUDRncTNwelBDSXE5dE5GOXVlSzFveS9tS3Fsbjk5K1Y5OTJIL28zL29Gb0dIRHRuUkhvTW1tWVBoZEQyc2FZWVhIUS81aW5rTHN2WGhEWkZZd0VEREVnVGJqMklZQzI2bmpHWVd5alJZSFNWaTBrdHgwQ0Vyd212ZDh0Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "record_id": "flaws_cloudtrail:0000041:4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "row_index": 41, "timestamp": "2019-06-19T02:36:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "eventTime": "2019-06-19T02:36:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSHlNSTdIVW84czJkSG52dGViWVJza0xJTDdpaFAyZDMyUG5naUpheExmcFpjRFJRTmV2M2xld2EyR0RPazhPY0pMUlpYR29nZUY1T05ZZTFtYmc3YXNiU3REcXZZU0NtdUUyZ2R5VTFmdkhhVHBkUWt4L1Rha1JYMHZjQ0JPZmxBVXYwUjdyeVVHV3RGSkFXNzdoOFpUTldGUUw4WkhaaTcvYVFVcTV6ekxJVkNQTncvVkpkT3NVU3o1YXVsL1ptaDFXL3lkZnU0eVk4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "record_id": "flaws_cloudtrail:0000042:4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "row_index": 42, "timestamp": "2019-06-19T02:36:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d11a05b-9071-4a8b-9e86-25df75b0b3ec", "eventTime": "2019-06-19T02:36:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSHlNSTdIVW84czJkSG52dGViWVJza0xJTDdpaFAyZDMyUG5naUpheExmcFpjRFJRTmV2M2xld2EyR0RPazhPY0pMUlpYR29nZUY1T05ZZTFtYmc3YXNiU3REcXZZU0NtdUUyZ2R5VTFmdkhhVHBkUWt4L1Rha1JYMHZjQ0JPZmxBVXYwUjdyeVVHV3RGSkFXNzdoOFpUTldGUUw4WkhaaTcvYVFVcTV6ekxJVkNQTncvVkpkT3NVU3o1YXVsL1ptaDFXL3lkZnU0eVk4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e588001-a1f3-4ba4-b896-f5b7c3acc051", "record_id": "flaws_cloudtrail:0000043:9e588001-a1f3-4ba4-b896-f5b7c3acc051", "row_index": 43, "timestamp": "2019-06-19T02:36:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e588001-a1f3-4ba4-b896-f5b7c3acc051", "eventTime": "2019-06-19T02:36:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNFJqS3RvcnJuc3U2ZEFMK25NRFRHSWRnZUVmWXQwUFJpanV4Y1Y3VFArOHIrZURVaHFRVEVYbytOQjUxQ3NyOExmTXRJc0xVSUg4eFJTamM2Q0lOTStOYWcwdURKckVXeXlYK2lWTG9rQUYrY3BHemhMUzZQWmlMWkFvTk1nY09BWVNxOFh4U3J1ckpEdkpBQkJ3QlBvalo5R1VScTBIYThqclNpZ2tRM3hYckRoamR1RXB6WEtvdzhTVEVydlJydVNYU3dFTFRKaVJQUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e588001-a1f3-4ba4-b896-f5b7c3acc051", "record_id": "flaws_cloudtrail:0000044:9e588001-a1f3-4ba4-b896-f5b7c3acc051", "row_index": 44, "timestamp": "2019-06-19T02:36:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e588001-a1f3-4ba4-b896-f5b7c3acc051", "eventTime": "2019-06-19T02:36:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNFJqS3RvcnJuc3U2ZEFMK25NRFRHSWRnZUVmWXQwUFJpanV4Y1Y3VFArOHIrZURVaHFRVEVYbytOQjUxQ3NyOExmTXRJc0xVSUg4eFJTamM2Q0lOTStOYWcwdURKckVXeXlYK2lWTG9rQUYrY3BHemhMUzZQWmlMWkFvTk1nY09BWVNxOFh4U3J1ckpEdkpBQkJ3QlBvalo5R1VScTBIYThqclNpZ2tRM3hYckRoamR1RXB6WEtvdzhTVEVydlJydVNYU3dFTFRKaVJQUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7275ad2-286e-494c-b009-24a0c6e1d065", "record_id": "flaws_cloudtrail:0000045:f7275ad2-286e-494c-b009-24a0c6e1d065", "row_index": 45, "timestamp": "2019-06-19T02:36:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7275ad2-286e-494c-b009-24a0c6e1d065", "eventTime": "2019-06-19T02:36:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtK0JDZTBxRURrdWhjb002V0JFZER1WWI2T2hrTnREc0JGaFlVZk9kWkVZbnhrT1l3dytaMHRDeSticDg3c3NGWm5pMzFWUEVsV1djazF3eFViSHRwTmJTUTJrSHZ6M3A0OVVxcEsvcHUvTHVpVEY3OEFUYk4wRW5EVkFFVjUwSWV5aUp5Qi84YS9JSGdWUVIvVEw2WEpvdGh3MTJVVEkvZVRsR2ZmZnZzMDF4ZGo0Wk95eFQyRTNUOWxXS1p3V0pzRmNVMXJUOHlodTE3WGRDSDhqSjkrNG9pblFiUEVjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7275ad2-286e-494c-b009-24a0c6e1d065", "record_id": "flaws_cloudtrail:0000046:f7275ad2-286e-494c-b009-24a0c6e1d065", "row_index": 46, "timestamp": "2019-06-19T02:36:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7275ad2-286e-494c-b009-24a0c6e1d065", "eventTime": "2019-06-19T02:36:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtK0JDZTBxRURrdWhjb002V0JFZER1WWI2T2hrTnREc0JGaFlVZk9kWkVZbnhrT1l3dytaMHRDeSticDg3c3NGWm5pMzFWUEVsV1djazF3eFViSHRwTmJTUTJrSHZ6M3A0OVVxcEsvcHUvTHVpVEY3OEFUYk4wRW5EVkFFVjUwSWV5aUp5Qi84YS9JSGdWUVIvVEw2WEpvdGh3MTJVVEkvZVRsR2ZmZnZzMDF4ZGo0Wk95eFQyRTNUOWxXS1p3V0pzRmNVMXJUOHlodTE3WGRDSDhqSjkrNG9pblFiUEVjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "record_id": "flaws_cloudtrail:0000047:2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "row_index": 47, "timestamp": "2019-06-19T02:36:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "eventTime": "2019-06-19T02:36:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNTJLU3NuNlE4TkcvVzM4U3lNYWpndFk1UkdJR3VBcVNwQk5KeVRjUHU1STdOWDRWd3ZFV2lEd2ZQRTNRbkxhN2VDVFZXQklLY2FjQkswVWlkbkI5Y3M1cTBhNG9IcnZueWcvTGtndU53WDd6MjhQUVh6MHdTeE5GOUhLNFhVYU1TMHNSVzV1QkZPbDRPNlJpUlRyTHM5Qi9wYUJVMDdvcTJNUkh5cE9oUkxFTXFjTTdkdmhQSHdFaTgvZGhEWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8644e27-f9f5-4978-8cc5-311dc993fd1c", "record_id": "flaws_cloudtrail:0000048:e8644e27-f9f5-4978-8cc5-311dc993fd1c", "row_index": 48, "timestamp": "2019-06-19T02:36:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8644e27-f9f5-4978-8cc5-311dc993fd1c", "eventTime": "2019-06-19T02:36:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTXM0dUJ3WlNwZXRiTm9vSXBZOW1hb2RCcVZrUndMYzNIS1NiaUNPcFphSWhOR1JMK1NDWDNmNVRNM2RPNHpzejE2U0RkeGV4Mm14WGc1c2VYQ2VNcFZtVk1xNnY0cUhCVHBiY2thK3oyK0h6WWpRd0lXQTZHdUEwTEhNbS9XaldaUFIvNFA1UC9oWk9NcW5WZHBOLzNLSDdDZjM4czcwNCtlalFLTXRMbmMrRDZKRW9pMUl6ZFpPMmdyQW5CRDA2cGRnSzJZa2dBeEI4TWRvOFJsODY0NmNEY1ovMHBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "record_id": "flaws_cloudtrail:0000049:2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "row_index": 49, "timestamp": "2019-06-19T02:36:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2209b9cd-f5c6-470d-84e4-1e7243aaa68d", "eventTime": "2019-06-19T02:36:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNTJLU3NuNlE4TkcvVzM4U3lNYWpndFk1UkdJR3VBcVNwQk5KeVRjUHU1STdOWDRWd3ZFV2lEd2ZQRTNRbkxhN2VDVFZXQklLY2FjQkswVWlkbkI5Y3M1cTBhNG9IcnZueWcvTGtndU53WDd6MjhQUVh6MHdTeE5GOUhLNFhVYU1TMHNSVzV1QkZPbDRPNlJpUlRyTHM5Qi9wYUJVMDdvcTJNUkh5cE9oUkxFTXFjTTdkdmhQSHdFaTgvZGhEWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8644e27-f9f5-4978-8cc5-311dc993fd1c", "record_id": "flaws_cloudtrail:0000050:e8644e27-f9f5-4978-8cc5-311dc993fd1c", "row_index": 50, "timestamp": "2019-06-19T02:36:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8644e27-f9f5-4978-8cc5-311dc993fd1c", "eventTime": "2019-06-19T02:36:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTXM0dUJ3WlNwZXRiTm9vSXBZOW1hb2RCcVZrUndMYzNIS1NiaUNPcFphSWhOR1JMK1NDWDNmNVRNM2RPNHpzejE2U0RkeGV4Mm14WGc1c2VYQ2VNcFZtVk1xNnY0cUhCVHBiY2thK3oyK0h6WWpRd0lXQTZHdUEwTEhNbS9XaldaUFIvNFA1UC9oWk9NcW5WZHBOLzNLSDdDZjM4czcwNCtlalFLTXRMbmMrRDZKRW9pMUl6ZFpPMmdyQW5CRDA2cGRnSzJZa2dBeEI4TWRvOFJsODY0NmNEY1ovMHBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b8524f-bdb8-4565-b294-5433c07747c6", "record_id": "flaws_cloudtrail:0000051:68b8524f-bdb8-4565-b294-5433c07747c6", "row_index": 51, "timestamp": "2019-06-19T02:36:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b8524f-bdb8-4565-b294-5433c07747c6", "eventTime": "2019-06-19T02:36:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWENoZ0NOWWpGL2xTS2JzblBDRUtmMkZaNk9xZjVmalRZOEVIbXdxRStRN2x4WXRZMkFOL2ZjYUh0Ym5OSWZQYWZUVm84SEpSb0NLSlZodTZpYnVLdGIweXh5OE5OaE82R2llV1VzYVpveE1Uc29wbmtNTG9zUFROb3BGUGpURW5tWVRDaERaM2hvYmFITzBQRzJNNTZTN3BnVk9ZMHp3TUMrSFpSMFZsS3FqbmJWTFZKdzNJZFdiMzdxdmluaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b8524f-bdb8-4565-b294-5433c07747c6", "record_id": "flaws_cloudtrail:0000052:68b8524f-bdb8-4565-b294-5433c07747c6", "row_index": 52, "timestamp": "2019-06-19T02:36:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b8524f-bdb8-4565-b294-5433c07747c6", "eventTime": "2019-06-19T02:36:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWENoZ0NOWWpGL2xTS2JzblBDRUtmMkZaNk9xZjVmalRZOEVIbXdxRStRN2x4WXRZMkFOL2ZjYUh0Ym5OSWZQYWZUVm84SEpSb0NLSlZodTZpYnVLdGIweXh5OE5OaE82R2llV1VzYVpveE1Uc29wbmtNTG9zUFROb3BGUGpURW5tWVRDaERaM2hvYmFITzBQRzJNNTZTN3BnVk9ZMHp3TUMrSFpSMFZsS3FqbmJWTFZKdzNJZFdiMzdxdmluaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "record_id": "flaws_cloudtrail:0000053:e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "row_index": 53, "timestamp": "2019-06-19T02:36:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "eventTime": "2019-06-19T02:36:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Wm1nRnBPUUF1cldjMTRYWGs3T3J4Y3pYTmRaKzkrNnVtWXBZcFo0YWJTbGkwTTlhRDFmd25lNnRrYnNvNDFrcjBWLzBoOWdINnhlQStTQlg4RUNmWFpBdHdQdnFmRE1vWW1wbk85NEJMcEFGcXhVbitYdVFhc3p5L2hHMk9vYnhnbmkvZUE2ZWpkR2h3VG5NV2RnNFVkNUExbGZYeTdaQ2ZGMUFYTjAzZ2sxT3N6ZXhabnArb3NsR2I0R2QySGFlUUN0dEp5TjNYRTZoY3FaRGh6L3dMVG9uL0M5aERvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "record_id": "flaws_cloudtrail:0000054:e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "row_index": 54, "timestamp": "2019-06-19T02:36:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5cc1654-6bb3-4f17-9896-05bcb43fb0cc", "eventTime": "2019-06-19T02:36:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Wm1nRnBPUUF1cldjMTRYWGs3T3J4Y3pYTmRaKzkrNnVtWXBZcFo0YWJTbGkwTTlhRDFmd25lNnRrYnNvNDFrcjBWLzBoOWdINnhlQStTQlg4RUNmWFpBdHdQdnFmRE1vWW1wbk85NEJMcEFGcXhVbitYdVFhc3p5L2hHMk9vYnhnbmkvZUE2ZWpkR2h3VG5NV2RnNFVkNUExbGZYeTdaQ2ZGMUFYTjAzZ2sxT3N6ZXhabnArb3NsR2I0R2QySGFlUUN0dEp5TjNYRTZoY3FaRGh6L3dMVG9uL0M5aERvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "record_id": "flaws_cloudtrail:0000055:dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "row_index": 55, "timestamp": "2019-06-19T02:36:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "eventTime": "2019-06-19T02:36:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxYndZQW9Ha1NlWEZlS3lzaE1TSEpxZ21PZjVUZ3M3YnZOSzJRN2xCUDU4eFRUamd2b2I2c1RlNVRCSnlyTFZLcUtPeTU5d2Rqdk1oY2NVeENRZDMxNnF5amltNEZnTmpUcFo5WnZIb3ZScGlNMzZOZTVWcXM2UHZSMlRWQWI3TTRWZXQxY0hlTEFkOE1LYjdOZ09BTjJ5Y3Y5S0kzQ1FyVEFWTGsyeFJYbDZaSytQRWRWQzRibGdIT1k1aG1OVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "record_id": "flaws_cloudtrail:0000056:dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "row_index": 56, "timestamp": "2019-06-19T02:36:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbcdbed8-ba6b-47c3-83f0-d3b1eebb8edc", "eventTime": "2019-06-19T02:36:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxYndZQW9Ha1NlWEZlS3lzaE1TSEpxZ21PZjVUZ3M3YnZOSzJRN2xCUDU4eFRUamd2b2I2c1RlNVRCSnlyTFZLcUtPeTU5d2Rqdk1oY2NVeENRZDMxNnF5amltNEZnTmpUcFo5WnZIb3ZScGlNMzZOZTVWcXM2UHZSMlRWQWI3TTRWZXQxY0hlTEFkOE1LYjdOZ09BTjJ5Y3Y5S0kzQ1FyVEFWTGsyeFJYbDZaSytQRWRWQzRibGdIT1k1aG1OVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1afc6422-8416-4483-bc65-a5999aa8943d", "record_id": "flaws_cloudtrail:0000057:1afc6422-8416-4483-bc65-a5999aa8943d", "row_index": 57, "timestamp": "2019-06-19T02:36:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1afc6422-8416-4483-bc65-a5999aa8943d", "eventTime": "2019-06-19T02:36:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVDIxbUhpVzdETWRZeWxSbDVVdVBHNW8wMndHWjFnQXkvR1lpUURMeUNFcnYwK1prSmY5alhZZFp5c01QZ2l0WnR3T3E1RDBsYm9MSjlDYzc1d09oTkJhcGU0ODFiVHNlNndzTW9YZzFIK3FBNmgvbU03QW1FRjJidFdjWDVRNW9CcHF0ZE5vWEhDT1pBUVFZRVU0dlRuR1d0RWhkL0tpblNkSkZQaW1zZEZlTmRjb0JTQmUzU3czWG5MVlZLVmtldUJLbEwvZTErbWVqQkZHbjZMK2ZjTHNUT294Q05FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1afc6422-8416-4483-bc65-a5999aa8943d", "record_id": "flaws_cloudtrail:0000058:1afc6422-8416-4483-bc65-a5999aa8943d", "row_index": 58, "timestamp": "2019-06-19T02:36:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1afc6422-8416-4483-bc65-a5999aa8943d", "eventTime": "2019-06-19T02:36:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVDIxbUhpVzdETWRZeWxSbDVVdVBHNW8wMndHWjFnQXkvR1lpUURMeUNFcnYwK1prSmY5alhZZFp5c01QZ2l0WnR3T3E1RDBsYm9MSjlDYzc1d09oTkJhcGU0ODFiVHNlNndzTW9YZzFIK3FBNmgvbU03QW1FRjJidFdjWDVRNW9CcHF0ZE5vWEhDT1pBUVFZRVU0dlRuR1d0RWhkL0tpblNkSkZQaW1zZEZlTmRjb0JTQmUzU3czWG5MVlZLVmtldUJLbEwvZTErbWVqQkZHbjZMK2ZjTHNUT294Q05FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6806b77-ffba-41c0-a922-e0b0056d1046", "record_id": "flaws_cloudtrail:0000059:c6806b77-ffba-41c0-a922-e0b0056d1046", "row_index": 59, "timestamp": "2019-06-19T02:36:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6806b77-ffba-41c0-a922-e0b0056d1046", "eventTime": "2019-06-19T02:36:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPMzl3cTZabEwvUjEwQVI0aXhUVEFyaU5Rcm8yOUtBcWN4UGdkZkNiOGZGSlNZb0NjWTZYVzhMRVVZRk5KQTFibW5aTkdMTVBkTVJwVTdLeDRhRzNGUXlhTmhUWnhiL2dBNFkwUEZ2K09pRTJGbUhiTTB0YlozQmJCMzIwVTdWc1NhdXFSYm8yOEJDYkNDT3hucG9VTmpFanNqZ3ExZU5GT2RUZjhPT1hwak5SR0lad2FLbXNkS0NxMFl0a1FNZUl1aDhvVDBhTmovTDZQMGVzdytXM1o0WmIrQ0hFbTZrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b257f06a-9f23-4288-aa76-687443927291", "record_id": "flaws_cloudtrail:0000060:b257f06a-9f23-4288-aa76-687443927291", "row_index": 60, "timestamp": "2019-06-19T02:36:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b257f06a-9f23-4288-aa76-687443927291", "eventTime": "2019-06-19T02:36:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1cm9QdDBKQnNZZXcwNkR2NUU0dlFGMEE0ak1Ia1puODVlTGxxQ1RJcml4RlNHUkJMckFqcmVnZ3NLOE0wZHlYMHN4bXRlcktUc2k2TUhPM1RMMmh5bmpycGIwY3R5eGlyM01xaVF4azhXU0ZqRC9jNjBUSXprd1VkYmk5alhpbVpmYjFnVm1aMmNxcTlIWWEvajNGbXk4Vi83ZWJyRnRlRXJRYjhwMGVHZ056LzkyUkVOalNyclU2alhjQnFEMnBkZmd2ckV4VlBKZkowZ1RTMGxLSVhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6806b77-ffba-41c0-a922-e0b0056d1046", "record_id": "flaws_cloudtrail:0000061:c6806b77-ffba-41c0-a922-e0b0056d1046", "row_index": 61, "timestamp": "2019-06-19T02:36:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6806b77-ffba-41c0-a922-e0b0056d1046", "eventTime": "2019-06-19T02:36:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPMzl3cTZabEwvUjEwQVI0aXhUVEFyaU5Rcm8yOUtBcWN4UGdkZkNiOGZGSlNZb0NjWTZYVzhMRVVZRk5KQTFibW5aTkdMTVBkTVJwVTdLeDRhRzNGUXlhTmhUWnhiL2dBNFkwUEZ2K09pRTJGbUhiTTB0YlozQmJCMzIwVTdWc1NhdXFSYm8yOEJDYkNDT3hucG9VTmpFanNqZ3ExZU5GT2RUZjhPT1hwak5SR0lad2FLbXNkS0NxMFl0a1FNZUl1aDhvVDBhTmovTDZQMGVzdytXM1o0WmIrQ0hFbTZrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b257f06a-9f23-4288-aa76-687443927291", "record_id": "flaws_cloudtrail:0000062:b257f06a-9f23-4288-aa76-687443927291", "row_index": 62, "timestamp": "2019-06-19T02:36:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b257f06a-9f23-4288-aa76-687443927291", "eventTime": "2019-06-19T02:36:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1cm9QdDBKQnNZZXcwNkR2NUU0dlFGMEE0ak1Ia1puODVlTGxxQ1RJcml4RlNHUkJMckFqcmVnZ3NLOE0wZHlYMHN4bXRlcktUc2k2TUhPM1RMMmh5bmpycGIwY3R5eGlyM01xaVF4azhXU0ZqRC9jNjBUSXprd1VkYmk5alhpbVpmYjFnVm1aMmNxcTlIWWEvajNGbXk4Vi83ZWJyRnRlRXJRYjhwMGVHZ056LzkyUkVOalNyclU2alhjQnFEMnBkZmd2ckV4VlBKZkowZ1RTMGxLSVhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f533686-9921-424a-a82b-701415886732", "record_id": "flaws_cloudtrail:0000063:28f533686-9921-424a-a82b-701415886732", "row_index": 63, "timestamp": "2019-06-19T02:36:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f533686-9921-424a-a82b-701415886732", "eventTime": "2019-06-19T02:36:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxYzJuM2MyTjBKT0JtZW8xWkVNQWVVZzE0RnNNQTUzd1ZGTzE1TmZlbWlIaENxUUVzRHlhY0NaRmxwWFZYL2RyQkZOZGJST3pmTk9CaExGNmJ5MEIzSkJzTWN3Ni9ZYWpnbkFTOHRmcm5haCtLMzRFM0JJd0ExSjF6NlBlSGFJWmp0TUQ2dFppVGJBKzlHckRIL3ZMeFJ4dk1PZFJZQjZkaXgzdTRacnFvcjZWUVNaWVBFL1NnOGVyMVJNeFl4ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f533686-9921-424a-a82b-701415886732", "record_id": "flaws_cloudtrail:0000064:28f533686-9921-424a-a82b-701415886732", "row_index": 64, "timestamp": "2019-06-19T02:36:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f533686-9921-424a-a82b-701415886732", "eventTime": "2019-06-19T02:36:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxYzJuM2MyTjBKT0JtZW8xWkVNQWVVZzE0RnNNQTUzd1ZGTzE1TmZlbWlIaENxUUVzRHlhY0NaRmxwWFZYL2RyQkZOZGJST3pmTk9CaExGNmJ5MEIzSkJzTWN3Ni9ZYWpnbkFTOHRmcm5haCtLMzRFM0JJd0ExSjF6NlBlSGFJWmp0TUQ2dFppVGJBKzlHckRIL3ZMeFJ4dk1PZFJZQjZkaXgzdTRacnFvcjZWUVNaWVBFL1NnOGVyMVJNeFl4ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e936d7fa-0986-4c92-92f6-03de436810cac", "record_id": "flaws_cloudtrail:0000065:e936d7fa-0986-4c92-92f6-03de436810cac", "row_index": 65, "timestamp": "2019-06-19T02:40:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e936d7fa-0986-4c92-92f6-03de436810cac", "eventTime": "2019-06-19T02:40:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e936d7fa-0986-4c92-92f6-03de436810cac", "record_id": "flaws_cloudtrail:0000066:e936d7fa-0986-4c92-92f6-03de436810cac", "row_index": 66, "timestamp": "2019-06-19T02:40:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e936d7fa-0986-4c92-92f6-03de436810cac", "eventTime": "2019-06-19T02:40:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b921c68-fdf8-49cc-9c0a-70f145443a2a", "record_id": "flaws_cloudtrail:0000067:1b921c68-fdf8-49cc-9c0a-70f145443a2a", "row_index": 67, "timestamp": "2019-06-19T02:40:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b921c68-fdf8-49cc-9c0a-70f145443a2a", "eventTime": "2019-06-19T02:40:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFM3ptOWJQZ3RpMFI5MVh1UFNXaTFlRmZUZUt5Nkp0V1BocUJub3RoaTVQZEk0RW00US80RHRjYmhlbjlyZllOUDR3eUloR2RhaFVMVXhvb0Jka01sUkpJR0NwWUVOMWFmdkdDSWFqQWU2dXFQOXJQTEVrSzc3ZkZOa1p4cjQwcjFBRkgydHQrNzZSTytZaHBNNjhTQ2p0TVRHSm04M212VlNGQnhKQ3J0QytHY05SWi9WQW9hZUd0bkNrM1UvSGpZbUNRbm8vcnptMEpMZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b921c68-fdf8-49cc-9c0a-70f145443a2a", "record_id": "flaws_cloudtrail:0000068:1b921c68-fdf8-49cc-9c0a-70f145443a2a", "row_index": 68, "timestamp": "2019-06-19T02:40:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b921c68-fdf8-49cc-9c0a-70f145443a2a", "eventTime": "2019-06-19T02:40:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFM3ptOWJQZ3RpMFI5MVh1UFNXaTFlRmZUZUt5Nkp0V1BocUJub3RoaTVQZEk0RW00US80RHRjYmhlbjlyZllOUDR3eUloR2RhaFVMVXhvb0Jka01sUkpJR0NwWUVOMWFmdkdDSWFqQWU2dXFQOXJQTEVrSzc3ZkZOa1p4cjQwcjFBRkgydHQrNzZSTytZaHBNNjhTQ2p0TVRHSm04M212VlNGQnhKQ3J0QytHY05SWi9WQW9hZUd0bkNrM1UvSGpZbUNRbm8vcnptMEpMZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915e0d0e-26f0-41c8-b185-51f656f5dd95", "record_id": "flaws_cloudtrail:0000069:915e0d0e-26f0-41c8-b185-51f656f5dd95", "row_index": 69, "timestamp": "2019-06-19T02:40:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915e0d0e-26f0-41c8-b185-51f656f5dd95", "eventTime": "2019-06-19T02:40:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0M3Z2TG1Sd2ZzMGp3YmJQNWJPaXpvcHpyNmczcmhPc21Xc1docHpBZ3daekk5TTVOSTlVeEFLM3Z1NUk5L2V3NXB4VHVac2dHWXVSbXdsRm5JbXRCYXNHRzZKVnRTTktZRHcwSUVBbmY1am5VYVN2MS9jT054dTV0MXdvbWY3QlM1MGJkajVsNDdzSng1aWhEN25ManNOa2Z0OGVUcDJUcUtPaEtyZnNSV0V4S1ZsOTFRdWh5Tzk4cHE3M2VwdTRWN3RVeWUwbDRIRThwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915e0d0e-26f0-41c8-b185-51f656f5dd95", "record_id": "flaws_cloudtrail:0000070:915e0d0e-26f0-41c8-b185-51f656f5dd95", "row_index": 70, "timestamp": "2019-06-19T02:40:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915e0d0e-26f0-41c8-b185-51f656f5dd95", "eventTime": "2019-06-19T02:40:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0M3Z2TG1Sd2ZzMGp3YmJQNWJPaXpvcHpyNmczcmhPc21Xc1docHpBZ3daekk5TTVOSTlVeEFLM3Z1NUk5L2V3NXB4VHVac2dHWXVSbXdsRm5JbXRCYXNHRzZKVnRTTktZRHcwSUVBbmY1am5VYVN2MS9jT054dTV0MXdvbWY3QlM1MGJkajVsNDdzSng1aWhEN25ManNOa2Z0OGVUcDJUcUtPaEtyZnNSV0V4S1ZsOTFRdWh5Tzk4cHE3M2VwdTRWN3RVeWUwbDRIRThwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8d2755-4cc3-4399-a517-8b418aabe3e9", "record_id": "flaws_cloudtrail:0000071:ea8d2755-4cc3-4399-a517-8b418aabe3e9", "row_index": 71, "timestamp": "2019-06-19T02:40:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8d2755-4cc3-4399-a517-8b418aabe3e9", "eventTime": "2019-06-19T02:40:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4Z3dvVU8vNDgycHVLcXNJZlZTYTI4eWRZd0g4eDFNUU1lYXFjbFVLSFFhTDVyc04vRlJ3Sk15T3Z1QXBSK2x0Y29nNEFqamlpckxMVEd6dG9mK3E1S0NCTTZXeDdmbEFNWDJkWnV0VENTNkc2SnlVWlZ0UE1RczVIMkFFbzZQcE53cWE4QzZoQUJqRjk1WDF1c2VwcnJ5ZDVkK3hsejE0MTZsYmgrOFlXRUt1U2ZKWVhqTUpVTzdzUlIvaXh0a21sSm5UdldHNUJDL3R5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8d2755-4cc3-4399-a517-8b418aabe3e9", "record_id": "flaws_cloudtrail:0000072:ea8d2755-4cc3-4399-a517-8b418aabe3e9", "row_index": 72, "timestamp": "2019-06-19T02:40:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8d2755-4cc3-4399-a517-8b418aabe3e9", "eventTime": "2019-06-19T02:40:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4Z3dvVU8vNDgycHVLcXNJZlZTYTI4eWRZd0g4eDFNUU1lYXFjbFVLSFFhTDVyc04vRlJ3Sk15T3Z1QXBSK2x0Y29nNEFqamlpckxMVEd6dG9mK3E1S0NCTTZXeDdmbEFNWDJkWnV0VENTNkc2SnlVWlZ0UE1RczVIMkFFbzZQcE53cWE4QzZoQUJqRjk1WDF1c2VwcnJ5ZDVkK3hsejE0MTZsYmgrOFlXRUt1U2ZKWVhqTUpVTzdzUlIvaXh0a21sSm5UdldHNUJDL3R5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2335ed90-4541-4d64-860e-059b48ee1fee", "record_id": "flaws_cloudtrail:0000073:2335ed90-4541-4d64-860e-059b48ee1fee", "row_index": 73, "timestamp": "2019-06-19T02:40:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2335ed90-4541-4d64-860e-059b48ee1fee", "eventTime": "2019-06-19T02:40:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJUWRqbUhhNVFqUTJiWTF4cjAxeHpIeFBId1dPM3oxbTRGd3ZXamlESHM4SzFndlZ1L1ZHSTd5bWQwcnk0VWlRZ3hON08zdHhPa0NGbjh4NzQzbUE5eDNyM1psaFZ6Wm1aYnpaaTJJVDkyY1JRdUdSdFNLOEFBYmx0cVlibXpwOFZqMnh5ZVNqdVA5M1BZbHQ2QnFjSWYxOUtrTnlGQ0R3NlM2enltMVJUWUlXYUxid2owZU5xcklNaXNCL1RFd2xsOHVPTVk1by93ZXlmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2335ed90-4541-4d64-860e-059b48ee1fee", "record_id": "flaws_cloudtrail:0000074:2335ed90-4541-4d64-860e-059b48ee1fee", "row_index": 74, "timestamp": "2019-06-19T02:40:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2335ed90-4541-4d64-860e-059b48ee1fee", "eventTime": "2019-06-19T02:40:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJUWRqbUhhNVFqUTJiWTF4cjAxeHpIeFBId1dPM3oxbTRGd3ZXamlESHM4SzFndlZ1L1ZHSTd5bWQwcnk0VWlRZ3hON08zdHhPa0NGbjh4NzQzbUE5eDNyM1psaFZ6Wm1aYnpaaTJJVDkyY1JRdUdSdFNLOEFBYmx0cVlibXpwOFZqMnh5ZVNqdVA5M1BZbHQ2QnFjSWYxOUtrTnlGQ0R3NlM2enltMVJUWUlXYUxid2owZU5xcklNaXNCL1RFd2xsOHVPTVk1by93ZXlmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "record_id": "flaws_cloudtrail:0000075:b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "row_index": 75, "timestamp": "2019-06-19T02:40:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "eventTime": "2019-06-19T02:40:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxNno3RjdSOHo3OC82aHpQNU8raGdMOGFoTjhqcmxJbktoa3l6VE56a1dnamlJdGkxZHpkeXN6M2sxakErd3Y4NDlHTWxoVXU3dko3bWZvS1lWeUF0WjZ3dDhNOE8xajJIelYyak1OaTJzc0x2YnljbGU3WTRKbk9RUm9GN2lEeG01S1hlQUZjMFJVYnN1RXlwcDkzR293QXk1bTBpZjNBeSt3cXpGMGFDaFA1VnpPeHBtVUNpNmRTY0h3bU11ZFcvZkh2bjV3RDhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "record_id": "flaws_cloudtrail:0000076:b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "row_index": 76, "timestamp": "2019-06-19T02:40:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ce2f69-1c28-4525-974f-51cbf3f47dc2", "eventTime": "2019-06-19T02:40:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxNno3RjdSOHo3OC82aHpQNU8raGdMOGFoTjhqcmxJbktoa3l6VE56a1dnamlJdGkxZHpkeXN6M2sxakErd3Y4NDlHTWxoVXU3dko3bWZvS1lWeUF0WjZ3dDhNOE8xajJIelYyak1OaTJzc0x2YnljbGU3WTRKbk9RUm9GN2lEeG01S1hlQUZjMFJVYnN1RXlwcDkzR293QXk1bTBpZjNBeSt3cXpGMGFDaFA1VnpPeHBtVUNpNmRTY0h3bU11ZFcvZkh2bjV3RDhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2633d7b-5bb0-435b-a9f7-ad826382d964", "record_id": "flaws_cloudtrail:0000077:f2633d7b-5bb0-435b-a9f7-ad826382d964", "row_index": 77, "timestamp": "2019-06-19T02:40:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2633d7b-5bb0-435b-a9f7-ad826382d964", "eventTime": "2019-06-19T02:40:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0VlJ5T0pwZitqckJZZjNFMmxqUElyZkFuYVZqZzM0VWVjcWJlQVJBQ042UVpqci9nMng4dFpMK2d1eXRnb09XUXlvTHFVUkxlZlZpOUlxY3pGQm1xVFJOZWlMZ0F5Nzk4SXRib1REMkQyMWZINFNjU1MxNkhOdFV1bmxRaEdKTHZXb0VOWUFucU9WOFk4WG03U2pRbmp5OWhnQ2lMZ05hdzhub0ZGbmtEaWJ4Y3FhT2VlOUJySzVYZ1F2ak0rWER5TkhCTlhMTldnRWxNdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2633d7b-5bb0-435b-a9f7-ad826382d964", "record_id": "flaws_cloudtrail:0000078:f2633d7b-5bb0-435b-a9f7-ad826382d964", "row_index": 78, "timestamp": "2019-06-19T02:40:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2633d7b-5bb0-435b-a9f7-ad826382d964", "eventTime": "2019-06-19T02:40:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0VlJ5T0pwZitqckJZZjNFMmxqUElyZkFuYVZqZzM0VWVjcWJlQVJBQ042UVpqci9nMng4dFpMK2d1eXRnb09XUXlvTHFVUkxlZlZpOUlxY3pGQm1xVFJOZWlMZ0F5Nzk4SXRib1REMkQyMWZINFNjU1MxNkhOdFV1bmxRaEdKTHZXb0VOWUFucU9WOFk4WG03U2pRbmp5OWhnQ2lMZ05hdzhub0ZGbmtEaWJ4Y3FhT2VlOUJySzVYZ1F2ak0rWER5TkhCTlhMTldnRWxNdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59dc0250-f07e-4761-abd0-4311b84d43da", "record_id": "flaws_cloudtrail:0000079:59dc0250-f07e-4761-abd0-4311b84d43da", "row_index": 79, "timestamp": "2019-06-19T02:40:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59dc0250-f07e-4761-abd0-4311b84d43da", "eventTime": "2019-06-19T02:40:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2c1UvZlllcDVqbmxPWG81UDFLUHVuZXFLaEx5aUQ2dVFkcHg5L05SODNaQ011RjRWTVdrYjRxN3NBZVRDdmE0bHp5dkV0eGY2eGx2WStiVjhWd2lIT0RKc2dxWlNLTFpJZFZhOCs4T3lkbkVGY2g5eWhmQVBCcXd2MnhDWUJ6T05BNEc0QVkrL3JhUGtPcjVhSTVuZXVvOEgyVEhIZUZoTUYwT0krdWlObHlXM3BsSXRtRTdHK0dWQXViZmFGYWxYRm1ZdzlWaHFQQysyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59dc0250-f07e-4761-abd0-4311b84d43da", "record_id": "flaws_cloudtrail:0000080:59dc0250-f07e-4761-abd0-4311b84d43da", "row_index": 80, "timestamp": "2019-06-19T02:40:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59dc0250-f07e-4761-abd0-4311b84d43da", "eventTime": "2019-06-19T02:40:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2c1UvZlllcDVqbmxPWG81UDFLUHVuZXFLaEx5aUQ2dVFkcHg5L05SODNaQ011RjRWTVdrYjRxN3NBZVRDdmE0bHp5dkV0eGY2eGx2WStiVjhWd2lIT0RKc2dxWlNLTFpJZFZhOCs4T3lkbkVGY2g5eWhmQVBCcXd2MnhDWUJ6T05BNEc0QVkrL3JhUGtPcjVhSTVuZXVvOEgyVEhIZUZoTUYwT0krdWlObHlXM3BsSXRtRTdHK0dWQXViZmFGYWxYRm1ZdzlWaHFQQysyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4711fc29-1605-4330-aea0-6595a3264e0a", "record_id": "flaws_cloudtrail:0000081:4711fc29-1605-4330-aea0-6595a3264e0a", "row_index": 81, "timestamp": "2019-06-19T02:40:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4711fc29-1605-4330-aea0-6595a3264e0a", "eventTime": "2019-06-19T02:40:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd1RmS0FBK0plYUU3WkpxeTZ2VTJNY3ZRNm1tcStiNkNRTGJ4R3FBVERQbGY0ODRvYW5RdnpxWlVJMUVNYjRwS28xcURyM3ExOFVZd296WXBtSUtRSUVXRU5ZYVQwNjY1TUt0WkVjSzI3WXBtOUhUL3Q4ajRTVGJ6bHAzTERNZVBOei81VFo1bFRGQkZwR05iMldRNzRqTy85cnVuQy84U0s1dW9URXZMVmRzNStQUTVFeEx2b3BmVkxZaGxjUGlnOWtUUGpXT2l3WTFudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4711fc29-1605-4330-aea0-6595a3264e0a", "record_id": "flaws_cloudtrail:0000082:4711fc29-1605-4330-aea0-6595a3264e0a", "row_index": 82, "timestamp": "2019-06-19T02:40:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4711fc29-1605-4330-aea0-6595a3264e0a", "eventTime": "2019-06-19T02:40:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd1RmS0FBK0plYUU3WkpxeTZ2VTJNY3ZRNm1tcStiNkNRTGJ4R3FBVERQbGY0ODRvYW5RdnpxWlVJMUVNYjRwS28xcURyM3ExOFVZd296WXBtSUtRSUVXRU5ZYVQwNjY1TUt0WkVjSzI3WXBtOUhUL3Q4ajRTVGJ6bHAzTERNZVBOei81VFo1bFRGQkZwR05iMldRNzRqTy85cnVuQy84U0s1dW9URXZMVmRzNStQUTVFeEx2b3BmVkxZaGxjUGlnOWtUUGpXT2l3WTFudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039f138f-4124-4919-b331-951892c47a16", "record_id": "flaws_cloudtrail:0000083:039f138f-4124-4919-b331-951892c47a16", "row_index": 83, "timestamp": "2019-06-19T02:40:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039f138f-4124-4919-b331-951892c47a16", "eventTime": "2019-06-19T02:40:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqRUFwZStVMEd0bGhxbDZURDJiMGFHM3hZMEl6Y2E3M2YwSHQ0Nzl0VjNsakc5NEMwaFBpWkp3R2NKNytsUElXeEUzNEIxa0kyN1ZxSnFnUVZYeWRDWmVmUnppbDh1Y0lVd0lGNFc0OWU1RU95a1doK3V2SjNGbDVzM1UxUEpLYm82emVpMnlJeld0eUNJNE1FR1UvK2lsZlNvN1JPSE5ZNW53R2F2cmhmVWVQWGM1MTk5UXk4d1NPR0Q5M1lwZFRBNUYrQWFnYXhHeGpDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039f138f-4124-4919-b331-951892c47a16", "record_id": "flaws_cloudtrail:0000084:039f138f-4124-4919-b331-951892c47a16", "row_index": 84, "timestamp": "2019-06-19T02:40:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039f138f-4124-4919-b331-951892c47a16", "eventTime": "2019-06-19T02:40:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqRUFwZStVMEd0bGhxbDZURDJiMGFHM3hZMEl6Y2E3M2YwSHQ0Nzl0VjNsakc5NEMwaFBpWkp3R2NKNytsUElXeEUzNEIxa0kyN1ZxSnFnUVZYeWRDWmVmUnppbDh1Y0lVd0lGNFc0OWU1RU95a1doK3V2SjNGbDVzM1UxUEpLYm82emVpMnlJeld0eUNJNE1FR1UvK2lsZlNvN1JPSE5ZNW53R2F2cmhmVWVQWGM1MTk5UXk4d1NPR0Q5M1lwZFRBNUYrQWFnYXhHeGpDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db8a157a-dc6a-4529-9ba4-b47b871f8389", "record_id": "flaws_cloudtrail:0000085:db8a157a-dc6a-4529-9ba4-b47b871f8389", "row_index": 85, "timestamp": "2019-06-19T02:40:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db8a157a-dc6a-4529-9ba4-b47b871f8389", "eventTime": "2019-06-19T02:40:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQUTMycitpR1N0cnpad2FxODNaaUhNWm96MUtLNUlTUktRUVlTclB1TTE2QzdQUkhMa0MrTHNOZXdVWkR4dERxODhOblQ2azhrN2Q5NDUyczJqbEVhUHRIVDRrZVhzTDNsMTRid09aMEg2TUd0Qk1oRVVrbUo1KzVLZFRBQTRDNXRWSWRqM2hFbFQyUEFHcDQ5MXBlYkRjbG9MeUpjcGxZdFIrNklyRURMdXdUM2ZTSUFFaGQvbFd3Y09pL2FxM3hCRXVGQmZMNFdzYklldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db8a157a-dc6a-4529-9ba4-b47b871f8389", "record_id": "flaws_cloudtrail:0000086:db8a157a-dc6a-4529-9ba4-b47b871f8389", "row_index": 86, "timestamp": "2019-06-19T02:40:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db8a157a-dc6a-4529-9ba4-b47b871f8389", "eventTime": "2019-06-19T02:40:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQUTMycitpR1N0cnpad2FxODNaaUhNWm96MUtLNUlTUktRUVlTclB1TTE2QzdQUkhMa0MrTHNOZXdVWkR4dERxODhOblQ2azhrN2Q5NDUyczJqbEVhUHRIVDRrZVhzTDNsMTRid09aMEg2TUd0Qk1oRVVrbUo1KzVLZFRBQTRDNXRWSWRqM2hFbFQyUEFHcDQ5MXBlYkRjbG9MeUpjcGxZdFIrNklyRURMdXdUM2ZTSUFFaGQvbFd3Y09pL2FxM3hCRXVGQmZMNFdzYklldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fe24109-3ed7-41e9-9839-a72dc28b1638", "record_id": "flaws_cloudtrail:0000087:0fe24109-3ed7-41e9-9839-a72dc28b1638", "row_index": 87, "timestamp": "2019-06-19T02:40:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fe24109-3ed7-41e9-9839-a72dc28b1638", "eventTime": "2019-06-19T02:40:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIT1MxY2E5N0I0eTlXQkl0YXpiYkZVNW1vY3JhakdNS2g0dzZxNnhGS2ZvSFZPK1UrR3lySlpWOHlFU0VmbS93UlJuWGJNclVySURHRFkzNlhoRWYzTzZQM21QWjQ5K1E1N2JNWlZDS29KbUZJVEF4UkpxRGdYMGFFSFdjS2t4QlpEeENkUVdkcnBRRWtDL3hRSysxMFR0SlExcWlYM0lPOGFzL0VpWjUzQW5XZHZ3VUYxYS81Q0pkMi84MnhvcGVwYzRYbm9tWXZocz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fe24109-3ed7-41e9-9839-a72dc28b1638", "record_id": "flaws_cloudtrail:0000088:0fe24109-3ed7-41e9-9839-a72dc28b1638", "row_index": 88, "timestamp": "2019-06-19T02:40:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fe24109-3ed7-41e9-9839-a72dc28b1638", "eventTime": "2019-06-19T02:40:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIT1MxY2E5N0I0eTlXQkl0YXpiYkZVNW1vY3JhakdNS2g0dzZxNnhGS2ZvSFZPK1UrR3lySlpWOHlFU0VmbS93UlJuWGJNclVySURHRFkzNlhoRWYzTzZQM21QWjQ5K1E1N2JNWlZDS29KbUZJVEF4UkpxRGdYMGFFSFdjS2t4QlpEeENkUVdkcnBRRWtDL3hRSysxMFR0SlExcWlYM0lPOGFzL0VpWjUzQW5XZHZ3VUYxYS81Q0pkMi84MnhvcGVwYzRYbm9tWXZocz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "record_id": "flaws_cloudtrail:0000089:e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "row_index": 89, "timestamp": "2019-06-19T02:40:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "eventTime": "2019-06-19T02:40:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeGdpMlRZYnpoUTNaa0tScUJKM3dxVzBaRU00V3Z2dXFvTnpZU3pDdW9yNjVZWXE3QjByTlFhQ3B6WWxPNUhabTQrb2c5ZFVWVkg1RHVMZnQ4RElydG9sT1MxbGlMZjd6MFYxc0JwQ0NDWHNCdnpnenRUbU5jTWVOVm15SDB6S0pQR2I1MUc5VDBVMUN4UTdRU3ZxTEpHNWx0c1ZGWWwyMFZlMHVkZ0lOVW5paUgvZFB1UzhvZHVoa0FWYW9VM2V1RzdPZCtyT29DR2tVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "record_id": "flaws_cloudtrail:0000090:e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "row_index": 90, "timestamp": "2019-06-19T02:40:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c8b26b-1e45-40b6-b96e-554b6f2b788e", "eventTime": "2019-06-19T02:40:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeGdpMlRZYnpoUTNaa0tScUJKM3dxVzBaRU00V3Z2dXFvTnpZU3pDdW9yNjVZWXE3QjByTlFhQ3B6WWxPNUhabTQrb2c5ZFVWVkg1RHVMZnQ4RElydG9sT1MxbGlMZjd6MFYxc0JwQ0NDWHNCdnpnenRUbU5jTWVOVm15SDB6S0pQR2I1MUc5VDBVMUN4UTdRU3ZxTEpHNWx0c1ZGWWwyMFZlMHVkZ0lOVW5paUgvZFB1UzhvZHVoa0FWYW9VM2V1RzdPZCtyT29DR2tVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a581ca93-9091-4a61-8d70-e0f549e27c41", "record_id": "flaws_cloudtrail:0000091:a581ca93-9091-4a61-8d70-e0f549e27c41", "row_index": 91, "timestamp": "2019-06-19T02:40:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a581ca93-9091-4a61-8d70-e0f549e27c41", "eventTime": "2019-06-19T02:40:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDS0Zobkk0dWxYMWpFSlJPY3RPOWN3WFh6Q3dnbG9sSGpyRjZRUm8yck53NzJEZmNvcGZ0dW9sd29waXFtY3k4YlliZzMzakF3NktIUnNCdllhNEdIWlpSOG1uUmVFekN5dVE3WTFlN21adVo3TllLSkZyd3E1Rmh4d1ZNOW4wVitXK0tIamQ4bkdydnF4TkdOazlUa3RMaU1WUUswemhWREg2WWJzeDZuZm9najFsdTNpUE1vVFFRdDV4UzdkcXFQTGdSRUVuM1RzaFNndz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a581ca93-9091-4a61-8d70-e0f549e27c41", "record_id": "flaws_cloudtrail:0000092:a581ca93-9091-4a61-8d70-e0f549e27c41", "row_index": 92, "timestamp": "2019-06-19T02:40:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a581ca93-9091-4a61-8d70-e0f549e27c41", "eventTime": "2019-06-19T02:40:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDS0Zobkk0dWxYMWpFSlJPY3RPOWN3WFh6Q3dnbG9sSGpyRjZRUm8yck53NzJEZmNvcGZ0dW9sd29waXFtY3k4YlliZzMzakF3NktIUnNCdllhNEdIWlpSOG1uUmVFekN5dVE3WTFlN21adVo3TllLSkZyd3E1Rmh4d1ZNOW4wVitXK0tIamQ4bkdydnF4TkdOazlUa3RMaU1WUUswemhWREg2WWJzeDZuZm9najFsdTNpUE1vVFFRdDV4UzdkcXFQTGdSRUVuM1RzaFNndz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93a1233-d80f-42d2-aab2-6157a6db55f7", "record_id": "flaws_cloudtrail:0000093:a93a1233-d80f-42d2-aab2-6157a6db55f7", "row_index": 93, "timestamp": "2019-06-19T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93a1233-d80f-42d2-aab2-6157a6db55f7", "eventTime": "2019-06-19T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZNTZlRXVHMFFzeUxDZnNHQ01meFZCY1lKeVA5Qk1LWWdnUVFlWEh2bFljQ3BOQ3hkQUZEMVR6UG5BNi9aY0ZNWFpSeHNMZUVGMENDMmpDa2dtdFZRbm51ZGk0VE1odUdvSHdEUndvUFJ4ZFlFQUZOWks0SGRseUMxRnJQT0tOTmN4cDJyV3kwNzBJY2tFM2tNb1Ivcko2TTAvbzdybVVBSHJkZHJUbVNJYVcrZjJRQjNlUVc2Y1psTC9ob3NCTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57aaebd6-8a85-423d-bac2-d47e6b145bdb", "record_id": "flaws_cloudtrail:0000094:57aaebd6-8a85-423d-bac2-d47e6b145bdb", "row_index": 94, "timestamp": "2019-06-19T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57aaebd6-8a85-423d-bac2-d47e6b145bdb", "eventTime": "2019-06-19T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbjFOTWxRbUQ0cVBzRUczNHBVQTU0dDRscm1idExibG1zN2FTMTArWGZvWDBRZy9BbmVTYmNseWlNRlNGcTBHcnJpSkp2Y0R4WFlsblZyelYvTi84MUJ6dG8zOEJLdm1TUnR6RzFOd2ZXMmZKUVMvQTRKSi94ZFNLZlN5TFNzZVJRVGZNdW51b1NjT0huUmJBYlVrMUpKZ0lSQ0JRZzZEQy82WjFaUXV2OFVPd29QYXFkUC9LQXhkaTBSZHdpK3pENU5uZGNKb3QrbHdOcStJLzFTZmQ5dTR5TDFlTlJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93a1233-d80f-42d2-aab2-6157a6db55f7", "record_id": "flaws_cloudtrail:0000095:a93a1233-d80f-42d2-aab2-6157a6db55f7", "row_index": 95, "timestamp": "2019-06-19T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93a1233-d80f-42d2-aab2-6157a6db55f7", "eventTime": "2019-06-19T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZNTZlRXVHMFFzeUxDZnNHQ01meFZCY1lKeVA5Qk1LWWdnUVFlWEh2bFljQ3BOQ3hkQUZEMVR6UG5BNi9aY0ZNWFpSeHNMZUVGMENDMmpDa2dtdFZRbm51ZGk0VE1odUdvSHdEUndvUFJ4ZFlFQUZOWks0SGRseUMxRnJQT0tOTmN4cDJyV3kwNzBJY2tFM2tNb1Ivcko2TTAvbzdybVVBSHJkZHJUbVNJYVcrZjJRQjNlUVc2Y1psTC9ob3NCTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57aaebd6-8a85-423d-bac2-d47e6b145bdb", "record_id": "flaws_cloudtrail:0000096:57aaebd6-8a85-423d-bac2-d47e6b145bdb", "row_index": 96, "timestamp": "2019-06-19T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57aaebd6-8a85-423d-bac2-d47e6b145bdb", "eventTime": "2019-06-19T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbjFOTWxRbUQ0cVBzRUczNHBVQTU0dDRscm1idExibG1zN2FTMTArWGZvWDBRZy9BbmVTYmNseWlNRlNGcTBHcnJpSkp2Y0R4WFlsblZyelYvTi84MUJ6dG8zOEJLdm1TUnR6RzFOd2ZXMmZKUVMvQTRKSi94ZFNLZlN5TFNzZVJRVGZNdW51b1NjT0huUmJBYlVrMUpKZ0lSQ0JRZzZEQy82WjFaUXV2OFVPd29QYXFkUC9LQXhkaTBSZHdpK3pENU5uZGNKb3QrbHdOcStJLzFTZmQ5dTR5TDFlTlJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "record_id": "flaws_cloudtrail:0000097:ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "row_index": 97, "timestamp": "2019-06-19T02:40:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "eventTime": "2019-06-19T02:40:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDQkFhVFZhMmRGMW8zbTNJZTFHZXdpSWFhQ1VTQXBMSjcvRng1dGIzU2VBZVdZQ2JCcjJGL29MTW81bktTS2R1dnNUdEhFN1JZeWY5by96NlZhQ0JYdmZKcWRjWUthTDU5K2JYaXN2Zm5GaGtlUDRZaU1mTVcyTnU0S052S1lOREx6RVo5ZzBJejhJWDlhL1pBREYvQk4yRWNSb0piWkkyRk5tV3pBV0lUSU1XYUhiUjFPQjdCT2Ntci9HNU5qZVVpUWVtWEFiamxFTkhDVmErbG5jcnkybFJlaXBTRjJZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "record_id": "flaws_cloudtrail:0000098:ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "row_index": 98, "timestamp": "2019-06-19T02:40:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff6d0dcb-e6c3-4a12-b80c-55c4398acab5", "eventTime": "2019-06-19T02:40:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDQkFhVFZhMmRGMW8zbTNJZTFHZXdpSWFhQ1VTQXBMSjcvRng1dGIzU2VBZVdZQ2JCcjJGL29MTW81bktTS2R1dnNUdEhFN1JZeWY5by96NlZhQ0JYdmZKcWRjWUthTDU5K2JYaXN2Zm5GaGtlUDRZaU1mTVcyTnU0S052S1lOREx6RVo5ZzBJejhJWDlhL1pBREYvQk4yRWNSb0piWkkyRk5tV3pBV0lUSU1XYUhiUjFPQjdCT2Ntci9HNU5qZVVpUWVtWEFiamxFTkhDVmErbG5jcnkybFJlaXBTRjJZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "record_id": "flaws_cloudtrail:0000099:6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "row_index": 99, "timestamp": "2019-06-19T02:40:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "eventTime": "2019-06-19T02:40:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPbmtBQktKdXlDZGg3cEc4Z012cUZiYTJwbWt3ckNyTWVDVVN5Uk14MUs5TjBBRkljcFEvbzhDMHkvQUV5a0NRZGRsanRtK0lqQ1B2dmp4cURORnVOQnZLaTIwSzRHY3R4QitCOWUvcVBzUFE3WFpna01GeG55b1R4MGhTQnFhOS9ON0JDOFpPMVVYaDIwdjJFZ2xtYlp0WlhMTnlZRDB6Wkl6OTFScUpidHlxck8rVjNJVmFXVFNMV2N5K0RDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "record_id": "flaws_cloudtrail:0000100:6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "row_index": 100, "timestamp": "2019-06-19T02:40:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f607e9d-0c0c-48dc-9c9e-bed3b3808393", "eventTime": "2019-06-19T02:40:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPbmtBQktKdXlDZGg3cEc4Z012cUZiYTJwbWt3ckNyTWVDVVN5Uk14MUs5TjBBRkljcFEvbzhDMHkvQUV5a0NRZGRsanRtK0lqQ1B2dmp4cURORnVOQnZLaTIwSzRHY3R4QitCOWUvcVBzUFE3WFpna01GeG55b1R4MGhTQnFhOS9ON0JDOFpPMVVYaDIwdjJFZ2xtYlp0WlhMTnlZRDB6Wkl6OTFScUpidHlxck8rVjNJVmFXVFNMV2N5K0RDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae5a355-64ec-49e3-9f5d-e57dcdea506a", "record_id": "flaws_cloudtrail:0000101:fae5a355-64ec-49e3-9f5d-e57dcdea506a", "row_index": 101, "timestamp": "2019-06-19T02:40:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae5a355-64ec-49e3-9f5d-e57dcdea506a", "eventTime": "2019-06-19T02:40:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJESHhvSkZicVhlNEZBS0JnS0RQY1IzS3lMNHdkVno3VVFlaDdNQ3hDdFduSHZzN2k5czFLek9tZUI5YlA3bW1vOHR4TDlYczlyaFZ5VXA1cVN0RjNVM3Y1MHc1Y1JOSngvdVpIaVQxU1JIMFFpV0VhaTdoSVFRNTBTeGIxR21QbGd4TEFlUmFSdDBBMDZGa3lwNDk4TnJaeXhyTExhVkZSaWJlL3lpZkx3SC96MUlQMC83dER0M3h5T3ZobHA0TkdyOXB4U3dDbUsxNE9KblAyOElabzJUYlZKNDh6RkdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "record_id": "flaws_cloudtrail:0000102:ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "row_index": 102, "timestamp": "2019-06-19T02:40:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "eventTime": "2019-06-19T02:40:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeEcrSXIxRml1RzVHd3hoSXB6dldiOENzVHBJTjVOSXBra29jcWtIblk1R3M4THBDVHUvbFdWQTl1OFJMNzllQzlsVGpwVG93S2xFMUtWOHJCbDFQMGcxVGV0T0lvWGFiTnJGUGFpNDh4UCtyVVhjSlBhY3lGMlBWaFNPTDRETWxsR2NrZjZYcEJoQThqL21DME5RNkRaLzBGUW53UjIwRGVLcS90OE15dHBhVzZlMWNhTDY1Uis2REhYblZNVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae5a355-64ec-49e3-9f5d-e57dcdea506a", "record_id": "flaws_cloudtrail:0000103:fae5a355-64ec-49e3-9f5d-e57dcdea506a", "row_index": 103, "timestamp": "2019-06-19T02:40:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae5a355-64ec-49e3-9f5d-e57dcdea506a", "eventTime": "2019-06-19T02:40:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJESHhvSkZicVhlNEZBS0JnS0RQY1IzS3lMNHdkVno3VVFlaDdNQ3hDdFduSHZzN2k5czFLek9tZUI5YlA3bW1vOHR4TDlYczlyaFZ5VXA1cVN0RjNVM3Y1MHc1Y1JOSngvdVpIaVQxU1JIMFFpV0VhaTdoSVFRNTBTeGIxR21QbGd4TEFlUmFSdDBBMDZGa3lwNDk4TnJaeXhyTExhVkZSaWJlL3lpZkx3SC96MUlQMC83dER0M3h5T3ZobHA0TkdyOXB4U3dDbUsxNE9KblAyOElabzJUYlZKNDh6RkdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "record_id": "flaws_cloudtrail:0000104:ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "row_index": 104, "timestamp": "2019-06-19T02:40:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebffbf00-0778-46ee-80cf-2ee3dabde5cf", "eventTime": "2019-06-19T02:40:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeEcrSXIxRml1RzVHd3hoSXB6dldiOENzVHBJTjVOSXBra29jcWtIblk1R3M4THBDVHUvbFdWQTl1OFJMNzllQzlsVGpwVG93S2xFMUtWOHJCbDFQMGcxVGV0T0lvWGFiTnJGUGFpNDh4UCtyVVhjSlBhY3lGMlBWaFNPTDRETWxsR2NrZjZYcEJoQThqL21DME5RNkRaLzBGUW53UjIwRGVLcS90OE15dHBhVzZlMWNhTDY1Uis2REhYblZNVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11b6721b-ca23-4a78-901e-671a82b164a6", "record_id": "flaws_cloudtrail:0000105:11b6721b-ca23-4a78-901e-671a82b164a6", "row_index": 105, "timestamp": "2019-06-19T02:40:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11b6721b-ca23-4a78-901e-671a82b164a6", "eventTime": "2019-06-19T02:40:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTytFdVk0ZXI3Z1BWRmw0bXVsQWNzSlNqaEpURXBBditLZHc2VXA2cUJwcnk2Ulh6dkNJRTd2VUc4SjlNTk8ycHhOcGtLcFl5YmFmblU1eU9KbWRMeVBxSC94cW9XdWZzck82MWVmZ1JwNy84TnpOVmU0S1M1MkxWUisrVGZLc3JHZHZoQTBmUnRpU3dwcVhhbXVOU1I4SC9qZDVqcC9JblpQMkpLN1lFcitDZWdmd295cUhMOGpyek1BekhJNE1yWFBGcHplc2hpb05nTnVPa3BuY0hUbnJDUjV3WlRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11b6721b-ca23-4a78-901e-671a82b164a6", "record_id": "flaws_cloudtrail:0000106:11b6721b-ca23-4a78-901e-671a82b164a6", "row_index": 106, "timestamp": "2019-06-19T02:40:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11b6721b-ca23-4a78-901e-671a82b164a6", "eventTime": "2019-06-19T02:40:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTytFdVk0ZXI3Z1BWRmw0bXVsQWNzSlNqaEpURXBBditLZHc2VXA2cUJwcnk2Ulh6dkNJRTd2VUc4SjlNTk8ycHhOcGtLcFl5YmFmblU1eU9KbWRMeVBxSC94cW9XdWZzck82MWVmZ1JwNy84TnpOVmU0S1M1MkxWUisrVGZLc3JHZHZoQTBmUnRpU3dwcVhhbXVOU1I4SC9qZDVqcC9JblpQMkpLN1lFcitDZWdmd295cUhMOGpyek1BekhJNE1yWFBGcHplc2hpb05nTnVPa3BuY0hUbnJDUjV3WlRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "record_id": "flaws_cloudtrail:0000107:28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "row_index": 107, "timestamp": "2019-06-19T02:40:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "eventTime": "2019-06-19T02:40:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5R3ZhRkw5VTJrdHVrc2w0aUs5RHJYT2NxRUM3NzNDQTMyUGJobkNEaWVFc2wyem1NTVdiSU5iZlhySldQbVlad01UbWVvbFo4ME5BUnNCVWRRUU5oOEQ0UGhvVERHL1k0QWZOYVlqK0t3N0JxQ0diZ3JnenVaWm5qUEEwRGFha1pKUVFkZmcvMHFQRGpnQmFtYVlOZk9ycWxKUzdKSExoRDVBbjlGYnhqd1J3U3M0TWcvbVlQTDhkbG9zWWlGRHdSTmIxTFV6UERiOHl0Znh2REdaS013PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "record_id": "flaws_cloudtrail:0000108:28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "row_index": 108, "timestamp": "2019-06-19T02:40:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ff7e5a-bcbe-4a2b-9bc9-0cbd0e03f81c", "eventTime": "2019-06-19T02:40:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5R3ZhRkw5VTJrdHVrc2w0aUs5RHJYT2NxRUM3NzNDQTMyUGJobkNEaWVFc2wyem1NTVdiSU5iZlhySldQbVlad01UbWVvbFo4ME5BUnNCVWRRUU5oOEQ0UGhvVERHL1k0QWZOYVlqK0t3N0JxQ0diZ3JnenVaWm5qUEEwRGFha1pKUVFkZmcvMHFQRGpnQmFtYVlOZk9ycWxKUzdKSExoRDVBbjlGYnhqd1J3U3M0TWcvbVlQTDhkbG9zWWlGRHdSTmIxTFV6UERiOHl0Znh2REdaS013PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7e614e9-69e7-4f49-b6ab-a421c079802e", "record_id": "flaws_cloudtrail:0000109:b7e614e9-69e7-4f49-b6ab-a421c079802e", "row_index": 109, "timestamp": "2019-06-19T02:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7e614e9-69e7-4f49-b6ab-a421c079802e", "eventTime": "2019-06-19T02:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0cXJHcWFmNjNFRXdNdS9kSkx1M1RaNWRFNGlaeVhUalBmTURldzNybWFWTDBMRHdEQXpSajg3NUdyRWFPM0J4d0tXZ0NCS2g0ZXlhTVZUaExXbmhYWXdMelNVMnVMVDl6VElUc0hpQk9nUmY2WC9VQjU2cUdsNkZIa0R0KzRHditjdG4yeFhzY1hzcGtTZ25NQUVaVlQvYlhuSFNrZWNJN1hJejN1L3dHTVhDZzBkSGMzR2JNNjNGVVhOVEZSd2pzOHZYa2Q5Mk54UUIwRzBQODVUY1ozV2s3d2tkZ1FRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7e614e9-69e7-4f49-b6ab-a421c079802e", "record_id": "flaws_cloudtrail:0000110:b7e614e9-69e7-4f49-b6ab-a421c079802e", "row_index": 110, "timestamp": "2019-06-19T02:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7e614e9-69e7-4f49-b6ab-a421c079802e", "eventTime": "2019-06-19T02:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0cXJHcWFmNjNFRXdNdS9kSkx1M1RaNWRFNGlaeVhUalBmTURldzNybWFWTDBMRHdEQXpSajg3NUdyRWFPM0J4d0tXZ0NCS2g0ZXlhTVZUaExXbmhYWXdMelNVMnVMVDl6VElUc0hpQk9nUmY2WC9VQjU2cUdsNkZIa0R0KzRHditjdG4yeFhzY1hzcGtTZ25NQUVaVlQvYlhuSFNrZWNJN1hJejN1L3dHTVhDZzBkSGMzR2JNNjNGVVhOVEZSd2pzOHZYa2Q5Mk54UUIwRzBQODVUY1ozV2s3d2tkZ1FRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fca8b30c-96af-46aa-b3f7-2a7c61631", "record_id": "flaws_cloudtrail:0000111:fca8b30c-96af-46aa-b3f7-2a7c61631", "row_index": 111, "timestamp": "2019-06-19T02:40:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fca8b30c-96af-46aa-b3f7-2a7c61631", "eventTime": "2019-06-19T02:40:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcFFRZXk0a0N3WEpOWUdBZWk1UnliaUhaaGZZSFFXNTFTMmlIbkkvUlJnK0lPVWErcW9NczhuWmNJV0xxVDVIaDdoV3Y3UUxVMW1jaDdlMm93eWVORE55Z25nMW1OL3d2VmdmYUZvQzh3V0Mwd1BObnVsc1JqUytCc0d4VXBYdWg5dkw1dE5tWWVHQWNDa1RscmY2QzRIenA4TUgxTXhzZzVRODJ6YnpzNGxKUVdLaUZaNGplTlJ4UUZjcS92UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fca8b30c-96af-46aa-b3f7-2a7c61631", "record_id": "flaws_cloudtrail:0000112:fca8b30c-96af-46aa-b3f7-2a7c61631", "row_index": 112, "timestamp": "2019-06-19T02:40:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fca8b30c-96af-46aa-b3f7-2a7c61631", "eventTime": "2019-06-19T02:40:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcFFRZXk0a0N3WEpOWUdBZWk1UnliaUhaaGZZSFFXNTFTMmlIbkkvUlJnK0lPVWErcW9NczhuWmNJV0xxVDVIaDdoV3Y3UUxVMW1jaDdlMm93eWVORE55Z25nMW1OL3d2VmdmYUZvQzh3V0Mwd1BObnVsc1JqUytCc0d4VXBYdWg5dkw1dE5tWWVHQWNDa1RscmY2QzRIenA4TUgxTXhzZzVRODJ6YnpzNGxKUVdLaUZaNGplTlJ4UUZjcS92UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "record_id": "flaws_cloudtrail:0000113:3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "row_index": 113, "timestamp": "2019-06-19T02:50:27Z", "event_type": "GetInstanceSnapshot", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "eventTime": "2019-06-19T02:50:27Z", "eventName": "GetInstanceSnapshot", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lightsail:GetInstanceSnapshot on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "record_id": "flaws_cloudtrail:0000114:3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "row_index": 114, "timestamp": "2019-06-19T02:50:27Z", "event_type": "GetInstanceSnapshot", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8ccdf1-28a8-448e-8b18-00f1eb93581b", "eventTime": "2019-06-19T02:50:27Z", "eventName": "GetInstanceSnapshot", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lightsail:GetInstanceSnapshot on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4a0038-eb89-48c5-bc21-f03d474bbeff", "record_id": "flaws_cloudtrail:0000115:ad4a0038-eb89-48c5-bc21-f03d474bbeff", "row_index": 115, "timestamp": "2019-06-19T03:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4a0038-eb89-48c5-bc21-f03d474bbeff", "eventTime": "2019-06-19T03:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADE99CJMNRPMPAZ0O", "expiration": "Jun 19, 2019 9:38:30 AM", "sessionToken": "AgoJb3JpZ2luX2VjEDQaCXVzLXdlc3QtMiJHMEUCIQDXsz2bzfVQ1w3sbLkqBudP5Q2GxQvONO6vJZ1JSan3fwIgXOVVRD7XYBD/UPgm1bK/45aZHQvYBmuPfUVpd0n/6hMq2gMIbRAAGgw5NzU0MjYyNjIwMjkiDKY8fIS2Lh3RFDt9eiq3AyHUyozwq0B3+RI+qMrtalr2KMITBNhx7rK9Y4bnGqb4cGxxiiG8OCzutNte81mBgqUnx9ORChr4qCngwZPEct55e4HHRv0mcBR7QuWZpey1HTDay+akkxuGBZ++u9b52kFscQ12VNwdqoLRdLhtWSV2ZjmuDgp01v8lZPV+fE3fvNhzOe+s16LBKxIAOzVQ2HGt9EbeKQ31Nh4BPf5oHs2TFkBl2Xy2QcFgPKdhCnog3qToRzBC/D7UF5gfKnq2VSFqyWScgBWm697Gtn/Yf6j/Dxe8K3is/nUdXbM3ZdnFicaK+2MIXmQRnUoGCVWd3N0wXBlUrY9oJqSJB49b2xgtgtQY5mNcVfTfwMkHSu8eLj9mZmPHwQhxKgdB8m2GCKfyQz7MVwrO4IyRuXFJeysFYgj2rTNHHT+LzQIpL+yM+7XPDp53GyFNRCA/Jfj85QIvlw0pjnI8LF7OlVy3HMhzBiv+VAl/yvVGZlj64ODspzr2qVC3BSioTrfQ0QImV8aAaEBQnfes0w7ihDHMmobAKGx90n5RKj4epgJM3OFN91BqCkM46ubtglKE5uBLD3YlE89DkD4w/dam6AU6tAFLKS80YjTtM9kXJN4h/TnZ27xldEebwWge7+vuyT0WVa1v+6xOo0vvgTQiXpZnifuZgTs6lCE0JqRPxnahxluoDz87v6iDFO83IHDnMTtT6/WE0OHXKab4F2ThpkMWgXG+iF8hp0s5lkvjOytHj6v7d3mZbmNT7S02yITEK27Lq1YKcKB2c+ox/4hKsdyGzJwCCM0kFPXHwfgYIxtD8+S2/i2EliGmqQGfFGBoRTmf9bROjMM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4a0038-eb89-48c5-bc21-f03d474bbeff", "record_id": "flaws_cloudtrail:0000116:ad4a0038-eb89-48c5-bc21-f03d474bbeff", "row_index": 116, "timestamp": "2019-06-19T03:26:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4a0038-eb89-48c5-bc21-f03d474bbeff", "eventTime": "2019-06-19T03:26:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADE99CJMNRPMPAZ0O", "expiration": "Jun 19, 2019 9:38:30 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f65e13cc-deda-4c18-a04e-763f52b00bde", "record_id": "flaws_cloudtrail:0000117:f65e13cc-deda-4c18-a04e-763f52b00bde", "row_index": 117, "timestamp": "2019-06-19T03:43:10Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f65e13cc-deda-4c18-a04e-763f52b00bde", "eventTime": "2019-06-19T03:43:10Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f65e13cc-deda-4c18-a04e-763f52b00bde", "record_id": "flaws_cloudtrail:0000118:f65e13cc-deda-4c18-a04e-763f52b00bde", "row_index": 118, "timestamp": "2019-06-19T03:43:10Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f65e13cc-deda-4c18-a04e-763f52b00bde", "eventTime": "2019-06-19T03:43:10Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b187687d7-3f51-4be1-858f-5096ee6932df", "record_id": "flaws_cloudtrail:0000119:b187687d7-3f51-4be1-858f-5096ee6932df", "row_index": 119, "timestamp": "2019-06-19T03:47:40Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b187687d7-3f51-4be1-858f-5096ee6932df", "eventTime": "2019-06-19T03:47:40Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LVOWiKR6aWnWqTl65m2jPAe8SFo0UFkJlVKCNxalN05kqXJKPs1ifzYW5XRA8-dSWnI-eK-PxAx1QT6HeMSXI-Fod8j3EunK14tiNklyl1gPFpRGID6xZSrZZCc7oYEEmnK3kY3SzxaKcm_s0taiUNJwTxtDSioRa-nqkpWNFvqCxgr8NacYbW-7pnOtDj8i8w2UCPbJOJBSpw4ve7SJQKhEVf3m_Ns5z27QkjE_Vx6FOF-8Z2nop75x_6VDZXeIJmtqNG_ByCEL0VEUwEXzmaNgBVi6OfRhXsI-S0h-nz14qY1SzgomW2Pvicb3V38pfOciwN_IUFV0UzZkw5ZyBUqkVFMTz1a9IbTJmto-aXNxiMW8e2ubJwccRjuFFFOGZIUj_LWVWAtsyFIWkqAR2CVP1-LLCl_7r03AFyr8rpifviy7FGruBZWjuE0wl9oOR7Se57ZXNpnbw-J0k03M1qORv5L5f4JtHqTcWm3dfnNuZoZ5uFZXRSkb_UrEsJekWxwSuezNdKMoBSMYJcF6-9XKUf96rZh3sG_fUo4586B0Zf_MjbiUbMt2L2VidbUuvorLVtMXmowaifKYm_V5g9Vr_i0P350lIQpNAYYoMcSo5sfcFBjVN2oUoPiZSxk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b187687d7-3f51-4be1-858f-5096ee6932df", "record_id": "flaws_cloudtrail:0000120:b187687d7-3f51-4be1-858f-5096ee6932df", "row_index": 120, "timestamp": "2019-06-19T03:47:40Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.1.3.226", "user_agent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b187687d7-3f51-4be1-858f-5096ee6932df", "eventTime": "2019-06-19T03:47:40Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.1.3.226", "userAgent": "aws-cli/1.16.179 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.169", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LVOWiKR6aWnWqTl65m2jPAe8SFo0UFkJlVKCNxalN05kqXJKPs1ifzYW5XRA8-dSWnI-eK-PxAx1QT6HeMSXI-Fod8j3EunK14tiNklyl1gPFpRGID6xZSrZZCc7oYEEmnK3kY3SzxaKcm_s0taiUNJwTxtDSioRa-nqkpWNFvqCxgr8NacYbW-7pnOtDj8i8w2UCPbJOJBSpw4ve7SJQKhEVf3m_Ns5z27QkjE_Vx6FOF-8Z2nop75x_6VDZXeIJmtqNG_ByCEL0VEUwEXzmaNgBVi6OfRhXsI-S0h-nz14qY1SzgomW2Pvicb3V38pfOciwN_IUFV0UzZkw5ZyBUqkVFMTz1a9IbTJmto-aXNxiMW8e2ubJwccRjuFFFOGZIUj_LWVWAtsyFIWkqAR2CVP1-LLCl_7r03AFyr8rpifviy7FGruBZWjuE0wl9oOR7Se57ZXNpnbw-J0k03M1qORv5L5f4JtHqTcWm3dfnNuZoZ5uFZXRSkb_UrEsJekWxwSuezNdKMoBSMYJcF6-9XKUf96rZh3sG_fUo4586B0Zf_MjbiUbMt2L2VidbUuvorLVtMXmowaifKYm_V5g9Vr_i0P350lIQpNAYYoMcSo5sfcFBjVN2oUoPiZSxk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3be8e176-0abd-46d4-b94b-48c178e63a61", "record_id": "flaws_cloudtrail:0000121:3be8e176-0abd-46d4-b94b-48c178e63a61", "row_index": 121, "timestamp": "2019-06-19T04:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3be8e176-0abd-46d4-b94b-48c178e63a61", "eventTime": "2019-06-19T04:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALQ7VDERGIM8UG7M3", "expiration": "Jun 19, 2019 10:59:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3be8e176-0abd-46d4-b94b-48c178e63a61", "record_id": "flaws_cloudtrail:0000122:3be8e176-0abd-46d4-b94b-48c178e63a61", "row_index": 122, "timestamp": "2019-06-19T04:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3be8e176-0abd-46d4-b94b-48c178e63a61", "eventTime": "2019-06-19T04:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALQ7VDERGIM8UG7M3", "expiration": "Jun 19, 2019 10:59:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028387b10-4eb6-4374-9264-f9e25eb2f77b", "record_id": "flaws_cloudtrail:0000123:028387b10-4eb6-4374-9264-f9e25eb2f77b", "row_index": 123, "timestamp": "2019-06-19T05:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028387b10-4eb6-4374-9264-f9e25eb2f77b", "eventTime": "2019-06-19T05:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8T16JTVYCX6YW325", "expiration": "Jun 19, 2019 11:49:02 AM", "sessionToken": "AgoJb3JpZ2luX2VjEDYaCXVzLXdlc3QtMiJHMEUCIEx1lbj63no5aP84nD3rCIr759Uqj7PztZZ1Zx8rftbIAiEAlYP00fNovQFYXxPMfb5nmIs7tY8l3LBS7fIPQW4sbVcq2gMIbxAAGgw5NzU0MjYyNjIwMjkiDD+DyIMfoXSIStHCsiq3AypgdKvguzfp+b0VO+lXQE7hAD2OyVsFJvlDM1vLR4XRRZeUpFaF0C4B6iTPPyTpaacx3/5ly5g/LSoYmcILfZd0IP7Tm9aDngb2X9xWbnCxLBaQzAUIvX7H7RU4zkpFW0v5EIVufj9jzTInxwFYKVf5DcVTEBpUSF2MupNvYoaxvvTitVcvcWMaUGove5AGG0yTBPLYDox7qBtRB3hOnHg0FVZfsNhDgBJ8DJEtwtsEdxZfN1sdOHhRXuki0F4cxmtOBA2I8OOnTc1K8fvBqgv1lbCNIULOGK6Ib0sD4gIo0l19I5xlMZCq6MiuFT1rpQhssC9FJ7XrLEBYA2Kv1cWDRm5mSN1YrtLYGi6q/YLBVUCuWM0di4pVXi6qLBDKSH2pXcq31coSLYULT6YHp6wOq+TaOqnjGvAkmVaGxD/FBUpbTO/F2obJzaQ4viEmtiuMPgQs2IETKfyqs/0WGcndpVATyVlNH2Op2Q/Ny/PYvXg+SheB6aK17RfmpWg3SbgAmz3IVTYZHZNv/OVUb1p9brZY5MWShNVNUoL54DcJHwvGFOReVELif4PvtpnhD8XVAcU5Nbgwno+n6AU6tAH7Tmf6n6ikIjJpRNKKn5o89LhsTyEjtlO2chltv6CyiWV3PsSEwZ0Nt5UCF+91VGPFI5ZKmmgC9ItiiyESTZOiq0t1QTScRfTBzxrqAmjTnllA0xS2UTm+HU2lsiXdoIfW96jGyuX/BhO+NJaWr3TJfBGLkFf/3Zsm3/QgzBjbZCK5wLMqZUMeS+VncOqeqWuT2mmTKC3UMXpSiVDgc4CFkE10RIwb3465MqR6fXZrcZIValA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028387b10-4eb6-4374-9264-f9e25eb2f77b", "record_id": "flaws_cloudtrail:0000124:028387b10-4eb6-4374-9264-f9e25eb2f77b", "row_index": 124, "timestamp": "2019-06-19T05:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028387b10-4eb6-4374-9264-f9e25eb2f77b", "eventTime": "2019-06-19T05:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8T16JTVYCX6YW325", "expiration": "Jun 19, 2019 11:49:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f896744a0-7982-4b64-9230-5d29aedf98c4", "record_id": "flaws_cloudtrail:0000125:f896744a0-7982-4b64-9230-5d29aedf98c4", "row_index": 125, "timestamp": "2019-06-19T05:55:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "[aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f896744a0-7982-4b64-9230-5d29aedf98c4", "eventTime": "2019-06-19T05:55:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "[aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f896744a0-7982-4b64-9230-5d29aedf98c4", "record_id": "flaws_cloudtrail:0000126:f896744a0-7982-4b64-9230-5d29aedf98c4", "row_index": 126, "timestamp": "2019-06-19T05:55:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "[aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f896744a0-7982-4b64-9230-5d29aedf98c4", "eventTime": "2019-06-19T05:55:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "[aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "record_id": "flaws_cloudtrail:0000127:42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "row_index": 127, "timestamp": "2019-06-19T05:57:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "eventTime": "2019-06-19T05:57:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "record_id": "flaws_cloudtrail:0000128:42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "row_index": 128, "timestamp": "2019-06-19T05:57:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42cc7eff-75da-4dd8-b896-01b4ba1ac45c", "eventTime": "2019-06-19T05:57:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5caf6504-4d78-4405-b849-a36a37f3b8ea", "record_id": "flaws_cloudtrail:0000129:5caf6504-4d78-4405-b849-a36a37f3b8ea", "row_index": 129, "timestamp": "2019-06-19T05:58:20Z", "event_type": "GetFederationToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5caf6504-4d78-4405-b849-a36a37f3b8ea", "eventTime": "2019-06-19T05:58:20Z", "eventName": "GetFederationToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:GetFederationToken on resource: arn:aws:sts::811596193553:federated-user/811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5caf6504-4d78-4405-b849-a36a37f3b8ea", "record_id": "flaws_cloudtrail:0000130:5caf6504-4d78-4405-b849-a36a37f3b8ea", "row_index": 130, "timestamp": "2019-06-19T05:58:20Z", "event_type": "GetFederationToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5caf6504-4d78-4405-b849-a36a37f3b8ea", "eventTime": "2019-06-19T05:58:20Z", "eventName": "GetFederationToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:GetFederationToken on resource: arn:aws:sts::811596193553:federated-user/811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48682f13-a51d-4081-933a-fed0f641700d", "record_id": "flaws_cloudtrail:0000131:48682f13-a51d-4081-933a-fed0f641700d", "row_index": 131, "timestamp": "2019-06-19T05:59:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48682f13-a51d-4081-933a-fed0f641700d", "eventTime": "2019-06-19T05:59:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48682f13-a51d-4081-933a-fed0f641700d", "record_id": "flaws_cloudtrail:0000132:48682f13-a51d-4081-933a-fed0f641700d", "row_index": 132, "timestamp": "2019-06-19T05:59:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48682f13-a51d-4081-933a-fed0f641700d", "eventTime": "2019-06-19T05:59:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c2e169-a152-4c00-bc56-2ebe357e442c", "record_id": "flaws_cloudtrail:0000133:05c2e169-a152-4c00-bc56-2ebe357e442c", "row_index": 133, "timestamp": "2019-06-19T05:59:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c2e169-a152-4c00-bc56-2ebe357e442c", "eventTime": "2019-06-19T05:59:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c2e169-a152-4c00-bc56-2ebe357e442c", "record_id": "flaws_cloudtrail:0000134:05c2e169-a152-4c00-bc56-2ebe357e442c", "row_index": 134, "timestamp": "2019-06-19T05:59:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.4.204.252", "user_agent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c2e169-a152-4c00-bc56-2ebe357e442c", "eventTime": "2019-06-19T05:59:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.4.204.252", "userAgent": "aws-cli/1.16.170 Python/3.7.3 Darwin/18.5.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9dd2699-6515-403d-981e-6f17b5169ddc", "record_id": "flaws_cloudtrail:0000135:a9dd2699-6515-403d-981e-6f17b5169ddc", "row_index": 135, "timestamp": "2019-06-19T06:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9dd2699-6515-403d-981e-6f17b5169ddc", "eventTime": "2019-06-19T06:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATSJA1LPJ996VJL0W", "expiration": "Jun 19, 2019 12:38:26 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9dd2699-6515-403d-981e-6f17b5169ddc", "record_id": "flaws_cloudtrail:0000136:a9dd2699-6515-403d-981e-6f17b5169ddc", "row_index": 136, "timestamp": "2019-06-19T06:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9dd2699-6515-403d-981e-6f17b5169ddc", "eventTime": "2019-06-19T06:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATSJA1LPJ996VJL0W", "expiration": "Jun 19, 2019 12:38:26 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "record_id": "flaws_cloudtrail:0000137:f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "row_index": 137, "timestamp": "2019-06-19T06:27:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "eventTime": "2019-06-19T06:27:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXW6SHD6FSIG7I9KF", "expiration": "Jun 19, 2019 7:27:34 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "record_id": "flaws_cloudtrail:0000138:f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "row_index": 138, "timestamp": "2019-06-19T06:27:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99b23c6-5fd6-4d6b-8a85-f5943b3c9278", "eventTime": "2019-06-19T06:27:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXW6SHD6FSIG7I9KF", "expiration": "Jun 19, 2019 7:27:34 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02e6600-a813-4e9f-838a-419024bc956b", "record_id": "flaws_cloudtrail:0000139:a02e6600-a813-4e9f-838a-419024bc956b", "row_index": 139, "timestamp": "2019-06-19T07:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02e6600-a813-4e9f-838a-419024bc956b", "eventTime": "2019-06-19T07:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALWHHN4QZG8YHFQJY", "expiration": "Jun 19, 2019 1:57:16 PM", "sessionToken": "AgoJb3JpZ2luX2VjEDgaCXVzLXdlc3QtMiJIMEYCIQD5mDalAGr5GbL+IYPvjsqNSL4oxuSUfAiPnIf0tXd12wIhAJZ1VcJ2qA96OQqh49U+3zfMfQzxwSdb7GN6MJsmNThcKtoDCHEQABoMOTc1NDI2MjYyMDI5IgxXcvv2YB/wAcoayoIqtwNM+tC+JRFQHmt7fz3TsWuEg1FXqxYkmJoaUlXFQeQyxUeBZCHd3xtfPKLwtJ/Yp1tTAOWcz2znNAGY5zIQny6sR0rEenn4oruTEINZ91TwNQvGuV9siCh7hFQhGrwSfSVVF0Sxl5wiO5jRPLcw3g9qMeK8VQk185oxk5dG/JHOhage5LBqY4Vm0QEQMJh6lGWc6mBHuCfy4RLlhS0nNl9OMEWxkZXFPkta3gY/tAULzCVbTr26HN8ErPVSYjO43m7onO0PHXFDvT3K6GoB8javbSuKtgh0rVqwtmlk1TyxJYeDlKsnTSvs3eCAzStwHCAivBtPCzrvo0F5W1m/SrtXG6knnXouM0mbCUl6sVVpt5Yc3k+x5cvEeheDemCAiHwS8t5LVGWhy0SyMr77GsKpgYJqqJH5Iv1M6CkM7WjVyiafrt9/sSDAKft3F5m/XjlQgHvRhg55b7tn/0e3Baj22ZFl0KB1ILRkcs8h3zWXih6h0HO1QXWx0uydDY9UOGLxEiV4LP66a4WUN1nhhKUXWgBhPJ6SnS+AcdVmPJsciPeRS5sxyzgtptgUnuFzFBHCS547kuWTML7Hp+gFOrMBaP6v3QCa5uzHHBAoRuo4cfB+i9+8bw3gACVHJohaJJL98Q1mdR8IlHshfJHLZyxz/ZEmoAyUx9RTZ6p8AZaYJ6z8vQxXxPHahkWBI5ZFBPnmasCUW4OkEwjwd2YjquQwgmoWe+Ac6OWXlfrKvzPRiUC35canDIpGwWEu/+53hcKlSqG2UKH/vI39i4mszGhYqPdBinLzK+QhEYQOhHj0lPGmIhQqj+iGEz3JbS/1ed0dH/Q="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02e6600-a813-4e9f-838a-419024bc956b", "record_id": "flaws_cloudtrail:0000140:a02e6600-a813-4e9f-838a-419024bc956b", "row_index": 140, "timestamp": "2019-06-19T07:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02e6600-a813-4e9f-838a-419024bc956b", "eventTime": "2019-06-19T07:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALWHHN4QZG8YHFQJY", "expiration": "Jun 19, 2019 1:57:16 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e18617-3052-4830-ada6-7eb7cc7c333a", "record_id": "flaws_cloudtrail:0000141:e18617-3052-4830-ada6-7eb7cc7c333a", "row_index": 141, "timestamp": "2019-06-19T08:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e18617-3052-4830-ada6-7eb7cc7c333a", "eventTime": "2019-06-19T08:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHII1YU2LXE639UOA", "expiration": "Jun 19, 2019 2:51:55 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e18617-3052-4830-ada6-7eb7cc7c333a", "record_id": "flaws_cloudtrail:0000142:e18617-3052-4830-ada6-7eb7cc7c333a", "row_index": 142, "timestamp": "2019-06-19T08:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e18617-3052-4830-ada6-7eb7cc7c333a", "eventTime": "2019-06-19T08:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHII1YU2LXE639UOA", "expiration": "Jun 19, 2019 2:51:55 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988b2b8a-08b1-412a-ac6b-f3ca52424f78", "record_id": "flaws_cloudtrail:0000143:988b2b8a-08b1-412a-ac6b-f3ca52424f78", "row_index": 143, "timestamp": "2019-06-19T09:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988b2b8a-08b1-412a-ac6b-f3ca52424f78", "eventTime": "2019-06-19T09:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFAKDDLDM72667OHQ", "expiration": "Jun 19, 2019 3:46:21 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988b2b8a-08b1-412a-ac6b-f3ca52424f78", "record_id": "flaws_cloudtrail:0000144:988b2b8a-08b1-412a-ac6b-f3ca52424f78", "row_index": 144, "timestamp": "2019-06-19T09:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988b2b8a-08b1-412a-ac6b-f3ca52424f78", "eventTime": "2019-06-19T09:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFAKDDLDM72667OHQ", "expiration": "Jun 19, 2019 3:46:21 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730b62ec-51fe-481c-9977-f36732ca73", "record_id": "flaws_cloudtrail:0000145:730b62ec-51fe-481c-9977-f36732ca73", "row_index": 145, "timestamp": "2019-06-19T10:19:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "[aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730b62ec-51fe-481c-9977-f36732ca73", "eventTime": "2019-06-19T10:19:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "[aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730b62ec-51fe-481c-9977-f36732ca73", "record_id": "flaws_cloudtrail:0000146:730b62ec-51fe-481c-9977-f36732ca73", "row_index": 146, "timestamp": "2019-06-19T10:19:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "[aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730b62ec-51fe-481c-9977-f36732ca73", "eventTime": "2019-06-19T10:19:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "[aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026288-335c-4803-bbe0-30695dea30", "record_id": "flaws_cloudtrail:0000147:026288-335c-4803-bbe0-30695dea30", "row_index": 147, "timestamp": "2019-06-19T10:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026288-335c-4803-bbe0-30695dea30", "eventTime": "2019-06-19T10:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHDKQP51C8HNT2J1I", "expiration": "Jun 19, 2019 4:35:52 PM", "sessionToken": "AgoJb3JpZ2luX2VjEDsaCXVzLXdlc3QtMiJHMEUCIQD+S83UBOE8iPnideIBx6EGMDIPkga/EJXJQVo35INDrgIgeCpDUU3Jq4p6uKvKZ0NuVpTpUgRNo0f7FqFxKIxX9REq2gMIdBAAGgw5NzU0MjYyNjIwMjkiDFBoVlkDCb6GY2a1DSq3A2VLEknEq9MLnwMTaBVBPozUoUTahAIsXEzXoik8g7HQUieomhU7EtWR/rmOJcS8iI1juEBx7mx26ZgHP246HjRYTVdtWand1/rGubsPAfXUhSin/Ie9i3DhKX9ihVcASnLJWEvOhush2EASicO12f23CIVnNRK63oZEYT5uFGvWe7QZLSv5X1ZHwezys5yXmQsrWeUeLIk9qM0/MdCX+7H+kTNiYilrQK4redWSfL+z+m9VgmmMFtOKdvhgQ+rjXwtRTvVcaVGT17KE88RhwRPo8glBTQjdAb91K6Nji85EfZr/i5fUiezKs27NutRytAIiqwJmWYNLKytUYMwoRdl61y4azxGTxSkMipiVuOE0G8qi9fcWtpASzHWj6O2R2JIg2vriit5NHvENbW2xkPSPiXpmJ+/zt+JFAMOaqbi5WEXkWpQbdqHl/FNhN1GtwD6sZE3YmftfHN0wgz1PQRi7IeX/nHnSjReGUaPe2DSsmcWx6ftiIUhFPMvgptuA1WuYcAkkN7/MxEAayDL3QvOdics5zT6Qn1TvLzBLOBawaAfdxc8pbqaAsbP9ppJ6/bgp3Ekls7Qw7puo6AU6tAGvei5R0pQXK9HV45bEr275bnSdOI2E/W/lvpS3SThzQw0wABfJVnet+VGhbJqy83cJSTmzNTMzAzX9eKW9hVMaRejmaILWIKqzGtiaSlXSJ+bEbK6UrXsuxFXawPCr/TMNZW7aaUN3hWQsJ5Fu0kU0qtfklvD3GuW/6yiqV7d7pK+D47Hvynszi0TbrgH7A24r+yx2pCpaLmFWsVKITh2WW78/q4FCmQH+c4zql331vDjXkMQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026288-335c-4803-bbe0-30695dea30", "record_id": "flaws_cloudtrail:0000148:026288-335c-4803-bbe0-30695dea30", "row_index": 148, "timestamp": "2019-06-19T10:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026288-335c-4803-bbe0-30695dea30", "eventTime": "2019-06-19T10:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHDKQP51C8HNT2J1I", "expiration": "Jun 19, 2019 4:35:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a313f16-5262-429f-9f70-afcc78df9295", "record_id": "flaws_cloudtrail:0000149:4a313f16-5262-429f-9f70-afcc78df9295", "row_index": 149, "timestamp": "2019-06-19T11:07:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAHUYJS7DJ0P4PZP4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "189.224.98.12", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a313f16-5262-429f-9f70-afcc78df9295", "eventTime": "2019-06-19T11:07:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.224.98.12", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAHUYJS7DJ0P4PZP4J", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a60a3c0-91c2-4ea4-8226-df91b75da0b4", "record_id": "flaws_cloudtrail:0000150:7a60a3c0-91c2-4ea4-8226-df91b75da0b4", "row_index": 150, "timestamp": "2019-06-19T11:08:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAHUYJS7DJ0P4PZP4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "189.224.98.12", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 538, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a60a3c0-91c2-4ea4-8226-df91b75da0b4", "eventTime": "2019-06-19T11:08:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.224.98.12", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAHUYJS7DJ0P4PZP4J", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332d2d74-c769-4ccb-97a8-1290f76eae0f", "record_id": "flaws_cloudtrail:0000151:332d2d74-c769-4ccb-97a8-1290f76eae0f", "row_index": 151, "timestamp": "2019-06-19T11:10:06Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAHUYJS7DJ0P4PZP4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "189.224.98.12", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"], "raw_record_size_bytes": 663, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332d2d74-c769-4ccb-97a8-1290f76eae0f", "eventTime": "2019-06-19T11:10:06Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.224.98.12", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAHUYJS7DJ0P4PZP4J", "userName": "backup"}, "requestParameters": {"name": "trail-1704"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2757e48f-ee48-454e-8f25-0ca404a183f0", "record_id": "flaws_cloudtrail:0000152:2757e48f-ee48-454e-8f25-0ca404a183f0", "row_index": 152, "timestamp": "2019-06-19T11:10:47Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAHUYJS7DJ0P4PZP4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "189.224.98.12", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"], "raw_record_size_bytes": 660, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2757e48f-ee48-454e-8f25-0ca404a183f0", "eventTime": "2019-06-19T11:10:47Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.224.98.12", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAHUYJS7DJ0P4PZP4J", "userName": "backup"}, "requestParameters": {"name": "trail-1704"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f60793c-246c-4f40-953a-1ac7bb023f90", "record_id": "flaws_cloudtrail:0000153:9f60793c-246c-4f40-953a-1ac7bb023f90", "row_index": 153, "timestamp": "2019-06-19T11:11:25Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAHUYJS7DJ0P4PZP4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "189.224.98.12", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f60793c-246c-4f40-953a-1ac7bb023f90", "eventTime": "2019-06-19T11:11:25Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.224.98.12", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAHUYJS7DJ0P4PZP4J", "userName": "backup"}, "requestParameters": {"name": "trail-1704", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1704"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "record_id": "flaws_cloudtrail:0000154:c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "row_index": 154, "timestamp": "2019-06-19T11:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "eventTime": "2019-06-19T11:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWJ2XUKJDQDXKN76O", "expiration": "Jun 19, 2019 5:44:17 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "record_id": "flaws_cloudtrail:0000155:c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "row_index": 155, "timestamp": "2019-06-19T11:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5764d07-0d51-4ae0-92c5-3e4e6d07b1ea", "eventTime": "2019-06-19T11:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWJ2XUKJDQDXKN76O", "expiration": "Jun 19, 2019 5:44:17 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "record_id": "flaws_cloudtrail:0000156:abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "row_index": 156, "timestamp": "2019-06-19T11:41:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "eventTime": "2019-06-19T11:41:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "record_id": "flaws_cloudtrail:0000157:abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "row_index": 157, "timestamp": "2019-06-19T11:41:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abceb0c6-a2b0-4bdf-ad70-fa66272c09c8", "eventTime": "2019-06-19T11:41:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "record_id": "flaws_cloudtrail:0000158:06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "row_index": 158, "timestamp": "2019-06-19T11:53:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "eventTime": "2019-06-19T11:53:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "record_id": "flaws_cloudtrail:0000159:06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "row_index": 159, "timestamp": "2019-06-19T11:53:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06ba8f83-c303-4ac2-a01c-88b6b0fd8da4", "eventTime": "2019-06-19T11:53:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "record_id": "flaws_cloudtrail:0000160:adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "row_index": 160, "timestamp": "2019-06-19T12:00:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "eventTime": "2019-06-19T12:00:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "record_id": "flaws_cloudtrail:0000161:adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "row_index": 161, "timestamp": "2019-06-19T12:00:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc1f221-f854-488c-a6e0-4cb42ff5fe1d", "eventTime": "2019-06-19T12:00:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa349616-f3cb-40a7-bdc0-981488265777", "record_id": "flaws_cloudtrail:0000162:aa349616-f3cb-40a7-bdc0-981488265777", "row_index": 162, "timestamp": "2019-06-19T12:01:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa349616-f3cb-40a7-bdc0-981488265777", "eventTime": "2019-06-19T12:01:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa349616-f3cb-40a7-bdc0-981488265777", "record_id": "flaws_cloudtrail:0000163:aa349616-f3cb-40a7-bdc0-981488265777", "row_index": 163, "timestamp": "2019-06-19T12:01:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa349616-f3cb-40a7-bdc0-981488265777", "eventTime": "2019-06-19T12:01:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c715f6-ae92-462b-8ee1-f306c7d2959d", "record_id": "flaws_cloudtrail:0000164:c5c715f6-ae92-462b-8ee1-f306c7d2959d", "row_index": 164, "timestamp": "2019-06-19T12:01:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c715f6-ae92-462b-8ee1-f306c7d2959d", "eventTime": "2019-06-19T12:01:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvQ3Z4MWd5eVlPTUt0QmxiczVWK296R3RQZzFnY295QTUvM3o3Vno5SUR6czFoRFlSZTljYVY0dFpCU0dibEhwY2NjZVFZWlpkODBkU05EV0V1RXN5Z3YyVnZKWTg5Z2dLR2lrTm0xVitXVjFaa0lxTE53V2NuS1UySW8vUVVFRW9WZDVITUUxSzdTU01sU2daY0doQzhCTG9QQndLc3k0cXE0SW9kOXBWUFhkeEM5RnlmV2pkQ3NKd1RqUnNaZEFnS3lQaGpneFJ4SzJOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c715f6-ae92-462b-8ee1-f306c7d2959d", "record_id": "flaws_cloudtrail:0000165:c5c715f6-ae92-462b-8ee1-f306c7d2959d", "row_index": 165, "timestamp": "2019-06-19T12:01:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c715f6-ae92-462b-8ee1-f306c7d2959d", "eventTime": "2019-06-19T12:01:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvQ3Z4MWd5eVlPTUt0QmxiczVWK296R3RQZzFnY295QTUvM3o3Vno5SUR6czFoRFlSZTljYVY0dFpCU0dibEhwY2NjZVFZWlpkODBkU05EV0V1RXN5Z3YyVnZKWTg5Z2dLR2lrTm0xVitXVjFaa0lxTE53V2NuS1UySW8vUVVFRW9WZDVITUUxSzdTU01sU2daY0doQzhCTG9QQndLc3k0cXE0SW9kOXBWUFhkeEM5RnlmV2pkQ3NKd1RqUnNaZEFnS3lQaGpneFJ4SzJOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "record_id": "flaws_cloudtrail:0000166:d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "row_index": 166, "timestamp": "2019-06-19T12:01:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "eventTime": "2019-06-19T12:01:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYQW5lYVNmS28vTWx2bS9XNUxwWktqbVR4ZVdxOWRKRmpOUTlFdnVnelBSRmtHbUY2ZGJWUVNoajRuOU1FV1BiZlJPbFZVOTFRbk1hQi8yRHFVQUJ1cHN4MDhoZWV5MU9uRkJlQjdHYzBMVU5vNE1LckVQVTVERHRtQTk3YWowVVRtT1RQT29jcDRuMENqTStLUi9NMDcyTFlhQXdGTllCVDNKT1BLeDcwTEthZlNvZG9DV0pMbTR2SStwN2Irbk9jVU5HNlRJREdJclRCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "record_id": "flaws_cloudtrail:0000167:d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "row_index": 167, "timestamp": "2019-06-19T12:01:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5805fd2-8a6c-48c4-913b-1b4e6f113e91", "eventTime": "2019-06-19T12:01:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYQW5lYVNmS28vTWx2bS9XNUxwWktqbVR4ZVdxOWRKRmpOUTlFdnVnelBSRmtHbUY2ZGJWUVNoajRuOU1FV1BiZlJPbFZVOTFRbk1hQi8yRHFVQUJ1cHN4MDhoZWV5MU9uRkJlQjdHYzBMVU5vNE1LckVQVTVERHRtQTk3YWowVVRtT1RQT29jcDRuMENqTStLUi9NMDcyTFlhQXdGTllCVDNKT1BLeDcwTEthZlNvZG9DV0pMbTR2SStwN2Irbk9jVU5HNlRJREdJclRCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740ac845-e622-4ef6-8eab-066f87d7a0fe", "record_id": "flaws_cloudtrail:0000168:740ac845-e622-4ef6-8eab-066f87d7a0fe", "row_index": 168, "timestamp": "2019-06-19T12:01:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740ac845-e622-4ef6-8eab-066f87d7a0fe", "eventTime": "2019-06-19T12:01:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNGVjMW9FdGFmYlJUbHJHbDFpOEF1bUJ5WkNYdWlQbkhLUHFDM29mVTRyWjN0TDRhbklmN1AxTTU0MjdNZWZ3S1VSMERnd3Z1TVFja202SmFJUW5XeEJvVEhBSHBtZElOaHRGaUExN2x6UndDS09sS0NxZlU1RkIxbS9jdUQ3alVubUNLMDAzeDdWaXpqWW5nSVJDeHAzZ29BV05YWWJOWi9ROXU4c2RVRjZSOFBDb21tTDFmblFsb2N5QjJLdHlXMGg4YSsydEs3V0lGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740ac845-e622-4ef6-8eab-066f87d7a0fe", "record_id": "flaws_cloudtrail:0000169:740ac845-e622-4ef6-8eab-066f87d7a0fe", "row_index": 169, "timestamp": "2019-06-19T12:01:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740ac845-e622-4ef6-8eab-066f87d7a0fe", "eventTime": "2019-06-19T12:01:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNGVjMW9FdGFmYlJUbHJHbDFpOEF1bUJ5WkNYdWlQbkhLUHFDM29mVTRyWjN0TDRhbklmN1AxTTU0MjdNZWZ3S1VSMERnd3Z1TVFja202SmFJUW5XeEJvVEhBSHBtZElOaHRGaUExN2x6UndDS09sS0NxZlU1RkIxbS9jdUQ3alVubUNLMDAzeDdWaXpqWW5nSVJDeHAzZ29BV05YWWJOWi9ROXU4c2RVRjZSOFBDb21tTDFmblFsb2N5QjJLdHlXMGg4YSsydEs3V0lGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7a614c0-eecc-40db-8b8c-056fc96af035", "record_id": "flaws_cloudtrail:0000170:d7a614c0-eecc-40db-8b8c-056fc96af035", "row_index": 170, "timestamp": "2019-06-19T12:01:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7a614c0-eecc-40db-8b8c-056fc96af035", "eventTime": "2019-06-19T12:01:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYjFZUXUydkVPK1d0YVkraWljQ3A4dW5mTVRiYzRHUm5lbUwvalg5aCtTU25TZk1GNnFvV1pVajJFUWNNR1NONGlNSisvUkg0S0MwRmRDcHJYQ1YxRUwwOEU4dGpZWlZVUllZdXhRQ21BaXBUc1YzcGVJMnlBS3hycE4rN0I2RGQyZFFadWlha2syWFBpS0lrS3M4VFArcURnczB5ZWFBaGZaaXBwaHErNklIZ2FtOGpMbjBqVjRCZFZxMWFOZmFHRy84Ky9IQjdlRjNqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7a614c0-eecc-40db-8b8c-056fc96af035", "record_id": "flaws_cloudtrail:0000171:d7a614c0-eecc-40db-8b8c-056fc96af035", "row_index": 171, "timestamp": "2019-06-19T12:01:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7a614c0-eecc-40db-8b8c-056fc96af035", "eventTime": "2019-06-19T12:01:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYjFZUXUydkVPK1d0YVkraWljQ3A4dW5mTVRiYzRHUm5lbUwvalg5aCtTU25TZk1GNnFvV1pVajJFUWNNR1NONGlNSisvUkg0S0MwRmRDcHJYQ1YxRUwwOEU4dGpZWlZVUllZdXhRQ21BaXBUc1YzcGVJMnlBS3hycE4rN0I2RGQyZFFadWlha2syWFBpS0lrS3M4VFArcURnczB5ZWFBaGZaaXBwaHErNklIZ2FtOGpMbjBqVjRCZFZxMWFOZmFHRy84Ky9IQjdlRjNqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "record_id": "flaws_cloudtrail:0000172:1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "row_index": 172, "timestamp": "2019-06-19T12:01:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "eventTime": "2019-06-19T12:01:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrV0ZBUGs0aWtwSkVuaTZYWjNsTkllWEwvZW1qUTUxek9ScHV1TDhGRHF5amUzekk2WDBkNzVVMm9zUEpvQlo1azBVbkUydmRXMXZCQTdtOXpEa2ZxMEplNEFyenR3elhsNXJqcTVZZFhDN2VWVEJ3N3J1U210aHYxZnNxdmhhbDExU2p6UlhhUkRIcGo4VGFYb0MzOS9hV3h1eDhjM3Y5QkdjSjByOUUzbTBjalgyd0pKcStJNi8vZUpyNFl6UnNVTXo0WHdRb0pnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "record_id": "flaws_cloudtrail:0000173:1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "row_index": 173, "timestamp": "2019-06-19T12:01:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3444d8-e2af-4ddd-a7db-62f2b4bca6e3", "eventTime": "2019-06-19T12:01:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrV0ZBUGs0aWtwSkVuaTZYWjNsTkllWEwvZW1qUTUxek9ScHV1TDhGRHF5amUzekk2WDBkNzVVMm9zUEpvQlo1azBVbkUydmRXMXZCQTdtOXpEa2ZxMEplNEFyenR3elhsNXJqcTVZZFhDN2VWVEJ3N3J1U210aHYxZnNxdmhhbDExU2p6UlhhUkRIcGo4VGFYb0MzOS9hV3h1eDhjM3Y5QkdjSjByOUUzbTBjalgyd0pKcStJNi8vZUpyNFl6UnNVTXo0WHdRb0pnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e3844f1-7fcd-474a-bc22-78921f125815", "record_id": "flaws_cloudtrail:0000174:7e3844f1-7fcd-474a-bc22-78921f125815", "row_index": 174, "timestamp": "2019-06-19T12:01:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e3844f1-7fcd-474a-bc22-78921f125815", "eventTime": "2019-06-19T12:01:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRVFVvY1pOQTkrSEwvQkw2QnFGNW9WeGcvUEJwNE93R2kwUjhWZTNES0wyTWpnZzNqODI1TjJDblREaDlKN1F4NVI4NzU5Q0R4dkhhMm0vbDdhQkhUczE5RmJyNkVZbmpnQ0YrMURQcWxjVUxoZHZKN2EzbVdsR2tSUlRtSnIrREM0QUVuSzRIWEJPN3dhd2xJUDZXT0daM05UVnFSUWlqMnR2WlRmTmtYSkdRSGFxYzdabENyOUdhVW1LNEVXbDB1dHE3WE1qc1pGcnRUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e3844f1-7fcd-474a-bc22-78921f125815", "record_id": "flaws_cloudtrail:0000175:7e3844f1-7fcd-474a-bc22-78921f125815", "row_index": 175, "timestamp": "2019-06-19T12:01:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e3844f1-7fcd-474a-bc22-78921f125815", "eventTime": "2019-06-19T12:01:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRVFVvY1pOQTkrSEwvQkw2QnFGNW9WeGcvUEJwNE93R2kwUjhWZTNES0wyTWpnZzNqODI1TjJDblREaDlKN1F4NVI4NzU5Q0R4dkhhMm0vbDdhQkhUczE5RmJyNkVZbmpnQ0YrMURQcWxjVUxoZHZKN2EzbVdsR2tSUlRtSnIrREM0QUVuSzRIWEJPN3dhd2xJUDZXT0daM05UVnFSUWlqMnR2WlRmTmtYSkdRSGFxYzdabENyOUdhVW1LNEVXbDB1dHE3WE1qc1pGcnRUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "record_id": "flaws_cloudtrail:0000176:dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "row_index": 176, "timestamp": "2019-06-19T12:01:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "eventTime": "2019-06-19T12:01:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJScnZPMk1KSXVLOVAzeXRKVm12M2s2ZkZxa1JMN3kvbDhXZEVyWjQzM0cxOVNJbWxOVFo2MjJnbHJnbEx5cTNGbkVYdnNBMEs1WVJ5MWk5NFVSUWJHVkVGK1hCMUtydDlpRmJCOU4zS2FwbDh2Y0RLTlVVaU9FSzVJczUvRjZ1dDRuVkpkb29OTlJOb2lMdERyaWdzdk1qM3laUSsra0ppR0ZybGsxZnVPc2w2MDlvQk16dkYxQ1BXdXJyZkpyK2YyK1p1OVNXb3ZVQXltQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "record_id": "flaws_cloudtrail:0000177:dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "row_index": 177, "timestamp": "2019-06-19T12:01:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc20b4c0-019b-41d7-b72a-f8bc7b21e937", "eventTime": "2019-06-19T12:01:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJScnZPMk1KSXVLOVAzeXRKVm12M2s2ZkZxa1JMN3kvbDhXZEVyWjQzM0cxOVNJbWxOVFo2MjJnbHJnbEx5cTNGbkVYdnNBMEs1WVJ5MWk5NFVSUWJHVkVGK1hCMUtydDlpRmJCOU4zS2FwbDh2Y0RLTlVVaU9FSzVJczUvRjZ1dDRuVkpkb29OTlJOb2lMdERyaWdzdk1qM3laUSsra0ppR0ZybGsxZnVPc2w2MDlvQk16dkYxQ1BXdXJyZkpyK2YyK1p1OVNXb3ZVQXltQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc267b8-8d1d-48fe-b29d-9172df77a557", "record_id": "flaws_cloudtrail:0000178:2dc267b8-8d1d-48fe-b29d-9172df77a557", "row_index": 178, "timestamp": "2019-06-19T12:01:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc267b8-8d1d-48fe-b29d-9172df77a557", "eventTime": "2019-06-19T12:01:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtV1Q3Qy9ycks0RER2WDRoMEthVVEyemVSaTNmb1dLakFSRkFtRThZOEM1MnlpcmhPUDRrOVRZMzZySUlXbGhPUnJzOEhCYXNUb1N5aXkyenlzNnJoeFR6dXFvajhFaDE1dHpFbTBINzZHYU0zWnNjNFAzb3pKSWRNa01YU1VvbjVvK09JTnVObFh6TDFBSWo2U3dMZEp2THcva2oyNXpqZGc1a2h0Zk9HNzJQdVpDK2xtK2xxMDROeXJnbGpOYlBvRG43cU9BMURSMkNNZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc267b8-8d1d-48fe-b29d-9172df77a557", "record_id": "flaws_cloudtrail:0000179:2dc267b8-8d1d-48fe-b29d-9172df77a557", "row_index": 179, "timestamp": "2019-06-19T12:01:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc267b8-8d1d-48fe-b29d-9172df77a557", "eventTime": "2019-06-19T12:01:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtV1Q3Qy9ycks0RER2WDRoMEthVVEyemVSaTNmb1dLakFSRkFtRThZOEM1MnlpcmhPUDRrOVRZMzZySUlXbGhPUnJzOEhCYXNUb1N5aXkyenlzNnJoeFR6dXFvajhFaDE1dHpFbTBINzZHYU0zWnNjNFAzb3pKSWRNa01YU1VvbjVvK09JTnVObFh6TDFBSWo2U3dMZEp2THcva2oyNXpqZGc1a2h0Zk9HNzJQdVpDK2xtK2xxMDROeXJnbGpOYlBvRG43cU9BMURSMkNNZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1d6806-018e-4f18-82f6-79af7dd5a296", "record_id": "flaws_cloudtrail:0000180:7d1d6806-018e-4f18-82f6-79af7dd5a296", "row_index": 180, "timestamp": "2019-06-19T12:01:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1d6806-018e-4f18-82f6-79af7dd5a296", "eventTime": "2019-06-19T12:01:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnZVRjQzc0U2hhZnIxVVNwVlJWQWNXT0JnVlN0d3o2SEx6Wld0SnNSQzJsbjRwY1doUFVYeWNjTi8xYjFMV3FBdEY2blMrNUdDWi9OSk8zMmVQWUhNZFhmeDhzdnE2TU15aFhkWlkyVVdTY2dJcmM0TDZ4RGlxMXkrNzRCSnczNlkzR3NrazFyZnpueWYwbDl1N3J4a0RoVjZNVTZFWFNJNHZKQTNnc3RSLzgxWVNnNVNRN2hXaTVyTG1scmxpSnh0aXFZMHEwTEcwUzVLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1d6806-018e-4f18-82f6-79af7dd5a296", "record_id": "flaws_cloudtrail:0000181:7d1d6806-018e-4f18-82f6-79af7dd5a296", "row_index": 181, "timestamp": "2019-06-19T12:01:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1d6806-018e-4f18-82f6-79af7dd5a296", "eventTime": "2019-06-19T12:01:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnZVRjQzc0U2hhZnIxVVNwVlJWQWNXT0JnVlN0d3o2SEx6Wld0SnNSQzJsbjRwY1doUFVYeWNjTi8xYjFMV3FBdEY2blMrNUdDWi9OSk8zMmVQWUhNZFhmeDhzdnE2TU15aFhkWlkyVVdTY2dJcmM0TDZ4RGlxMXkrNzRCSnczNlkzR3NrazFyZnpueWYwbDl1N3J4a0RoVjZNVTZFWFNJNHZKQTNnc3RSLzgxWVNnNVNRN2hXaTVyTG1scmxpSnh0aXFZMHEwTEcwUzVLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6234b640-824c-434a-b7b4-9135ebd3fe22", "record_id": "flaws_cloudtrail:0000182:6234b640-824c-434a-b7b4-9135ebd3fe22", "row_index": 182, "timestamp": "2019-06-19T12:01:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6234b640-824c-434a-b7b4-9135ebd3fe22", "eventTime": "2019-06-19T12:01:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvU3pYa2F2ek5iOGlORnozcWxKTlRpbjhOa0dtQVNoOTRjcHY0YWwrZjVjeUgwbXg3Mm5pWGNqVnpxdmhoOWJqeXdmMjFJaTkzYm1yWkxsYXNlcVgzOXp3YkV2VTFtSkl0ZXBtcWpYRzRSOGY4TmkyZlNWZkNLeUJhOUNKdjJsTlJIbjVKMksxOEJqd3JENzM3anFSK3plUTFEMW1MR05rNDFyWnlDTHdEekxGa29rK3ZMbWZKQm1tRHRhTlpYQTN6ODNVZE1heWk4eW5iQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6234b640-824c-434a-b7b4-9135ebd3fe22", "record_id": "flaws_cloudtrail:0000183:6234b640-824c-434a-b7b4-9135ebd3fe22", "row_index": 183, "timestamp": "2019-06-19T12:01:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6234b640-824c-434a-b7b4-9135ebd3fe22", "eventTime": "2019-06-19T12:01:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvU3pYa2F2ek5iOGlORnozcWxKTlRpbjhOa0dtQVNoOTRjcHY0YWwrZjVjeUgwbXg3Mm5pWGNqVnpxdmhoOWJqeXdmMjFJaTkzYm1yWkxsYXNlcVgzOXp3YkV2VTFtSkl0ZXBtcWpYRzRSOGY4TmkyZlNWZkNLeUJhOUNKdjJsTlJIbjVKMksxOEJqd3JENzM3anFSK3plUTFEMW1MR05rNDFyWnlDTHdEekxGa29rK3ZMbWZKQm1tRHRhTlpYQTN6ODNVZE1heWk4eW5iQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404771bcd-79e7-4ee8-90f7-71be969d7d90", "record_id": "flaws_cloudtrail:0000184:404771bcd-79e7-4ee8-90f7-71be969d7d90", "row_index": 184, "timestamp": "2019-06-19T12:01:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404771bcd-79e7-4ee8-90f7-71be969d7d90", "eventTime": "2019-06-19T12:01:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzM1YvaFlDdDFHSGNxQWIvSk16ek5uOFpCN3h6WEZ3QkR3amswSHpmYXpIZGkvOW5DU3BKVWtwVVlraVFna2pDOWM1ajVIdm9XWGRGVFdER2ZhVk9SRC96dnFreS94dzJFVkhDaEZLVitqZUo1bm1qQzJiejdVNW05bjFtVElaeFNvcVUvU2xzSlppZHJxdmp0Mzc0Q2s3cHVManFZRzZQb3N2eENBbGcrOFlocENDdWhtYStmOGxXOXZBQlFUL0lVb0h1Z25ZZFIzcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404771bcd-79e7-4ee8-90f7-71be969d7d90", "record_id": "flaws_cloudtrail:0000185:404771bcd-79e7-4ee8-90f7-71be969d7d90", "row_index": 185, "timestamp": "2019-06-19T12:01:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404771bcd-79e7-4ee8-90f7-71be969d7d90", "eventTime": "2019-06-19T12:01:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzM1YvaFlDdDFHSGNxQWIvSk16ek5uOFpCN3h6WEZ3QkR3amswSHpmYXpIZGkvOW5DU3BKVWtwVVlraVFna2pDOWM1ajVIdm9XWGRGVFdER2ZhVk9SRC96dnFreS94dzJFVkhDaEZLVitqZUo1bm1qQzJiejdVNW05bjFtVElaeFNvcVUvU2xzSlppZHJxdmp0Mzc0Q2s3cHVManFZRzZQb3N2eENBbGcrOFlocENDdWhtYStmOGxXOXZBQlFUL0lVb0h1Z25ZZFIzcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06564cf-9a30-45cf-b2dd-d09f2ab49075", "record_id": "flaws_cloudtrail:0000186:d06564cf-9a30-45cf-b2dd-d09f2ab49075", "row_index": 186, "timestamp": "2019-06-19T12:01:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06564cf-9a30-45cf-b2dd-d09f2ab49075", "eventTime": "2019-06-19T12:01:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6V2piM25NanBTVWhLR2RGLzdyRTZPZXl0dmhpVElRMTVTZk03REJkTjhjUlk4YVhlZ0Z5Q2pHdmFLRXpMamdERFVBUzQ5UWpldG42ZStTUlJtWFJaZ3drTUdORktpMGhxODB0YUpGSDFKdEw2V3p6VnhLVXlEbWVRdy80Zkk1L0VDTW5ZdlBQdlhBYllSL052TjFvcWcyZEFNS29lSUt5bVNCSFBJekhteUNJZ1hTdDk0MVFyNTJrbVBNVGM3d2NSL1VmTzh0Ly9JOHo4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06564cf-9a30-45cf-b2dd-d09f2ab49075", "record_id": "flaws_cloudtrail:0000187:d06564cf-9a30-45cf-b2dd-d09f2ab49075", "row_index": 187, "timestamp": "2019-06-19T12:01:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06564cf-9a30-45cf-b2dd-d09f2ab49075", "eventTime": "2019-06-19T12:01:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6V2piM25NanBTVWhLR2RGLzdyRTZPZXl0dmhpVElRMTVTZk03REJkTjhjUlk4YVhlZ0Z5Q2pHdmFLRXpMamdERFVBUzQ5UWpldG42ZStTUlJtWFJaZ3drTUdORktpMGhxODB0YUpGSDFKdEw2V3p6VnhLVXlEbWVRdy80Zkk1L0VDTW5ZdlBQdlhBYllSL052TjFvcWcyZEFNS29lSUt5bVNCSFBJekhteUNJZ1hTdDk0MVFyNTJrbVBNVGM3d2NSL1VmTzh0Ly9JOHo4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "record_id": "flaws_cloudtrail:0000188:2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "row_index": 188, "timestamp": "2019-06-19T12:01:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "eventTime": "2019-06-19T12:01:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4SGtsQnBDblNINjA0eEJQT0UxckJ0VExxZjI2aFdvUFNZeU04UVVtRFcxUWNWcTFNME95VTR4QTlteUtrNHhMV0JBZjkyOU1VZWk3cTJ5c2JoVE4rTDVXQWZOSGFQdXpNZjJEcVpEUEd3SjZDeVY3azV4MVBXbGFHQ0Y4MHlwVlJVQ09TK2dwRUtmcFcyY1IrQ3pwS1NqSVdndWp1ZlpvdUtqcStPamNRcXNpQ3pCTlpkNUphN0pxTFc4WXp1SzZLQlBYanhXR3VjeXh4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "record_id": "flaws_cloudtrail:0000189:2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "row_index": 189, "timestamp": "2019-06-19T12:01:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dcaeeb2-63b0-4020-bb14-e0d7a7177e87", "eventTime": "2019-06-19T12:01:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4SGtsQnBDblNINjA0eEJQT0UxckJ0VExxZjI2aFdvUFNZeU04UVVtRFcxUWNWcTFNME95VTR4QTlteUtrNHhMV0JBZjkyOU1VZWk3cTJ5c2JoVE4rTDVXQWZOSGFQdXpNZjJEcVpEUEd3SjZDeVY3azV4MVBXbGFHQ0Y4MHlwVlJVQ09TK2dwRUtmcFcyY1IrQ3pwS1NqSVdndWp1ZlpvdUtqcStPamNRcXNpQ3pCTlpkNUphN0pxTFc4WXp1SzZLQlBYanhXR3VjeXh4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742453-2ac1-4160-aa21-58981bf2", "record_id": "flaws_cloudtrail:0000190:742453-2ac1-4160-aa21-58981bf2", "row_index": 190, "timestamp": "2019-06-19T12:01:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742453-2ac1-4160-aa21-58981bf2", "eventTime": "2019-06-19T12:01:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSV1hkWTBFSHh1RG9CWk1mcE92bzk3M3ozcldmNnJRY3dBbzZpd0hDcnBGcE96T2NRc3AwZkc3Z3VMbXpFN3dsQ2RCS1dTaS9JWFp1TTRIQStKa2k1enJwYWgzZUhqUHZ5Slg5UTdlckVURS9vU3VTTnY2UWlFTVRCYzBBVHlqZ1h6UXg3QW9BeDRxbXNqTHlNdnBUMkxRNjExSmx1SG5EV0cySXI3R1R3M1p0WUYycU9NSFMyVnBOMmxMMmhJcENqLy9HVUpPTkNSbXJNZi9aaHErdDQzRERjYXM2a0I0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742453-2ac1-4160-aa21-58981bf2", "record_id": "flaws_cloudtrail:0000191:742453-2ac1-4160-aa21-58981bf2", "row_index": 191, "timestamp": "2019-06-19T12:01:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742453-2ac1-4160-aa21-58981bf2", "eventTime": "2019-06-19T12:01:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSV1hkWTBFSHh1RG9CWk1mcE92bzk3M3ozcldmNnJRY3dBbzZpd0hDcnBGcE96T2NRc3AwZkc3Z3VMbXpFN3dsQ2RCS1dTaS9JWFp1TTRIQStKa2k1enJwYWgzZUhqUHZ5Slg5UTdlckVURS9vU3VTTnY2UWlFTVRCYzBBVHlqZ1h6UXg3QW9BeDRxbXNqTHlNdnBUMkxRNjExSmx1SG5EV0cySXI3R1R3M1p0WUYycU9NSFMyVnBOMmxMMmhJcENqLy9HVUpPTkNSbXJNZi9aaHErdDQzRERjYXM2a0I0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd2062a-024f-437c-99cc-3dee2687c586", "record_id": "flaws_cloudtrail:0000192:2fd2062a-024f-437c-99cc-3dee2687c586", "row_index": 192, "timestamp": "2019-06-19T12:01:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd2062a-024f-437c-99cc-3dee2687c586", "eventTime": "2019-06-19T12:01:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRME10dlZWZ2Q0OEU2VUEzMFIzdFE0VDBiemVDbHNmQTNyYU1qU3l1Zjg3RVFMN1g3ZUtsOGgxOU51MXJJR29wODNjZENUUFNHYVZpODJXZ3BRNHkvbjdYREdDRDY0UUVONTFiY1h2UmJ3cStDZERyWW1mNWpyTEdWOHlLUmg1TWt3MEkwRC9GSWRnZUZGaWluNGJ2ZHZ1dUVxbnJCOWNhRjJRYVp3dlNNTHNVVC9sb0EweUllRGlzdHVGVk9vMWl0U0hmcjVYQVhlTGhwT1VyRmM1RGE2QTRxajlta2pZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e806763b0-6de1-4a40-998f-b932b58aa321", "record_id": "flaws_cloudtrail:0000193:e806763b0-6de1-4a40-998f-b932b58aa321", "row_index": 193, "timestamp": "2019-06-19T12:01:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e806763b0-6de1-4a40-998f-b932b58aa321", "eventTime": "2019-06-19T12:01:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHaUtmYXdvREZrSWhsOUtuTWFIN1UwQTNXbHN3bUprQVFJZVJvZUVqOVMzV1N4K2ZNL1BIcjcvNjJrOWY3MXpuMWN5QjBtejJNQjZYSkg3Q3ZjTjNaZlFScHdvbmlWdDJrTm5kdXpDdTh2eEJZQTZmV3RzYWljNUF5c1VDU2Q0cHhTOHZpQ2d4dVVncytXV3NHRWxwT2oxK24wTkhHS3hFcXpiQ1UrOUM3UkFLd0FVNEJmR0pyYmk5Rjl5SVEwbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd2062a-024f-437c-99cc-3dee2687c586", "record_id": "flaws_cloudtrail:0000194:2fd2062a-024f-437c-99cc-3dee2687c586", "row_index": 194, "timestamp": "2019-06-19T12:01:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd2062a-024f-437c-99cc-3dee2687c586", "eventTime": "2019-06-19T12:01:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRME10dlZWZ2Q0OEU2VUEzMFIzdFE0VDBiemVDbHNmQTNyYU1qU3l1Zjg3RVFMN1g3ZUtsOGgxOU51MXJJR29wODNjZENUUFNHYVZpODJXZ3BRNHkvbjdYREdDRDY0UUVONTFiY1h2UmJ3cStDZERyWW1mNWpyTEdWOHlLUmg1TWt3MEkwRC9GSWRnZUZGaWluNGJ2ZHZ1dUVxbnJCOWNhRjJRYVp3dlNNTHNVVC9sb0EweUllRGlzdHVGVk9vMWl0U0hmcjVYQVhlTGhwT1VyRmM1RGE2QTRxajlta2pZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e806763b0-6de1-4a40-998f-b932b58aa321", "record_id": "flaws_cloudtrail:0000195:e806763b0-6de1-4a40-998f-b932b58aa321", "row_index": 195, "timestamp": "2019-06-19T12:01:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e806763b0-6de1-4a40-998f-b932b58aa321", "eventTime": "2019-06-19T12:01:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHaUtmYXdvREZrSWhsOUtuTWFIN1UwQTNXbHN3bUprQVFJZVJvZUVqOVMzV1N4K2ZNL1BIcjcvNjJrOWY3MXpuMWN5QjBtejJNQjZYSkg3Q3ZjTjNaZlFScHdvbmlWdDJrTm5kdXpDdTh2eEJZQTZmV3RzYWljNUF5c1VDU2Q0cHhTOHZpQ2d4dVVncytXV3NHRWxwT2oxK24wTkhHS3hFcXpiQ1UrOUM3UkFLd0FVNEJmR0pyYmk5Rjl5SVEwbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "record_id": "flaws_cloudtrail:0000196:ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "row_index": 196, "timestamp": "2019-06-19T12:02:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "eventTime": "2019-06-19T12:02:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "record_id": "flaws_cloudtrail:0000197:ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "row_index": 197, "timestamp": "2019-06-19T12:02:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4feca6-e5b7-4294-9aa2-a30a864b2a53", "eventTime": "2019-06-19T12:02:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "509158a-d2f0-4cd1-860b-797cc3405362", "record_id": "flaws_cloudtrail:0000198:509158a-d2f0-4cd1-860b-797cc3405362", "row_index": 198, "timestamp": "2019-06-19T12:02:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "509158a-d2f0-4cd1-860b-797cc3405362", "eventTime": "2019-06-19T12:02:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKRjFFbHZpWGVQRXl2Nk9hcFZ0WE1oc0ZiMGxxUHFpSGxrSkFzakNYL1ZiSlhrSi9IUkFBSnFMejlwOXBYY1ZORkJ2dVJQUGN0ZmdrYXlBNExqY0JqNUg1UXBGTzN6Uy9lemM4d3dRY0h0UkNYT3RqTVJ6ay9jYW5NbXF3cHQyZWVsQjZFZE9BeHdFWFAvbUd1VkFSaTc1RjNibXVXS2tGejhnZ3pqRkFHeHp6Z0NPcE56b2RBQnNwR21GQnRkYTczRmtsQVpjbytDVm1zUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "509158a-d2f0-4cd1-860b-797cc3405362", "record_id": "flaws_cloudtrail:0000199:509158a-d2f0-4cd1-860b-797cc3405362", "row_index": 199, "timestamp": "2019-06-19T12:02:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "509158a-d2f0-4cd1-860b-797cc3405362", "eventTime": "2019-06-19T12:02:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKRjFFbHZpWGVQRXl2Nk9hcFZ0WE1oc0ZiMGxxUHFpSGxrSkFzakNYL1ZiSlhrSi9IUkFBSnFMejlwOXBYY1ZORkJ2dVJQUGN0ZmdrYXlBNExqY0JqNUg1UXBGTzN6Uy9lemM4d3dRY0h0UkNYT3RqTVJ6ay9jYW5NbXF3cHQyZWVsQjZFZE9BeHdFWFAvbUd1VkFSaTc1RjNibXVXS2tGejhnZ3pqRkFHeHp6Z0NPcE56b2RBQnNwR21GQnRkYTczRmtsQVpjbytDVm1zUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c2970e2-a424-44a3-956e-c9dd69311ee3", "record_id": "flaws_cloudtrail:0000200:1c2970e2-a424-44a3-956e-c9dd69311ee3", "row_index": 200, "timestamp": "2019-06-19T12:02:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c2970e2-a424-44a3-956e-c9dd69311ee3", "eventTime": "2019-06-19T12:02:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnR3RxSEhxMnNxc3hiUVd4aEJTbVc0UHVzMlREcHo5a29XamtsaWVmeWZTeTR5Tjh2REdLS3AwVEZRcWxqLzR3cExCZGtPdjR5Sk1RZ2poMjZvdVN6ZmlTTklFdGhCMi91Tmx0d2tLR2Q2MDR5eHlqRWNQNjdENzEwL2Vwc3ZSZnZUVzFyMkhFMWI5RkpMU3ljWTBLN1ZzZkQ3UEpWSGw1RHM2ZnVCcjd2Vnpab3hwVzQ3aXRCbUlUeGUrc1NyUmdNOWkxdlo2SHdNRFFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c2970e2-a424-44a3-956e-c9dd69311ee3", "record_id": "flaws_cloudtrail:0000201:1c2970e2-a424-44a3-956e-c9dd69311ee3", "row_index": 201, "timestamp": "2019-06-19T12:02:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c2970e2-a424-44a3-956e-c9dd69311ee3", "eventTime": "2019-06-19T12:02:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnR3RxSEhxMnNxc3hiUVd4aEJTbVc0UHVzMlREcHo5a29XamtsaWVmeWZTeTR5Tjh2REdLS3AwVEZRcWxqLzR3cExCZGtPdjR5Sk1RZ2poMjZvdVN6ZmlTTklFdGhCMi91Tmx0d2tLR2Q2MDR5eHlqRWNQNjdENzEwL2Vwc3ZSZnZUVzFyMkhFMWI5RkpMU3ljWTBLN1ZzZkQ3UEpWSGw1RHM2ZnVCcjd2Vnpab3hwVzQ3aXRCbUlUeGUrc1NyUmdNOWkxdlo2SHdNRFFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f582ae7e-1711-4a6c-95a6-45187baa6445", "record_id": "flaws_cloudtrail:0000202:f582ae7e-1711-4a6c-95a6-45187baa6445", "row_index": 202, "timestamp": "2019-06-19T12:02:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f582ae7e-1711-4a6c-95a6-45187baa6445", "eventTime": "2019-06-19T12:02:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBMmZ5eEU2dDVGN08rUkowWkN3R09peVBlSmhkdmVVUHB5Ni9NTE1JZmVVQkN3Rm9HYUtqeFNMemFDbVZpc0k3QkFhSUc3M0FFemU1NUdUcDQxNEt5RW1ZTngxVW1nTStWdHJsbklzNkNKQUpueUxCeU1LbHFFcHY1QUNOOWFadGN4emF3YXRpNUJXN3NsVXJtM0VIbVBBdHdRSy9ITVU2RUpQWXphcUV6ZGtJY0JHa2syY2tLMmp0YmFqcS9uQmJpWTlaWnlZWlB3NE0xdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f582ae7e-1711-4a6c-95a6-45187baa6445", "record_id": "flaws_cloudtrail:0000203:f582ae7e-1711-4a6c-95a6-45187baa6445", "row_index": 203, "timestamp": "2019-06-19T12:02:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f582ae7e-1711-4a6c-95a6-45187baa6445", "eventTime": "2019-06-19T12:02:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBMmZ5eEU2dDVGN08rUkowWkN3R09peVBlSmhkdmVVUHB5Ni9NTE1JZmVVQkN3Rm9HYUtqeFNMemFDbVZpc0k3QkFhSUc3M0FFemU1NUdUcDQxNEt5RW1ZTngxVW1nTStWdHJsbklzNkNKQUpueUxCeU1LbHFFcHY1QUNOOWFadGN4emF3YXRpNUJXN3NsVXJtM0VIbVBBdHdRSy9ITVU2RUpQWXphcUV6ZGtJY0JHa2syY2tLMmp0YmFqcS9uQmJpWTlaWnlZWlB3NE0xdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b211111c-55ad-4ccd-93d4-df5759e6de62", "record_id": "flaws_cloudtrail:0000204:b211111c-55ad-4ccd-93d4-df5759e6de62", "row_index": 204, "timestamp": "2019-06-19T12:02:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b211111c-55ad-4ccd-93d4-df5759e6de62", "eventTime": "2019-06-19T12:02:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQV3A5VlRmU3NMTzRFTTBOWGFzUFh5bE03T1JXRDg4enpkMVo5VjVXWlljS2VpZzRIRjZ4ZUlLRVFRS2dTQitHakFvNjUrczg0cHBoZWtvcDM0TTZYamZWaU5PemtHMFd5Q1orN2lQNzFyeXo3Y2FWdFN0YkxtQSt3N05SNWZVK0hPZk85KzM5MVJYNWRIM0sxTEtJOHZVUWhxV3ZLZ29CNXZPOFVYMWdLVm95YWlFQ2RpcmZCd1BiQnV6ZlZkSThSUlBnekEyTHdvRjlrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b211111c-55ad-4ccd-93d4-df5759e6de62", "record_id": "flaws_cloudtrail:0000205:b211111c-55ad-4ccd-93d4-df5759e6de62", "row_index": 205, "timestamp": "2019-06-19T12:02:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b211111c-55ad-4ccd-93d4-df5759e6de62", "eventTime": "2019-06-19T12:02:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQV3A5VlRmU3NMTzRFTTBOWGFzUFh5bE03T1JXRDg4enpkMVo5VjVXWlljS2VpZzRIRjZ4ZUlLRVFRS2dTQitHakFvNjUrczg0cHBoZWtvcDM0TTZYamZWaU5PemtHMFd5Q1orN2lQNzFyeXo3Y2FWdFN0YkxtQSt3N05SNWZVK0hPZk85KzM5MVJYNWRIM0sxTEtJOHZVUWhxV3ZLZ29CNXZPOFVYMWdLVm95YWlFQ2RpcmZCd1BiQnV6ZlZkSThSUlBnekEyTHdvRjlrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "record_id": "flaws_cloudtrail:0000206:1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "row_index": 206, "timestamp": "2019-06-19T12:02:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "eventTime": "2019-06-19T12:02:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6U0hWbG9pZitWM2dnS3RZZGF1aVNtYUZvb29ZYzFsSXI1Mk5LSXRjZkIySFR0bE9tTlQ4OFFLdmdSWnpCR2o0aXprSWcySjZodHpqZUNuREZPWmNLdXNXTVJFaG10RCtlbWRkYng2ZStxZXc1UmhRRjRkYzdORTlQSFhwMGxRRE5JZDlXOEdhYXd3WXpjRkFKUFZqTTZXbThYaXpzMFpGY09TWUxHVVRIcGNIM0U3TEJ2Q1J2S0dxWklzYkpHNnFNUWxla1VYUThRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "record_id": "flaws_cloudtrail:0000207:1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "row_index": 207, "timestamp": "2019-06-19T12:02:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5eebac-cdfb-4ade-85dd-7cfbbed704a6", "eventTime": "2019-06-19T12:02:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6U0hWbG9pZitWM2dnS3RZZGF1aVNtYUZvb29ZYzFsSXI1Mk5LSXRjZkIySFR0bE9tTlQ4OFFLdmdSWnpCR2o0aXprSWcySjZodHpqZUNuREZPWmNLdXNXTVJFaG10RCtlbWRkYng2ZStxZXc1UmhRRjRkYzdORTlQSFhwMGxRRE5JZDlXOEdhYXd3WXpjRkFKUFZqTTZXbThYaXpzMFpGY09TWUxHVVRIcGNIM0U3TEJ2Q1J2S0dxWklzYkpHNnFNUWxla1VYUThRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "record_id": "flaws_cloudtrail:0000208:0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "row_index": 208, "timestamp": "2019-06-19T12:02:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "eventTime": "2019-06-19T12:02:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqdHlKY28rTjZSdEhtRjdPbDFzVVhyNnQ5RHVXYzVwQXo0dUhvVEViU0YxNzNQZmN2VjlxT3lmSWtiK2EzSm9TUERaclN1S2RmQkNrdTJVYVUzMDVkdDh4WUhXTmtsUzhaSUZwZnh5THpsREw5S1hNL05LaUV4TjY1TGw2d3ptS1JHMGtFVEk1eWZOK2pseVF1b1hUY0l1OUtkM081KytKUGZoc2FtbUZ6S3ZJN0pzekdTZUVYRm16TE43TEM3bEd5SE5aMTEyZU9qZ05IUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "record_id": "flaws_cloudtrail:0000209:0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "row_index": 209, "timestamp": "2019-06-19T12:02:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b6f6580-b506-40bb-8b01-7b41c4e3f84e", "eventTime": "2019-06-19T12:02:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqdHlKY28rTjZSdEhtRjdPbDFzVVhyNnQ5RHVXYzVwQXo0dUhvVEViU0YxNzNQZmN2VjlxT3lmSWtiK2EzSm9TUERaclN1S2RmQkNrdTJVYVUzMDVkdDh4WUhXTmtsUzhaSUZwZnh5THpsREw5S1hNL05LaUV4TjY1TGw2d3ptS1JHMGtFVEk1eWZOK2pseVF1b1hUY0l1OUtkM081KytKUGZoc2FtbUZ6S3ZJN0pzekdTZUVYRm16TE43TEM3bEd5SE5aMTEyZU9qZ05IUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01b52e7-661b-427a-95a9-4c8742ccab3c", "record_id": "flaws_cloudtrail:0000210:d01b52e7-661b-427a-95a9-4c8742ccab3c", "row_index": 210, "timestamp": "2019-06-19T12:02:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01b52e7-661b-427a-95a9-4c8742ccab3c", "eventTime": "2019-06-19T12:02:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlRVdQdnl0cEw2VVR6OVVsUzFPb3d0UW9XZzljdlpVYVR2Q01ORHppZWtyL1kveUIwamc3YmRvcDBFcmFMQkR1c29WVGZodTBkY1AwVlRCbjlVako5ZHdnblVTNzkxV3c3V0dGTGdxb3ZvT0JkR2dWY2NkcmdCeDJlQ01Cd2d2cXJLblEvNnFxQ2l0TUM2WjFmbk0rQ2Q4VVNYdWxSNWc4WURxelBGb3BLdmdnYjhyVWl2WVZxV2lPVG5EWWQ5M0JYMlljMDU4ZHFFeXdDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01b52e7-661b-427a-95a9-4c8742ccab3c", "record_id": "flaws_cloudtrail:0000211:d01b52e7-661b-427a-95a9-4c8742ccab3c", "row_index": 211, "timestamp": "2019-06-19T12:02:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01b52e7-661b-427a-95a9-4c8742ccab3c", "eventTime": "2019-06-19T12:02:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlRVdQdnl0cEw2VVR6OVVsUzFPb3d0UW9XZzljdlpVYVR2Q01ORHppZWtyL1kveUIwamc3YmRvcDBFcmFMQkR1c29WVGZodTBkY1AwVlRCbjlVako5ZHdnblVTNzkxV3c3V0dGTGdxb3ZvT0JkR2dWY2NkcmdCeDJlQ01Cd2d2cXJLblEvNnFxQ2l0TUM2WjFmbk0rQ2Q4VVNYdWxSNWc4WURxelBGb3BLdmdnYjhyVWl2WVZxV2lPVG5EWWQ5M0JYMlljMDU4ZHFFeXdDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "685e017f-36d8-4fd1-892d-20866f229def", "record_id": "flaws_cloudtrail:0000212:685e017f-36d8-4fd1-892d-20866f229def", "row_index": 212, "timestamp": "2019-06-19T12:02:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "685e017f-36d8-4fd1-892d-20866f229def", "eventTime": "2019-06-19T12:02:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZ3NHekE5c1hTZXpBckhKS0tPdDk4a1ZmTTlIQUFzTjY0Z0F2UUh1RHFndW1jYkNhYXVDVmtMelVjN2w2MEs2WjIzOFVrZFZQTE5PL2E0eWJTalRHZGdFUjVlWDFaZ2xpaGRsRVRRaVpWYUdVcGJLYnd4RlJCV29YaitEWW5qU0FhWk9TaW1XdlhpdkdWdHZwSmQxS081amNjU09OZ01yWDRGNFFFRHNDSDVrcjJzNFVOK1lKZHIrdytKTzZmRG9TaFlmdFI2QjBpbHFLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "685e017f-36d8-4fd1-892d-20866f229def", "record_id": "flaws_cloudtrail:0000213:685e017f-36d8-4fd1-892d-20866f229def", "row_index": 213, "timestamp": "2019-06-19T12:02:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "685e017f-36d8-4fd1-892d-20866f229def", "eventTime": "2019-06-19T12:02:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZ3NHekE5c1hTZXpBckhKS0tPdDk4a1ZmTTlIQUFzTjY0Z0F2UUh1RHFndW1jYkNhYXVDVmtMelVjN2w2MEs2WjIzOFVrZFZQTE5PL2E0eWJTalRHZGdFUjVlWDFaZ2xpaGRsRVRRaVpWYUdVcGJLYnd4RlJCV29YaitEWW5qU0FhWk9TaW1XdlhpdkdWdHZwSmQxS081amNjU09OZ01yWDRGNFFFRHNDSDVrcjJzNFVOK1lKZHIrdytKTzZmRG9TaFlmdFI2QjBpbHFLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83314f85-9f91-448e-be87-2f8e91304d0", "record_id": "flaws_cloudtrail:0000214:83314f85-9f91-448e-be87-2f8e91304d0", "row_index": 214, "timestamp": "2019-06-19T12:02:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83314f85-9f91-448e-be87-2f8e91304d0", "eventTime": "2019-06-19T12:02:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTQ0pvd3FyNVdTREp5Ukt4TXdXVDFRaGg2VHhrM3h2c0cyT0pkazZqMlExZ2hiMHpKQlNKTzdTSkhXVHV5UUdUQVRyb0s4Y2h5dm5nQks3OFgrRm51L0lNVFU1MS9uc3hWME9Pak4rVnRDVW9DQ0R4NHdzRjR1bStPUXBRZXhnQzNzejNLcjl3U203VUJGekk5eW9nL1hmL0o4L01Ob0JZMjMzZXlIdU5HTTFZRlJSckM2SVN6TkJGbkdIMlBQeDg5RndLdGVmNVBBNm1vdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83314f85-9f91-448e-be87-2f8e91304d0", "record_id": "flaws_cloudtrail:0000215:83314f85-9f91-448e-be87-2f8e91304d0", "row_index": 215, "timestamp": "2019-06-19T12:02:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83314f85-9f91-448e-be87-2f8e91304d0", "eventTime": "2019-06-19T12:02:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTQ0pvd3FyNVdTREp5Ukt4TXdXVDFRaGg2VHhrM3h2c0cyT0pkazZqMlExZ2hiMHpKQlNKTzdTSkhXVHV5UUdUQVRyb0s4Y2h5dm5nQks3OFgrRm51L0lNVFU1MS9uc3hWME9Pak4rVnRDVW9DQ0R4NHdzRjR1bStPUXBRZXhnQzNzejNLcjl3U203VUJGekk5eW9nL1hmL0o4L01Ob0JZMjMzZXlIdU5HTTFZRlJSckM2SVN6TkJGbkdIMlBQeDg5RndLdGVmNVBBNm1vdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e46aa0-ec46-4d04-9418-26504a2614", "record_id": "flaws_cloudtrail:0000216:38e46aa0-ec46-4d04-9418-26504a2614", "row_index": 216, "timestamp": "2019-06-19T12:02:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e46aa0-ec46-4d04-9418-26504a2614", "eventTime": "2019-06-19T12:02:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNzIzRG96R3Z1OXJzeS9PZnNUM3RlWk5mUVh4WkNVZ0xTOXI1SVlIb2tBM1hsR2U2UCtXV0RvaFk2TXBvZFd6aHVUVERIME9kOThKelN0TDQveUhFMHg3NlcwcHpUZ3VqcEZISE5CV0YyV3VHbHVEWHBadWhtVEV0NDk5TkdUWVJiOEw3VzJlSVRlOE5saVEzTU5wNnNqRGhDRFE4RVhNR3p0ckhOZkVmNGlpSHU3TzFHSkVrQjR0V3J4aEF3MyszOEFwNVo0UlVZL2ZkUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e46aa0-ec46-4d04-9418-26504a2614", "record_id": "flaws_cloudtrail:0000217:38e46aa0-ec46-4d04-9418-26504a2614", "row_index": 217, "timestamp": "2019-06-19T12:02:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e46aa0-ec46-4d04-9418-26504a2614", "eventTime": "2019-06-19T12:02:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNzIzRG96R3Z1OXJzeS9PZnNUM3RlWk5mUVh4WkNVZ0xTOXI1SVlIb2tBM1hsR2U2UCtXV0RvaFk2TXBvZFd6aHVUVERIME9kOThKelN0TDQveUhFMHg3NlcwcHpUZ3VqcEZISE5CV0YyV3VHbHVEWHBadWhtVEV0NDk5TkdUWVJiOEw3VzJlSVRlOE5saVEzTU5wNnNqRGhDRFE4RVhNR3p0ckhOZkVmNGlpSHU3TzFHSkVrQjR0V3J4aEF3MyszOEFwNVo0UlVZL2ZkUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "record_id": "flaws_cloudtrail:0000218:b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "row_index": 218, "timestamp": "2019-06-19T12:02:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "eventTime": "2019-06-19T12:02:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCRFNsR1pXOVlRSDdxREVLd21ieHJUWGlIdkhUUWx5Mm94WENweEVpdk53MmRCdFlrRGVNa1p1S3JsS1FRcGRFZkNYT1M2NDkreThzYmxJYTdMNEt0L3oyS2lhZDd4UVRjQytSOXpOQUk2dmNVdGVtWXY2blllbXJST3dmTEl4MXhLZ2o2cUJWWXowVXkzOXZ2TmJ3NHZJU3NhUkVJVzMrajIrRFFoSjR1VElNMmszZytKY2hsWUl5YUpSWkdlSGtoUFJST1ZyRXlCST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "record_id": "flaws_cloudtrail:0000219:b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "row_index": 219, "timestamp": "2019-06-19T12:02:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0224ed8-2e6e-47e9-be04-985a8bfd89e4", "eventTime": "2019-06-19T12:02:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCRFNsR1pXOVlRSDdxREVLd21ieHJUWGlIdkhUUWx5Mm94WENweEVpdk53MmRCdFlrRGVNa1p1S3JsS1FRcGRFZkNYT1M2NDkreThzYmxJYTdMNEt0L3oyS2lhZDd4UVRjQytSOXpOQUk2dmNVdGVtWXY2blllbXJST3dmTEl4MXhLZ2o2cUJWWXowVXkzOXZ2TmJ3NHZJU3NhUkVJVzMrajIrRFFoSjR1VElNMmszZytKY2hsWUl5YUpSWkdlSGtoUFJST1ZyRXlCST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442327a-95d0-43bc-8591-deb0aad1ae0a", "record_id": "flaws_cloudtrail:0000220:442327a-95d0-43bc-8591-deb0aad1ae0a", "row_index": 220, "timestamp": "2019-06-19T12:02:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442327a-95d0-43bc-8591-deb0aad1ae0a", "eventTime": "2019-06-19T12:02:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5TlplRGVCSnlTSitVS1A2RFVnV3dXNHhWdm1LeFlwbFlLVGkraVJuVkcvU3JRU1ZGaG9ZYml3QUxLVkVaUDdYbDV2UlQ0bnpYejFkNC9HdzJFbWRUbUZQblVOQ1BzekFOSTZuVHdISXF6Y0ZwZkMyMnM3V0psT0V5QlUyRGtjRTJCeTMxeU5ySG1aSnFMV015OHg1R2hpWkpnVWo2MmlHdDFiWk5EdlBTZnhoY1NCZzk2aWlUQlRuVjYwRXZ0L2FvUGlzZHBHeDZOZHZLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442327a-95d0-43bc-8591-deb0aad1ae0a", "record_id": "flaws_cloudtrail:0000221:442327a-95d0-43bc-8591-deb0aad1ae0a", "row_index": 221, "timestamp": "2019-06-19T12:02:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442327a-95d0-43bc-8591-deb0aad1ae0a", "eventTime": "2019-06-19T12:02:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5TlplRGVCSnlTSitVS1A2RFVnV3dXNHhWdm1LeFlwbFlLVGkraVJuVkcvU3JRU1ZGaG9ZYml3QUxLVkVaUDdYbDV2UlQ0bnpYejFkNC9HdzJFbWRUbUZQblVOQ1BzekFOSTZuVHdISXF6Y0ZwZkMyMnM3V0psT0V5QlUyRGtjRTJCeTMxeU5ySG1aSnFMV015OHg1R2hpWkpnVWo2MmlHdDFiWk5EdlBTZnhoY1NCZzk2aWlUQlRuVjYwRXZ0L2FvUGlzZHBHeDZOZHZLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "record_id": "flaws_cloudtrail:0000222:cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "row_index": 222, "timestamp": "2019-06-19T12:02:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "eventTime": "2019-06-19T12:02:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0YXBPZHYyNUNOUDZkUVpRdlhDcmtIVmVNcjloR2dtTEgrcTBLeEVTQ1dkbUdGVGVkenI0cUxaOUtQa1pIRFU5ZnRuakg0UGZKNmo3bERpcExMUjhFOUpnTnBTUS8zV1ZIcTRvTGRTV2kvMTdZakgyMXNjRXh5Q0hyNk5INnA4eXBhclh4bUFoekxXT2dxZWd2ck9GazY5d3N4V3lObUxjTE10em9CaXZyVi90V0pOWmFhd0hMNnNwQ3FMZEJGT2ZheCsyNU5NNVdLeGtUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "record_id": "flaws_cloudtrail:0000223:cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "row_index": 223, "timestamp": "2019-06-19T12:02:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa2ce7c-3b76-4f7a-8ea5-e7196b458844b", "eventTime": "2019-06-19T12:02:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0YXBPZHYyNUNOUDZkUVpRdlhDcmtIVmVNcjloR2dtTEgrcTBLeEVTQ1dkbUdGVGVkenI0cUxaOUtQa1pIRFU5ZnRuakg0UGZKNmo3bERpcExMUjhFOUpnTnBTUS8zV1ZIcTRvTGRTV2kvMTdZakgyMXNjRXh5Q0hyNk5INnA4eXBhclh4bUFoekxXT2dxZWd2ck9GazY5d3N4V3lObUxjTE10em9CaXZyVi90V0pOWmFhd0hMNnNwQ3FMZEJGT2ZheCsyNU5NNVdLeGtUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "record_id": "flaws_cloudtrail:0000224:0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "row_index": 224, "timestamp": "2019-06-19T12:02:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "eventTime": "2019-06-19T12:02:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaVM2Y0hHcXpUSEc1dDdPZ1FnRU1Sa0ZvMEIrUkFLMzhlWlRiZTZVRnVtSmdsb0dCSEF5c1hNUU9IVzY4NE0xbUw5Wit6NFRzWjZ2VWQxVWpMeC9pN3RPN3JiRTI4dXhiaDkxcHZvNnJrZzZUNjErSWZDMFdqMWZWVjRnbDFCNzgvS0p6QXdRSUhqM0p5Ky9iRGFSWUJQQzBMK09qZnFkV2pyYThmWWFldk0rYTZrS3lzL2l4azJwRUFHRmp1VEhlbW5JdWJaSEhCZkMwcXc3UWJ0UGVLUVdhVlJ0clBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "record_id": "flaws_cloudtrail:0000225:0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "row_index": 225, "timestamp": "2019-06-19T12:02:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7e2b40-b7ba-466d-bbb4-6a870c204f4f", "eventTime": "2019-06-19T12:02:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaVM2Y0hHcXpUSEc1dDdPZ1FnRU1Sa0ZvMEIrUkFLMzhlWlRiZTZVRnVtSmdsb0dCSEF5c1hNUU9IVzY4NE0xbUw5Wit6NFRzWjZ2VWQxVWpMeC9pN3RPN3JiRTI4dXhiaDkxcHZvNnJrZzZUNjErSWZDMFdqMWZWVjRnbDFCNzgvS0p6QXdRSUhqM0p5Ky9iRGFSWUJQQzBMK09qZnFkV2pyYThmWWFldk0rYTZrS3lzL2l4azJwRUFHRmp1VEhlbW5JdWJaSEhCZkMwcXc3UWJ0UGVLUVdhVlJ0clBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "379075ac-56f1-46ac-825a-283b1f466979", "record_id": "flaws_cloudtrail:0000226:379075ac-56f1-46ac-825a-283b1f466979", "row_index": 226, "timestamp": "2019-06-19T12:02:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "379075ac-56f1-46ac-825a-283b1f466979", "eventTime": "2019-06-19T12:02:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaZUM5Nmd6TWRUS1JQb1NQNFlXWnYvbXVOMHV5TDRBdU5HUlhINHpwZ3UrOFhKZ0RvQmhLUjY4NUhkaHdiMWpCb25SZE5lTzV5emtyZUswMHdXQ2NZV3J0alhoYUsrd2JUNm0xY0lLSmpJQkFBenNKT1hBTUttV0trZHdycWJjUmlGMEh4NytnUVVvZkFaYUhQQ3lXay9EV3JRSGNmeEdZZkg3Q3RNbWcxSXU5dGprY3pqYUJUandQdzRNaEZKRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "record_id": "flaws_cloudtrail:0000227:52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "row_index": 227, "timestamp": "2019-06-19T12:02:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "eventTime": "2019-06-19T12:02:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPMW9jT2MzSm9YcE1IVFV3czgxWWVKWUlvVzVYNUtwbmRvSld3T1FmNTNhWlN6WGU3dzJHUXA4Umx5V0N2TldvNmJ4NlUxOXpMa25XcmU3a1EwS3dySlYvTEJXSDVtUzJPamZYV0FvRFdTVFlCK0lwS0NoTFp2RjlSeTYyN2t4ZDlOUWFVWlFiRzdCdFAvTnZvVXhDS1FyUFJ6ZHhLZFk4QVN1aEdqeGpxdGxURlNtcW1iZWJnaTVFbGhuNTN1TXJmVjduM0NRUFoxM3c4enZlU09HZUh0TXNzOU5aZkpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "379075ac-56f1-46ac-825a-283b1f466979", "record_id": "flaws_cloudtrail:0000228:379075ac-56f1-46ac-825a-283b1f466979", "row_index": 228, "timestamp": "2019-06-19T12:02:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "379075ac-56f1-46ac-825a-283b1f466979", "eventTime": "2019-06-19T12:02:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaZUM5Nmd6TWRUS1JQb1NQNFlXWnYvbXVOMHV5TDRBdU5HUlhINHpwZ3UrOFhKZ0RvQmhLUjY4NUhkaHdiMWpCb25SZE5lTzV5emtyZUswMHdXQ2NZV3J0alhoYUsrd2JUNm0xY0lLSmpJQkFBenNKT1hBTUttV0trZHdycWJjUmlGMEh4NytnUVVvZkFaYUhQQ3lXay9EV3JRSGNmeEdZZkg3Q3RNbWcxSXU5dGprY3pqYUJUandQdzRNaEZKRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "record_id": "flaws_cloudtrail:0000229:52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "row_index": 229, "timestamp": "2019-06-19T12:02:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52205c10-de1d-4b3a-8c2e-61ea8d847f4c", "eventTime": "2019-06-19T12:02:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPMW9jT2MzSm9YcE1IVFV3czgxWWVKWUlvVzVYNUtwbmRvSld3T1FmNTNhWlN6WGU3dzJHUXA4Umx5V0N2TldvNmJ4NlUxOXpMa25XcmU3a1EwS3dySlYvTEJXSDVtUzJPamZYV0FvRFdTVFlCK0lwS0NoTFp2RjlSeTYyN2t4ZDlOUWFVWlFiRzdCdFAvTnZvVXhDS1FyUFJ6ZHhLZFk4QVN1aEdqeGpxdGxURlNtcW1iZWJnaTVFbGhuNTN1TXJmVjduM0NRUFoxM3c4enZlU09HZUh0TXNzOU5aZkpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b793862-d49c-49cf-87e1-c160b4f061a0", "record_id": "flaws_cloudtrail:0000230:6b793862-d49c-49cf-87e1-c160b4f061a0", "row_index": 230, "timestamp": "2019-06-19T12:02:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b793862-d49c-49cf-87e1-c160b4f061a0", "eventTime": "2019-06-19T12:02:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOZ21zVURWQmxyMElvZ0N1ZDB5a2pFcjFpbHI1RHNsMGdjcmc4d1NyUGJqa1hvZDB0cHlJVFNaajRlVGVkeEZpSlJIcUtGaTlBMWh2dGY4SEVpaXd0UGZWTjVacS9uU01seEp1OTlBTDVDNlZ4OGtaODZRemFFdmcvTVBIdUt2NnFTWFY2a2NjdkZyRVk1ajIxemJ6U1MxVk1aZWhpdTVtOXh1NG9kVElFdDkwUlpqU09nc3MrOVY2N1dRZEtGaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b793862-d49c-49cf-87e1-c160b4f061a0", "record_id": "flaws_cloudtrail:0000231:6b793862-d49c-49cf-87e1-c160b4f061a0", "row_index": 231, "timestamp": "2019-06-19T12:02:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b793862-d49c-49cf-87e1-c160b4f061a0", "eventTime": "2019-06-19T12:02:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOZ21zVURWQmxyMElvZ0N1ZDB5a2pFcjFpbHI1RHNsMGdjcmc4d1NyUGJqa1hvZDB0cHlJVFNaajRlVGVkeEZpSlJIcUtGaTlBMWh2dGY4SEVpaXd0UGZWTjVacS9uU01seEp1OTlBTDVDNlZ4OGtaODZRemFFdmcvTVBIdUt2NnFTWFY2a2NjdkZyRVk1ajIxemJ6U1MxVk1aZWhpdTVtOXh1NG9kVElFdDkwUlpqU09nc3MrOVY2N1dRZEtGaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "record_id": "flaws_cloudtrail:0000232:072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "row_index": 232, "timestamp": "2019-06-19T12:02:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "eventTime": "2019-06-19T12:02:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZitabjlEeU1iZmdJWUg0ZmJxZ1VoL2NBcGd3YnFpbHlwdzVkd0ZrdXc3UzJGamJ4MFh6S2ljTlBIOGtsNWVlckkzMHJhT0o5VWRjdmRwaTRoNXFxMlFOT2ZWQzBBQzVmV1NqRmltY0dFOExFVVZRVXp6UEdGUWJueGdvNmFadE5jTmxFWXh4empIdW44ODJUaXdKcCtzU1pkektGMjF6Q3ZDRlJhOXEzVFNWK0JzWS90Qm5RMHpxOTVYT09iem5mUUR1aytETi8wZnZNQUU4dWl0ekluTm13QUo1czRzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "record_id": "flaws_cloudtrail:0000233:072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "row_index": 233, "timestamp": "2019-06-19T12:02:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072cc62b-09f1-45b2-b232-ec4fd23f7ae1", "eventTime": "2019-06-19T12:02:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZitabjlEeU1iZmdJWUg0ZmJxZ1VoL2NBcGd3YnFpbHlwdzVkd0ZrdXc3UzJGamJ4MFh6S2ljTlBIOGtsNWVlckkzMHJhT0o5VWRjdmRwaTRoNXFxMlFOT2ZWQzBBQzVmV1NqRmltY0dFOExFVVZRVXp6UEdGUWJueGdvNmFadE5jTmxFWXh4empIdW44ODJUaXdKcCtzU1pkektGMjF6Q3ZDRlJhOXEzVFNWK0JzWS90Qm5RMHpxOTVYT09iem5mUUR1aytETi8wZnZNQUU4dWl0ekluTm13QUo1czRzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45dbe7af-d050-42ee-a2fa-1691a69798b4", "record_id": "flaws_cloudtrail:0000234:45dbe7af-d050-42ee-a2fa-1691a69798b4", "row_index": 234, "timestamp": "2019-06-19T12:02:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45dbe7af-d050-42ee-a2fa-1691a69798b4", "eventTime": "2019-06-19T12:02:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaZi9POVozMU9VMUxweHRRckVwNWdJK2FLc2V4b0Qyd1p4cS9nMlQ2ZzNLbnVvWldYWUZXS2FiUkxOZkRCMGd4ZHBXcGdSSDJydTdRVzZna1NYVEJtSzVmcTV2aVR1K0RVbmttN3ZOcmtXbUdSYXlGbHhjU1RvQWtjTUNQZzRKN0s5Z3FsU1lycmNKRTlHOXEvS3VXWGJFOGhrNVJ1UVcwK3NKTVVTbEZCdnN0S1JkS0xCTWExYnREOTdvQlFmbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45dbe7af-d050-42ee-a2fa-1691a69798b4", "record_id": "flaws_cloudtrail:0000235:45dbe7af-d050-42ee-a2fa-1691a69798b4", "row_index": 235, "timestamp": "2019-06-19T12:02:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45dbe7af-d050-42ee-a2fa-1691a69798b4", "eventTime": "2019-06-19T12:02:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaZi9POVozMU9VMUxweHRRckVwNWdJK2FLc2V4b0Qyd1p4cS9nMlQ2ZzNLbnVvWldYWUZXS2FiUkxOZkRCMGd4ZHBXcGdSSDJydTdRVzZna1NYVEJtSzVmcTV2aVR1K0RVbmttN3ZOcmtXbUdSYXlGbHhjU1RvQWtjTUNQZzRKN0s5Z3FsU1lycmNKRTlHOXEvS3VXWGJFOGhrNVJ1UVcwK3NKTVVTbEZCdnN0S1JkS0xCTWExYnREOTdvQlFmbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "record_id": "flaws_cloudtrail:0000236:2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "row_index": 236, "timestamp": "2019-06-19T12:02:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "eventTime": "2019-06-19T12:02:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFlWWVRvOWRrQ2JnWE8vblBvQUVtWG5waTA5UWluNXpSR3N2bWRzK1ZKRE5nQXZvZUIvMzBIcGhzWkJhemxJWHZzcHdYVnl2TmZ3Yk95YnhLeTkvQmxKZlJKMzRCa2FtNSsxN3d0MExYc0xnZ0NSNE9UWi92VFByd1U4TUlFamF0QXlpeGs0QS8xRnplSkFYQWhJVEwwVVhsUG43ZisyaTl3L1NxOThvSzhmNHVIeWdNZUJCek9HR1pSUytHckRZa2w1NmkxVlh3Q1V6VzgxWGFGLzNzQTR2eHUxa3k0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "record_id": "flaws_cloudtrail:0000237:2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "row_index": 237, "timestamp": "2019-06-19T12:02:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac996e3-b4bc-46cd-abf1-ea0c806e8bab", "eventTime": "2019-06-19T12:02:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFlWWVRvOWRrQ2JnWE8vblBvQUVtWG5waTA5UWluNXpSR3N2bWRzK1ZKRE5nQXZvZUIvMzBIcGhzWkJhemxJWHZzcHdYVnl2TmZ3Yk95YnhLeTkvQmxKZlJKMzRCa2FtNSsxN3d0MExYc0xnZ0NSNE9UWi92VFByd1U4TUlFamF0QXlpeGs0QS8xRnplSkFYQWhJVEwwVVhsUG43ZisyaTl3L1NxOThvSzhmNHVIeWdNZUJCek9HR1pSUytHckRZa2w1NmkxVlh3Q1V6VzgxWGFGLzNzQTR2eHUxa3k0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc429e5-b28f-44e7-9af6-c93c278909a", "record_id": "flaws_cloudtrail:0000238:0dc429e5-b28f-44e7-9af6-c93c278909a", "row_index": 238, "timestamp": "2019-06-19T12:02:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc429e5-b28f-44e7-9af6-c93c278909a", "eventTime": "2019-06-19T12:02:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmWVY5RnB4cncxWHNsakVKWlJsTjNDSHh3NGpqUmhQY1A1RGI1ZStvd1Z5SEFzK3MyNjBweGpJN3lPT1NqeE1PM2d1VFByYlo5K1NVQS91K2RWUEpLOGh6R0dHZ01wWGhpSUhMenR6dmlsU244TG1qWWZ5M1BLaVRsLzh6bGhDRGtVdnlQaytMUXpabGpBUjFOWEMycjN3MHJqSTdFOW1QRHlaZ1pYZDJZckFCbWRvd0x1KzRtcmQ5M0I2RStXRVNCd1p5ODYrc0dUMGVsQ2hnMHJEUXhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc429e5-b28f-44e7-9af6-c93c278909a", "record_id": "flaws_cloudtrail:0000239:0dc429e5-b28f-44e7-9af6-c93c278909a", "row_index": 239, "timestamp": "2019-06-19T12:02:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc429e5-b28f-44e7-9af6-c93c278909a", "eventTime": "2019-06-19T12:02:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmWVY5RnB4cncxWHNsakVKWlJsTjNDSHh3NGpqUmhQY1A1RGI1ZStvd1Z5SEFzK3MyNjBweGpJN3lPT1NqeE1PM2d1VFByYlo5K1NVQS91K2RWUEpLOGh6R0dHZ01wWGhpSUhMenR6dmlsU244TG1qWWZ5M1BLaVRsLzh6bGhDRGtVdnlQaytMUXpabGpBUjFOWEMycjN3MHJqSTdFOW1QRHlaZ1pYZDJZckFCbWRvd0x1KzRtcmQ5M0I2RStXRVNCd1p5ODYrc0dUMGVsQ2hnMHJEUXhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "822189f68-9309-4286-aa3d-a7e6a0d92f45", "record_id": "flaws_cloudtrail:0000240:822189f68-9309-4286-aa3d-a7e6a0d92f45", "row_index": 240, "timestamp": "2019-06-19T12:02:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "822189f68-9309-4286-aa3d-a7e6a0d92f45", "eventTime": "2019-06-19T12:02:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bHI1OU9CSktXME5MTS9wYzNmcDlZWjFJYVlreGZDWjdLa0hZMVQ3b1NzM2wrZXB1R1BtZ0wzbE1lNnY5K0JTYmg5YlgwKytFVHM1c0hBcWxHYk1QbUEyaXRhVGtpVVNUKzBxN2Vrd1ZzT01BZHhydHZnNlNUOFoyZkg5TTBNYncrWHlmS1JpNnJWdmNpYy9qRlVMVzBHcjdCMTNoY2JPeFR3SlhGbnlJT2MvV0hqb2o5dnk5SytYaWs2SThRRzlPcGV2bTRwK2dkd0R1V1Vlb0M4SExpU2dCeU04VXNRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "822189f68-9309-4286-aa3d-a7e6a0d92f45", "record_id": "flaws_cloudtrail:0000241:822189f68-9309-4286-aa3d-a7e6a0d92f45", "row_index": 241, "timestamp": "2019-06-19T12:02:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "822189f68-9309-4286-aa3d-a7e6a0d92f45", "eventTime": "2019-06-19T12:02:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bHI1OU9CSktXME5MTS9wYzNmcDlZWjFJYVlreGZDWjdLa0hZMVQ3b1NzM2wrZXB1R1BtZ0wzbE1lNnY5K0JTYmg5YlgwKytFVHM1c0hBcWxHYk1QbUEyaXRhVGtpVVNUKzBxN2Vrd1ZzT01BZHhydHZnNlNUOFoyZkg5TTBNYncrWHlmS1JpNnJWdmNpYy9qRlVMVzBHcjdCMTNoY2JPeFR3SlhGbnlJT2MvV0hqb2o5dnk5SytYaWs2SThRRzlPcGV2bTRwK2dkd0R1V1Vlb0M4SExpU2dCeU04VXNRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "701ea865-8cd3-4a28-b535-6234fd68c6b8", "record_id": "flaws_cloudtrail:0000242:701ea865-8cd3-4a28-b535-6234fd68c6b8", "row_index": 242, "timestamp": "2019-06-19T12:02:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "701ea865-8cd3-4a28-b535-6234fd68c6b8", "eventTime": "2019-06-19T12:02:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpb2ZUeUo4bjJNTFdsM2ZBbnpqSjVtNkRyZ3NNc3hObkZ0VTJBbHJYMTMrdGxUc3N4M3l6OFBwcmpHUjZWc0pIS0RYNnM1VVRGYldWZDNPNklVZG56akpQODVCRlJLVmtscURqMFpiRjV5L3A3aDZaV1dGZVRXVllaRkgrZFY4Yk9rR3VqaUJxUGVmKytaVnRSYVE2WnlZS3hNclgvMjU2UzEvMFR2MnU1c0Rta3VVQy94ZGFoK0psVklMNzJOTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "701ea865-8cd3-4a28-b535-6234fd68c6b8", "record_id": "flaws_cloudtrail:0000243:701ea865-8cd3-4a28-b535-6234fd68c6b8", "row_index": 243, "timestamp": "2019-06-19T12:02:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "701ea865-8cd3-4a28-b535-6234fd68c6b8", "eventTime": "2019-06-19T12:02:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpb2ZUeUo4bjJNTFdsM2ZBbnpqSjVtNkRyZ3NNc3hObkZ0VTJBbHJYMTMrdGxUc3N4M3l6OFBwcmpHUjZWc0pIS0RYNnM1VVRGYldWZDNPNklVZG56akpQODVCRlJLVmtscURqMFpiRjV5L3A3aDZaV1dGZVRXVllaRkgrZFY4Yk9rR3VqaUJxUGVmKytaVnRSYVE2WnlZS3hNclgvMjU2UzEvMFR2MnU1c0Rta3VVQy94ZGFoK0psVklMNzJOTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a876cf98-835f-47bd-83de-218568dd69d8", "record_id": "flaws_cloudtrail:0000244:a876cf98-835f-47bd-83de-218568dd69d8", "row_index": 244, "timestamp": "2019-06-19T12:03:28Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a876cf98-835f-47bd-83de-218568dd69d8", "eventTime": "2019-06-19T12:03:28Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a876cf98-835f-47bd-83de-218568dd69d8", "record_id": "flaws_cloudtrail:0000245:a876cf98-835f-47bd-83de-218568dd69d8", "row_index": 245, "timestamp": "2019-06-19T12:03:28Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a876cf98-835f-47bd-83de-218568dd69d8", "eventTime": "2019-06-19T12:03:28Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a800dd-0492-420c-ac0f-fcd98f3150c7", "record_id": "flaws_cloudtrail:0000246:e9a800dd-0492-420c-ac0f-fcd98f3150c7", "row_index": 246, "timestamp": "2019-06-19T12:04:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a800dd-0492-420c-ac0f-fcd98f3150c7", "eventTime": "2019-06-19T12:04:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a800dd-0492-420c-ac0f-fcd98f3150c7", "record_id": "flaws_cloudtrail:0000247:e9a800dd-0492-420c-ac0f-fcd98f3150c7", "row_index": 247, "timestamp": "2019-06-19T12:04:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a800dd-0492-420c-ac0f-fcd98f3150c7", "eventTime": "2019-06-19T12:04:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d58b6f-90d1-472e-aa65-046c6be114cf", "record_id": "flaws_cloudtrail:0000248:05d58b6f-90d1-472e-aa65-046c6be114cf", "row_index": 248, "timestamp": "2019-06-19T12:07:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d58b6f-90d1-472e-aa65-046c6be114cf", "eventTime": "2019-06-19T12:07:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d58b6f-90d1-472e-aa65-046c6be114cf", "record_id": "flaws_cloudtrail:0000249:05d58b6f-90d1-472e-aa65-046c6be114cf", "row_index": 249, "timestamp": "2019-06-19T12:07:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d58b6f-90d1-472e-aa65-046c6be114cf", "eventTime": "2019-06-19T12:07:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc44c83-d51e-4745-a386-6bd08b8c7a90", "record_id": "flaws_cloudtrail:0000250:2fc44c83-d51e-4745-a386-6bd08b8c7a90", "row_index": 250, "timestamp": "2019-06-19T12:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc44c83-d51e-4745-a386-6bd08b8c7a90", "eventTime": "2019-06-19T12:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUS8QF0UY0X8KOFPS", "expiration": "Jun 19, 2019 6:36:18 PM", "sessionToken": "AgoJb3JpZ2luX2VjED0aCXVzLXdlc3QtMiJIMEYCIQDjheV/mRW5tM5S4bvEQR1ZTTHts2n1rt0XMvQBr429IAIhAPI4OTHSJMv+yRLYP0xntB5twtoOlA2jnnf2qbRTKBJ0KtoDCHYQABoMOTc1NDI2MjYyMDI5Igz5I6UgrQXPqq3NVUUqtwPtsaV8dh9QJRECTYRWTI3XNZV65qMBcPANTVH0Rlr478ZiqTkwoC/84z1XY12vyZpdmR2EbSz2ql3WkgLziFjMyjn5F7W5HHxb66PlyNFHr2gQs2zkLbdoigejBqzEH7ZFOQq0L09iy+uLdsv/mjCLW2jrMNq1zEhTc+o9/iqveuSJf77TNzqkg0O0UOdXt9UhkU4teRCRbgJAw8HZmrSzW0URgDlm8f2tBkE6BMKdWFm/LwGz5sWc6KJMRYO4bgrTBGQLQLueKUGkUA/j59GIyZN5BF/Vn2FCGxdsziJkAir1iQUN8XuYQBr9Zr/rodAKr9hOavQqGwtSeDOOWTqVkU91+gaI/V3KeBs7F4/NG7YGFUfn+ciLKWi3dJZGI+qwA59LWk+pYSuLyvp87tX1+rOqfvjATV0nyZf3DImhmDUyjvRgZBw5lM/fop+uijmtGivVVhzV22b7HFew5WqYTyF8+et2OLKsE1hXUocszjpadANcHPLApS89AUp55w64DrpPltTRILnYmFtaCX8A3OZSqvnFqg1UHU0Kdy/ohCrd1xsUsHb+Z78M9uzwFJVt+qEYBIw2MI7UqOgFOrMBQhCBeRicPSV3asJpWH6TPEkK+oE8XDO6Eorx0qeEnFykbw/B7WGsXRlQrYLyur4zNXinVmJOHt79b/VkaoTHux82MTqnoYQjUQWBxemhnIdbq7DpqzIxxH6PvV010YPoXKQLaBwztcX/JmOuaXWJmfhNTpR+MIiqEASSJUDxEMnviiIYLIGCNGxCViRQ7f/+085zk23YovvGg6KHuaseRwQ5regwpakLrtO5jMQP13Gf17I="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc44c83-d51e-4745-a386-6bd08b8c7a90", "record_id": "flaws_cloudtrail:0000251:2fc44c83-d51e-4745-a386-6bd08b8c7a90", "row_index": 251, "timestamp": "2019-06-19T12:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc44c83-d51e-4745-a386-6bd08b8c7a90", "eventTime": "2019-06-19T12:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUS8QF0UY0X8KOFPS", "expiration": "Jun 19, 2019 6:36:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef19738-e658-46dc-800f-bae5aa116191", "record_id": "flaws_cloudtrail:0000252:ef19738-e658-46dc-800f-bae5aa116191", "row_index": 252, "timestamp": "2019-06-19T12:28:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef19738-e658-46dc-800f-bae5aa116191", "eventTime": "2019-06-19T12:28:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1MSR2QINWRW2YUJS", "expiration": "Jun 19, 2019 1:28:26 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef19738-e658-46dc-800f-bae5aa116191", "record_id": "flaws_cloudtrail:0000253:ef19738-e658-46dc-800f-bae5aa116191", "row_index": 253, "timestamp": "2019-06-19T12:28:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef19738-e658-46dc-800f-bae5aa116191", "eventTime": "2019-06-19T12:28:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1MSR2QINWRW2YUJS", "expiration": "Jun 19, 2019 1:28:26 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "573e8756-4fa2-4671-81c3-fd5ffaaa3045", "record_id": "flaws_cloudtrail:0000254:573e8756-4fa2-4671-81c3-fd5ffaaa3045", "row_index": 254, "timestamp": "2019-06-19T12:30:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "573e8756-4fa2-4671-81c3-fd5ffaaa3045", "eventTime": "2019-06-19T12:30:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "573e8756-4fa2-4671-81c3-fd5ffaaa3045", "record_id": "flaws_cloudtrail:0000255:573e8756-4fa2-4671-81c3-fd5ffaaa3045", "row_index": 255, "timestamp": "2019-06-19T12:30:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "573e8756-4fa2-4671-81c3-fd5ffaaa3045", "eventTime": "2019-06-19T12:30:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a538b51-98c0-40d8-9fb4-d221d9836a20", "record_id": "flaws_cloudtrail:0000256:5a538b51-98c0-40d8-9fb4-d221d9836a20", "row_index": 256, "timestamp": "2019-06-19T12:30:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a538b51-98c0-40d8-9fb4-d221d9836a20", "eventTime": "2019-06-19T12:30:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a538b51-98c0-40d8-9fb4-d221d9836a20", "record_id": "flaws_cloudtrail:0000257:5a538b51-98c0-40d8-9fb4-d221d9836a20", "row_index": 257, "timestamp": "2019-06-19T12:30:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a538b51-98c0-40d8-9fb4-d221d9836a20", "eventTime": "2019-06-19T12:30:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c185b9c-4722-43d5-a81a-ecbd5f614a26", "record_id": "flaws_cloudtrail:0000258:2c185b9c-4722-43d5-a81a-ecbd5f614a26", "row_index": 258, "timestamp": "2019-06-19T13:05:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c185b9c-4722-43d5-a81a-ecbd5f614a26", "eventTime": "2019-06-19T13:05:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c185b9c-4722-43d5-a81a-ecbd5f614a26", "record_id": "flaws_cloudtrail:0000259:2c185b9c-4722-43d5-a81a-ecbd5f614a26", "row_index": 259, "timestamp": "2019-06-19T13:05:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c185b9c-4722-43d5-a81a-ecbd5f614a26", "eventTime": "2019-06-19T13:05:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84ccd926-8c1f-4fa3-9859-22715a683d7", "record_id": "flaws_cloudtrail:0000260:84ccd926-8c1f-4fa3-9859-22715a683d7", "row_index": 260, "timestamp": "2019-06-19T13:06:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84ccd926-8c1f-4fa3-9859-22715a683d7", "eventTime": "2019-06-19T13:06:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84ccd926-8c1f-4fa3-9859-22715a683d7", "record_id": "flaws_cloudtrail:0000261:84ccd926-8c1f-4fa3-9859-22715a683d7", "row_index": 261, "timestamp": "2019-06-19T13:06:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84ccd926-8c1f-4fa3-9859-22715a683d7", "eventTime": "2019-06-19T13:06:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "record_id": "flaws_cloudtrail:0000262:7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "row_index": 262, "timestamp": "2019-06-19T13:08:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "eventTime": "2019-06-19T13:08:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "record_id": "flaws_cloudtrail:0000263:7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "row_index": 263, "timestamp": "2019-06-19T13:08:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c76ac00-c3bd-4520-a4af-cb6f81433bc0", "eventTime": "2019-06-19T13:08:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f389c092-38f8-48a1-b97d-ab1b3838df1e", "record_id": "flaws_cloudtrail:0000264:f389c092-38f8-48a1-b97d-ab1b3838df1e", "row_index": 264, "timestamp": "2019-06-19T13:09:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f389c092-38f8-48a1-b97d-ab1b3838df1e", "eventTime": "2019-06-19T13:09:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f389c092-38f8-48a1-b97d-ab1b3838df1e", "record_id": "flaws_cloudtrail:0000265:f389c092-38f8-48a1-b97d-ab1b3838df1e", "row_index": 265, "timestamp": "2019-06-19T13:09:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f389c092-38f8-48a1-b97d-ab1b3838df1e", "eventTime": "2019-06-19T13:09:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff5c8f8-fb71-430b-8032-f6286d96ea30", "record_id": "flaws_cloudtrail:0000266:9ff5c8f8-fb71-430b-8032-f6286d96ea30", "row_index": 266, "timestamp": "2019-06-19T13:09:23Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff5c8f8-fb71-430b-8032-f6286d96ea30", "eventTime": "2019-06-19T13:09:23Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff5c8f8-fb71-430b-8032-f6286d96ea30", "record_id": "flaws_cloudtrail:0000267:9ff5c8f8-fb71-430b-8032-f6286d96ea30", "row_index": 267, "timestamp": "2019-06-19T13:09:23Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff5c8f8-fb71-430b-8032-f6286d96ea30", "eventTime": "2019-06-19T13:09:23Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f008383d-905c-48fe-8852-4df773deb1dc", "record_id": "flaws_cloudtrail:0000268:7f008383d-905c-48fe-8852-4df773deb1dc", "row_index": 268, "timestamp": "2019-06-19T13:09:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f008383d-905c-48fe-8852-4df773deb1dc", "eventTime": "2019-06-19T13:09:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f008383d-905c-48fe-8852-4df773deb1dc", "record_id": "flaws_cloudtrail:0000269:7f008383d-905c-48fe-8852-4df773deb1dc", "row_index": 269, "timestamp": "2019-06-19T13:09:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f008383d-905c-48fe-8852-4df773deb1dc", "eventTime": "2019-06-19T13:09:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "record_id": "flaws_cloudtrail:0000270:99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "row_index": 270, "timestamp": "2019-06-19T13:09:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "eventTime": "2019-06-19T13:09:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjb0NBZjQwalcvM0RjS2JZNjFiaG81eDRQU1RRd211MWdCVy9IZnR3eGwxUllteGROZnk5TzdXQ05XSzFwbDZMN3FtU2NzZWNQKytKeEZ0MWpRWERHdEZVeHIwRm9GQmNVSWFERENZK2t0RDRLSzduckNXTUx1TUNqQUEyQThCOVNaMithbmRBNUZBZ0IwNnlRT2YzZlAzbXZKeHdhVThoTkhjZlkvUDByRjZPRk1JbW5BVG54dENDSUd6WVFsSHM5cjZmVXZWbWFCWEZmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "record_id": "flaws_cloudtrail:0000271:99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "row_index": 271, "timestamp": "2019-06-19T13:09:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99ab9407-e7b3-45d4-98d8-930fea4ea2d2", "eventTime": "2019-06-19T13:09:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjb0NBZjQwalcvM0RjS2JZNjFiaG81eDRQU1RRd211MWdCVy9IZnR3eGwxUllteGROZnk5TzdXQ05XSzFwbDZMN3FtU2NzZWNQKytKeEZ0MWpRWERHdEZVeHIwRm9GQmNVSWFERENZK2t0RDRLSzduckNXTUx1TUNqQUEyQThCOVNaMithbmRBNUZBZ0IwNnlRT2YzZlAzbXZKeHdhVThoTkhjZlkvUDByRjZPRk1JbW5BVG54dENDSUd6WVFsSHM5cjZmVXZWbWFCWEZmUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "155f10b9-4e17-4592-be25-ed4754a413ee", "record_id": "flaws_cloudtrail:0000272:155f10b9-4e17-4592-be25-ed4754a413ee", "row_index": 272, "timestamp": "2019-06-19T13:09:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "155f10b9-4e17-4592-be25-ed4754a413ee", "eventTime": "2019-06-19T13:09:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpS1ZrVjBEY0FZWWRSdFJQaE1nUTMwakNjQkZ2OVFBZ1VkaHdmQlBvdXk0dlNYR0F3MmhVU3BDKzZTOE1idlpnRXhnamNtdXJVV1BYdDJJejlQa3lkeFpZWXM3L1ZHYUpNL0ttQW94ZTBiUVdDOTNTMG5DbDFaM281YTZ5dEVQM3VkSGVIQjFrMDNicFlZeFRFVUhNK2ZZZ01xdVVKZjk4R2NtRFErdHMzaktQOHFQQjE3N3ozU1hBdjBMVTg5SzRxSXcyMnlsUUJQMkdnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "155f10b9-4e17-4592-be25-ed4754a413ee", "record_id": "flaws_cloudtrail:0000273:155f10b9-4e17-4592-be25-ed4754a413ee", "row_index": 273, "timestamp": "2019-06-19T13:09:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "155f10b9-4e17-4592-be25-ed4754a413ee", "eventTime": "2019-06-19T13:09:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpS1ZrVjBEY0FZWWRSdFJQaE1nUTMwakNjQkZ2OVFBZ1VkaHdmQlBvdXk0dlNYR0F3MmhVU3BDKzZTOE1idlpnRXhnamNtdXJVV1BYdDJJejlQa3lkeFpZWXM3L1ZHYUpNL0ttQW94ZTBiUVdDOTNTMG5DbDFaM281YTZ5dEVQM3VkSGVIQjFrMDNicFlZeFRFVUhNK2ZZZ01xdVVKZjk4R2NtRFErdHMzaktQOHFQQjE3N3ozU1hBdjBMVTg5SzRxSXcyMnlsUUJQMkdnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934cf9cf-dd6c-458f-a272-2cc303310e2", "record_id": "flaws_cloudtrail:0000274:934cf9cf-dd6c-458f-a272-2cc303310e2", "row_index": 274, "timestamp": "2019-06-19T13:09:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934cf9cf-dd6c-458f-a272-2cc303310e2", "eventTime": "2019-06-19T13:09:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkTkc4cVZXU2NtWXc4ZmFnbUg4K0lYOGtEcTMyaVQ4QkVMYkNZUk1pU1pwZTlwaDN5VzBXUFJUZG5CcE9qRmQyZGJpeWRPY3ZMa251dmNobDJPaSs3VHgrLzR2Z0xwMEFteTVJb0hRVUhyamlsWFg2LzEyOEZJWDRCbko0bVlqTXAvSDJWQUpzVXppeHhaTEJ4TngwSGVIVDdLSUQyVHV4Q3h1d1ZSZkFFeHpLbEJ4bTIrcVJmc3k5TGZ5MWZpdU9Wby9lTjlxbGMvVEhMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934cf9cf-dd6c-458f-a272-2cc303310e2", "record_id": "flaws_cloudtrail:0000275:934cf9cf-dd6c-458f-a272-2cc303310e2", "row_index": 275, "timestamp": "2019-06-19T13:09:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934cf9cf-dd6c-458f-a272-2cc303310e2", "eventTime": "2019-06-19T13:09:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkTkc4cVZXU2NtWXc4ZmFnbUg4K0lYOGtEcTMyaVQ4QkVMYkNZUk1pU1pwZTlwaDN5VzBXUFJUZG5CcE9qRmQyZGJpeWRPY3ZMa251dmNobDJPaSs3VHgrLzR2Z0xwMEFteTVJb0hRVUhyamlsWFg2LzEyOEZJWDRCbko0bVlqTXAvSDJWQUpzVXppeHhaTEJ4TngwSGVIVDdLSUQyVHV4Q3h1d1ZSZkFFeHpLbEJ4bTIrcVJmc3k5TGZ5MWZpdU9Wby9lTjlxbGMvVEhMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30843-25e2-491e-ac8d-dc676c6cba51", "record_id": "flaws_cloudtrail:0000276:e30843-25e2-491e-ac8d-dc676c6cba51", "row_index": 276, "timestamp": "2019-06-19T13:09:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30843-25e2-491e-ac8d-dc676c6cba51", "eventTime": "2019-06-19T13:09:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnMThrcmFHVFFNK2xGSWRsNWY0ZndaZDluOHRGaC9VcWZ0eU11ejJEQit3bFNrTnduRHJVZlo3MW9WOXY4SWJlTjNxSFFlbElkMUwxYTBhbDQyblV0SnhiSUxuSUdkT2txdWs2eU8wWHdiWHRqU1czMm1uRlVqSFFvcGlpc0o5TVpudFlpcW5CRFJRbDNTeThtZnRjMnFUWDFFMXdtQlRlQTRUTWFJK2NzT2FYdmJyWEdFZlBpMzh5R0RsRWFwaUsrUHh1dHlvL0xCcDFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30843-25e2-491e-ac8d-dc676c6cba51", "record_id": "flaws_cloudtrail:0000277:e30843-25e2-491e-ac8d-dc676c6cba51", "row_index": 277, "timestamp": "2019-06-19T13:09:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30843-25e2-491e-ac8d-dc676c6cba51", "eventTime": "2019-06-19T13:09:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnMThrcmFHVFFNK2xGSWRsNWY0ZndaZDluOHRGaC9VcWZ0eU11ejJEQit3bFNrTnduRHJVZlo3MW9WOXY4SWJlTjNxSFFlbElkMUwxYTBhbDQyblV0SnhiSUxuSUdkT2txdWs2eU8wWHdiWHRqU1czMm1uRlVqSFFvcGlpc0o5TVpudFlpcW5CRFJRbDNTeThtZnRjMnFUWDFFMXdtQlRlQTRUTWFJK2NzT2FYdmJyWEdFZlBpMzh5R0RsRWFwaUsrUHh1dHlvL0xCcDFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23333c0-bef4-43d6-9e10-16c3ccf54dc9", "record_id": "flaws_cloudtrail:0000278:23333c0-bef4-43d6-9e10-16c3ccf54dc9", "row_index": 278, "timestamp": "2019-06-19T13:09:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23333c0-bef4-43d6-9e10-16c3ccf54dc9", "eventTime": "2019-06-19T13:09:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjZkpOUldCQldsZGpKZ0VTM1NiRElyRUxaNE9TWTE2ekl6bVNxWXNhbldlbnd6NEs2d1ZkVVdKN3VnbFNxcHV0OVRRK0NwYlhEdGZQUzBaNVl2OC8xbVB0UkJYUGQ0TGR6RngyVy8vYXdRcTV5OUNKbGdtZDBiRFlOaUFYRzZJcm1oWVg5REdNWU1RL1ZlbnB3QUlBc3d2RkY0V01qMlBGNlYzbEJyVlpUcnBTZU5BaVBnaitWWUxuS3pJd2FRQXRpKzZnWEJreWNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23333c0-bef4-43d6-9e10-16c3ccf54dc9", "record_id": "flaws_cloudtrail:0000279:23333c0-bef4-43d6-9e10-16c3ccf54dc9", "row_index": 279, "timestamp": "2019-06-19T13:09:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23333c0-bef4-43d6-9e10-16c3ccf54dc9", "eventTime": "2019-06-19T13:09:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjZkpOUldCQldsZGpKZ0VTM1NiRElyRUxaNE9TWTE2ekl6bVNxWXNhbldlbnd6NEs2d1ZkVVdKN3VnbFNxcHV0OVRRK0NwYlhEdGZQUzBaNVl2OC8xbVB0UkJYUGQ0TGR6RngyVy8vYXdRcTV5OUNKbGdtZDBiRFlOaUFYRzZJcm1oWVg5REdNWU1RL1ZlbnB3QUlBc3d2RkY0V01qMlBGNlYzbEJyVlpUcnBTZU5BaVBnaitWWUxuS3pJd2FRQXRpKzZnWEJreWNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "556948e4-0f16-484d-8a8e-be277d0911bb", "record_id": "flaws_cloudtrail:0000280:556948e4-0f16-484d-8a8e-be277d0911bb", "row_index": 280, "timestamp": "2019-06-19T13:09:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "556948e4-0f16-484d-8a8e-be277d0911bb", "eventTime": "2019-06-19T13:09:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0RlRPU0EvbEZCbS80VGRQaDZzM2llSzMydEhSbk5iN3l6a2VFZUh1SEZVS3BKdExwMWluOTkvZnNLSzYzRmVPb2hEc0RXR0s5STNrdTVFMjFIVlJnSVAwem10TExkWnk3RkZmM2xVdm0zdFA0b1A1UlZmTWozZGlQZVBFUGpYUWRCaFVoaGd3UkF3aE41YVo5cFBVSFloMmtSYVBHSThNZHZLVEFqRlRIWnNsaVRtNjhxblVmVDdHQmdIWUJIYlJNOWJXR1lmalZobmlRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "556948e4-0f16-484d-8a8e-be277d0911bb", "record_id": "flaws_cloudtrail:0000281:556948e4-0f16-484d-8a8e-be277d0911bb", "row_index": 281, "timestamp": "2019-06-19T13:09:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "556948e4-0f16-484d-8a8e-be277d0911bb", "eventTime": "2019-06-19T13:09:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0RlRPU0EvbEZCbS80VGRQaDZzM2llSzMydEhSbk5iN3l6a2VFZUh1SEZVS3BKdExwMWluOTkvZnNLSzYzRmVPb2hEc0RXR0s5STNrdTVFMjFIVlJnSVAwem10TExkWnk3RkZmM2xVdm0zdFA0b1A1UlZmTWozZGlQZVBFUGpYUWRCaFVoaGd3UkF3aE41YVo5cFBVSFloMmtSYVBHSThNZHZLVEFqRlRIWnNsaVRtNjhxblVmVDdHQmdIWUJIYlJNOWJXR1lmalZobmlRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "record_id": "flaws_cloudtrail:0000282:757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "row_index": 282, "timestamp": "2019-06-19T13:09:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "eventTime": "2019-06-19T13:09:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyK0x3VUh5MytZZHlOQzkzYTgrVFhrT1ZpUytTb2E5WlRoZ29oOHVYNW0xRHJ4aTBJb3IxYjZEalFEbWlpa1lKZGF3M3JFVWNZNWNMdmlUSkw1STRETjUrQnB1MklkN0R4ODhEV2NXUXlva3BhSmNoWGpmMjZJbHJHR3FiVXpZZlpQUHRGYnhuSmlWQXlFdy9mV3FJRy9zUjlMOTZBMG50dWRSUmtMODRHRGV6THMzY0l3V25EUUttb1RSanZZRTQ2ZEl4YThndEtjdnhJZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "record_id": "flaws_cloudtrail:0000283:757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "row_index": 283, "timestamp": "2019-06-19T13:09:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757aa7a2-7018-42ae-b1e2-699625a3b0f6c", "eventTime": "2019-06-19T13:09:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyK0x3VUh5MytZZHlOQzkzYTgrVFhrT1ZpUytTb2E5WlRoZ29oOHVYNW0xRHJ4aTBJb3IxYjZEalFEbWlpa1lKZGF3M3JFVWNZNWNMdmlUSkw1STRETjUrQnB1MklkN0R4ODhEV2NXUXlva3BhSmNoWGpmMjZJbHJHR3FiVXpZZlpQUHRGYnhuSmlWQXlFdy9mV3FJRy9zUjlMOTZBMG50dWRSUmtMODRHRGV6THMzY0l3V25EUUttb1RSanZZRTQ2ZEl4YThndEtjdnhJZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f0737b9-2911-4b65-bf9a-63a871668c3b", "record_id": "flaws_cloudtrail:0000284:7f0737b9-2911-4b65-bf9a-63a871668c3b", "row_index": 284, "timestamp": "2019-06-19T13:09:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f0737b9-2911-4b65-bf9a-63a871668c3b", "eventTime": "2019-06-19T13:09:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOMG9pN2pmZlVUR2x1WmhrNWpSWHVjcW9QR282TEtRci9LQnVTUmRBRDNYWjhCMytwTVJxZUpWRmhEUjF2K3I4a3E2QVY5T1FYc2ExRTRGYVZVZFJDb25PUk9Qd052bXlWaW1VMnFTamZxQ1FIZmR2UTNjQjhyU1dGRWI4VGZSMlpYbndzRksveVY4WXExY25xMUVRUE9qVFFIcWRqMTZqS1hURTJxdXJEVGlkMG4wMW1oL2JuM3VDb09FR1cycjNMYm85eldxR1I5VytvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f0737b9-2911-4b65-bf9a-63a871668c3b", "record_id": "flaws_cloudtrail:0000285:7f0737b9-2911-4b65-bf9a-63a871668c3b", "row_index": 285, "timestamp": "2019-06-19T13:09:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f0737b9-2911-4b65-bf9a-63a871668c3b", "eventTime": "2019-06-19T13:09:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOMG9pN2pmZlVUR2x1WmhrNWpSWHVjcW9QR282TEtRci9LQnVTUmRBRDNYWjhCMytwTVJxZUpWRmhEUjF2K3I4a3E2QVY5T1FYc2ExRTRGYVZVZFJDb25PUk9Qd052bXlWaW1VMnFTamZxQ1FIZmR2UTNjQjhyU1dGRWI4VGZSMlpYbndzRksveVY4WXExY25xMUVRUE9qVFFIcWRqMTZqS1hURTJxdXJEVGlkMG4wMW1oL2JuM3VDb09FR1cycjNMYm85eldxR1I5VytvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a081d09-9d1c-4176-be37-2306f85bb3d4", "record_id": "flaws_cloudtrail:0000286:0a081d09-9d1c-4176-be37-2306f85bb3d4", "row_index": 286, "timestamp": "2019-06-19T13:09:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a081d09-9d1c-4176-be37-2306f85bb3d4", "eventTime": "2019-06-19T13:09:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSYUpYRUsrb21OWk9LZ093eXJOczU4N3RPK2VNb1dXNDZsT0JTVWpQZ1NBMFR5MHZiaXNTY01kKzF6Tk5nS3RFdXZSTVg5LzZHbGlhdlQrRnUza1pVM3Y0RUs2RHZPRndNd3NpdUJtVjEyZXN6QmlTVTBpZUl5Z3FxUTBGbDFpVmxIY1ZhZHdoVGsxL1pWR3IzNkxKNWlVaUd4Z0o5OTJhWHVkc1pCTHU0K2l6d3FIOFdYc2RMalJzWldkOVU0ZTdVWHp2ZS9FeG5HWEpwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a081d09-9d1c-4176-be37-2306f85bb3d4", "record_id": "flaws_cloudtrail:0000287:0a081d09-9d1c-4176-be37-2306f85bb3d4", "row_index": 287, "timestamp": "2019-06-19T13:09:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a081d09-9d1c-4176-be37-2306f85bb3d4", "eventTime": "2019-06-19T13:09:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSYUpYRUsrb21OWk9LZ093eXJOczU4N3RPK2VNb1dXNDZsT0JTVWpQZ1NBMFR5MHZiaXNTY01kKzF6Tk5nS3RFdXZSTVg5LzZHbGlhdlQrRnUza1pVM3Y0RUs2RHZPRndNd3NpdUJtVjEyZXN6QmlTVTBpZUl5Z3FxUTBGbDFpVmxIY1ZhZHdoVGsxL1pWR3IzNkxKNWlVaUd4Z0o5OTJhWHVkc1pCTHU0K2l6d3FIOFdYc2RMalJzWldkOVU0ZTdVWHp2ZS9FeG5HWEpwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "record_id": "flaws_cloudtrail:0000288:3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "row_index": 288, "timestamp": "2019-06-19T13:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "eventTime": "2019-06-19T13:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIeGJ6TXpSSHB2V3BEaE5aQ0l2Z2NRdUpILzIwSlQwTVBFOVRNdTNwUVZtZ0RNajUwZnVNT28xZDJoZ1p1alVwSEJac2c2L3FBY3d6MmRBVis4ZEhoRTZJOHNaUldoNGNMTXVZc0M2d1AwYmdLZjBlaWVpTFdZSkxUdjB0NDRsMWlMclJqV3c4M04vRldDUCtkRnc4T0RQVUtwbFkvQ0JPd3JSSGFxUjQrck53TTlkZU0wTEcyV0M5MXFZVTdrUDhvcVBDUGRtckVRNUx6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "record_id": "flaws_cloudtrail:0000289:3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "row_index": 289, "timestamp": "2019-06-19T13:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe69bbb-99b8-49a9-8d7e-f6dcb3f0d9f9", "eventTime": "2019-06-19T13:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIeGJ6TXpSSHB2V3BEaE5aQ0l2Z2NRdUpILzIwSlQwTVBFOVRNdTNwUVZtZ0RNajUwZnVNT28xZDJoZ1p1alVwSEJac2c2L3FBY3d6MmRBVis4ZEhoRTZJOHNaUldoNGNMTXVZc0M2d1AwYmdLZjBlaWVpTFdZSkxUdjB0NDRsMWlMclJqV3c4M04vRldDUCtkRnc4T0RQVUtwbFkvQ0JPd3JSSGFxUjQrck53TTlkZU0wTEcyV0M5MXFZVTdrUDhvcVBDUGRtckVRNUx6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "record_id": "flaws_cloudtrail:0000290:39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "row_index": 290, "timestamp": "2019-06-19T13:09:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "eventTime": "2019-06-19T13:09:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJadFFRd093VjhPOEVWbUpXbmVHY3FDd3BPbFVkV25RNjlNNkFjQ3RVNFdLOCtzNkZoTTZoYkp6ejVmUXQwdzNZOUFObUhaY013YW9LcmJrN3lVanJtR1VJSlNZMzJrc1RUSlJ4SC9oOU5PRTByM1gvYkNTaGs0d2VDMDRDamY0ZVU4N0EvdmhFZjl6RnNRMjVtZGV5ejhEZllPLzRiMFpBcGNaeHZacXNyaG1ZODl3QlExNUdtTzJ5SFcrcEZOdjFJdSs1cGhzMXQrMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "record_id": "flaws_cloudtrail:0000291:39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "row_index": 291, "timestamp": "2019-06-19T13:09:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d4f9ed-bf4b-47b0-939d-3ebaf7a50615", "eventTime": "2019-06-19T13:09:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJadFFRd093VjhPOEVWbUpXbmVHY3FDd3BPbFVkV25RNjlNNkFjQ3RVNFdLOCtzNkZoTTZoYkp6ejVmUXQwdzNZOUFObUhaY013YW9LcmJrN3lVanJtR1VJSlNZMzJrc1RUSlJ4SC9oOU5PRTByM1gvYkNTaGs0d2VDMDRDamY0ZVU4N0EvdmhFZjl6RnNRMjVtZGV5ejhEZllPLzRiMFpBcGNaeHZacXNyaG1ZODl3QlExNUdtTzJ5SFcrcEZOdjFJdSs1cGhzMXQrMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af27574-c2cb-4515-88e3-053718fa5d868", "record_id": "flaws_cloudtrail:0000292:af27574-c2cb-4515-88e3-053718fa5d868", "row_index": 292, "timestamp": "2019-06-19T13:10:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af27574-c2cb-4515-88e3-053718fa5d868", "eventTime": "2019-06-19T13:10:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMGxVOWlMNXk1dlVLM0l3S0ZUQVY0aW5rZ2QyM0dlNDBKUlRzVzBadHZIb3Q2dU9vN3FFZ1h6SWlDaHYrSUsvcWxMejkzL0J4c2RvR2owSGdiekNiWWYwMVhPWGFZT3dsakpTTDJQNlZ6dGovSmdBdVFjN2lyUmw2MjZncXJqRkZmT2NkQTQwS1hFQ1IyRGxaVEo3aFNlV1F3S0xtWStVc3V0U2JxS2RUTWlScms0OVJhcSthYTlTMGZ0UGQwTjIvMndhUUVkN3BSRGJBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af27574-c2cb-4515-88e3-053718fa5d868", "record_id": "flaws_cloudtrail:0000293:af27574-c2cb-4515-88e3-053718fa5d868", "row_index": 293, "timestamp": "2019-06-19T13:10:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af27574-c2cb-4515-88e3-053718fa5d868", "eventTime": "2019-06-19T13:10:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMGxVOWlMNXk1dlVLM0l3S0ZUQVY0aW5rZ2QyM0dlNDBKUlRzVzBadHZIb3Q2dU9vN3FFZ1h6SWlDaHYrSUsvcWxMejkzL0J4c2RvR2owSGdiekNiWWYwMVhPWGFZT3dsakpTTDJQNlZ6dGovSmdBdVFjN2lyUmw2MjZncXJqRkZmT2NkQTQwS1hFQ1IyRGxaVEo3aFNlV1F3S0xtWStVc3V0U2JxS2RUTWlScms0OVJhcSthYTlTMGZ0UGQwTjIvMndhUUVkN3BSRGJBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcec1eef-2cf9-4e17-9de6-01b86b01d357", "record_id": "flaws_cloudtrail:0000294:fcec1eef-2cf9-4e17-9de6-01b86b01d357", "row_index": 294, "timestamp": "2019-06-19T13:10:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcec1eef-2cf9-4e17-9de6-01b86b01d357", "eventTime": "2019-06-19T13:10:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZbkNvVzFOZHovOE9aa3FTL3lxMlhzV1RGbUVmNU5rUWtPR0JWRjJvVGhOb21RQTV1cWNSVWhJSWFLeGZyNXEwRktGUWkyZEhLZ1ppWjhHQ2IxUW1hNk5Cajk5azJPM0Q1QXcvVUFzSzNzaHF2RDZCdW4rUkxjaE41RWxiQnN5YzUwbjBYanRYd2VZanRCdk5oMUdlWnBBYTk3dWwxWE5jOXZZM0FUSWtOS2s2Rnp5YlZaTEVZYjFQTkpuUXhzck1wbFNPa1pidmw2SlZzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcec1eef-2cf9-4e17-9de6-01b86b01d357", "record_id": "flaws_cloudtrail:0000295:fcec1eef-2cf9-4e17-9de6-01b86b01d357", "row_index": 295, "timestamp": "2019-06-19T13:10:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcec1eef-2cf9-4e17-9de6-01b86b01d357", "eventTime": "2019-06-19T13:10:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZbkNvVzFOZHovOE9aa3FTL3lxMlhzV1RGbUVmNU5rUWtPR0JWRjJvVGhOb21RQTV1cWNSVWhJSWFLeGZyNXEwRktGUWkyZEhLZ1ppWjhHQ2IxUW1hNk5Cajk5azJPM0Q1QXcvVUFzSzNzaHF2RDZCdW4rUkxjaE41RWxiQnN5YzUwbjBYanRYd2VZanRCdk5oMUdlWnBBYTk3dWwxWE5jOXZZM0FUSWtOS2s2Rnp5YlZaTEVZYjFQTkpuUXhzck1wbFNPa1pidmw2SlZzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "record_id": "flaws_cloudtrail:0000296:94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "row_index": 296, "timestamp": "2019-06-19T13:10:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "eventTime": "2019-06-19T13:10:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2aGd5bFNJQ1pKZkduYlY0QVlrbzFUa21reURTZHF1SU5ScVl1UzhoTmFUSXdlTE5VQjE0V3FEMTZ2aDJPL0UxNVFxRWxwUGh0VGxhV1F1Uk0yRENPMUI1aVJpbnFweWMrTzA4YkN0aXR5Q1FiUFdCemRGekdxMEM5d0hBNHpITkFLMTVkUUdVazliSHFKL01wTHh5WW5IR1FFZy8vK08vdEpyaGE0ZnZVQ3N2RkFlYnNRTHZCQm1UbHNGZlpPZWhhUTMyMUZwZnBKN0ZudFRidlhoOU9hUnNSS2FVZWh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "record_id": "flaws_cloudtrail:0000297:94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "row_index": 297, "timestamp": "2019-06-19T13:10:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d6c0fe-8285-4edd-8b7a-8be25e94dc62", "eventTime": "2019-06-19T13:10:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2aGd5bFNJQ1pKZkduYlY0QVlrbzFUa21reURTZHF1SU5ScVl1UzhoTmFUSXdlTE5VQjE0V3FEMTZ2aDJPL0UxNVFxRWxwUGh0VGxhV1F1Uk0yRENPMUI1aVJpbnFweWMrTzA4YkN0aXR5Q1FiUFdCemRGekdxMEM5d0hBNHpITkFLMTVkUUdVazliSHFKL01wTHh5WW5IR1FFZy8vK08vdEpyaGE0ZnZVQ3N2RkFlYnNRTHZCQm1UbHNGZlpPZWhhUTMyMUZwZnBKN0ZudFRidlhoOU9hUnNSS2FVZWh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "079125a08-884f-4db3-878e-4eb8f47f81b3", "record_id": "flaws_cloudtrail:0000298:079125a08-884f-4db3-878e-4eb8f47f81b3", "row_index": 298, "timestamp": "2019-06-19T13:10:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "079125a08-884f-4db3-878e-4eb8f47f81b3", "eventTime": "2019-06-19T13:10:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVXZJVW1YaldxWW9sLzdDSEtUR21ZaC9KZVF4Szd3aHVpS2EvU3JqeGkvQnZuVjZFWmtMbk9VT3NkcytoeUNhQW1SYlNxWFQ2RTJzK3hBSnZBOVJXU2V4K24xalJxSHhZdGxDSUZhTFlLbnNxd3I4UENiOWdYMmZzOGtlTGxGUEVJL2VXZ1kyREQ4K1pIbTEvUmxvakdPUk1uZWtWdlZENUtidzNORGtVUVFVZGFNYlNKMFRRMlpsS3Z1TWJYYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "079125a08-884f-4db3-878e-4eb8f47f81b3", "record_id": "flaws_cloudtrail:0000299:079125a08-884f-4db3-878e-4eb8f47f81b3", "row_index": 299, "timestamp": "2019-06-19T13:10:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "079125a08-884f-4db3-878e-4eb8f47f81b3", "eventTime": "2019-06-19T13:10:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVXZJVW1YaldxWW9sLzdDSEtUR21ZaC9KZVF4Szd3aHVpS2EvU3JqeGkvQnZuVjZFWmtMbk9VT3NkcytoeUNhQW1SYlNxWFQ2RTJzK3hBSnZBOVJXU2V4K24xalJxSHhZdGxDSUZhTFlLbnNxd3I4UENiOWdYMmZzOGtlTGxGUEVJL2VXZ1kyREQ4K1pIbTEvUmxvakdPUk1uZWtWdlZENUtidzNORGtVUVFVZGFNYlNKMFRRMlpsS3Z1TWJYYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f49a468-6732-4dc5-b48f-aef9e445586b", "record_id": "flaws_cloudtrail:0000300:5f49a468-6732-4dc5-b48f-aef9e445586b", "row_index": 300, "timestamp": "2019-06-19T13:10:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f49a468-6732-4dc5-b48f-aef9e445586b", "eventTime": "2019-06-19T13:10:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmVkRnNnd2QjZYaDlTNU1RTllXMWxQL0tnNVE3dE05QXo0UEI1bjFraVdpdFlHbElaNUY3L01RY01xQWRFcm9PMlZxMjlBdXJmV2VTdXQwWGQycG1iMkJsT1RZajNIRkZCSHNjQ2lIS1F0Rkg0NFN4VG5wNmtvamZzNk1DZnhkQ3M1VkJoVjMxOS94akhpeUkrdUx6QlZRRW4yZlRGVnh6TW1BQmgxRHorTXkzN3cwYk9BT2dZQWFHV2lCTDNXZE1uMDVRV2pGUDQ5RnlMcFRMcStjY2hFVTR2RTRhMVJBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f49a468-6732-4dc5-b48f-aef9e445586b", "record_id": "flaws_cloudtrail:0000301:5f49a468-6732-4dc5-b48f-aef9e445586b", "row_index": 301, "timestamp": "2019-06-19T13:10:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f49a468-6732-4dc5-b48f-aef9e445586b", "eventTime": "2019-06-19T13:10:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmVkRnNnd2QjZYaDlTNU1RTllXMWxQL0tnNVE3dE05QXo0UEI1bjFraVdpdFlHbElaNUY3L01RY01xQWRFcm9PMlZxMjlBdXJmV2VTdXQwWGQycG1iMkJsT1RZajNIRkZCSHNjQ2lIS1F0Rkg0NFN4VG5wNmtvamZzNk1DZnhkQ3M1VkJoVjMxOS94akhpeUkrdUx6QlZRRW4yZlRGVnh6TW1BQmgxRHorTXkzN3cwYk9BT2dZQWFHV2lCTDNXZE1uMDVRV2pGUDQ5RnlMcFRMcStjY2hFVTR2RTRhMVJBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a220dd66-9e94-41a6-a564-884e67d2dffe", "record_id": "flaws_cloudtrail:0000302:a220dd66-9e94-41a6-a564-884e67d2dffe", "row_index": 302, "timestamp": "2019-06-19T13:10:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a220dd66-9e94-41a6-a564-884e67d2dffe", "eventTime": "2019-06-19T13:10:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTRCtQOUhWRmZuWGFvZ3FuL0toVHB3NFJWb0QrV25jWGttZGxvWnhPUUJkZ0sxZnRmK3hMUUs2UmN6bGZhQjBudnJPdUV2VXhpUGtDaFJsYWNDdUhBdHFVQ1lkcWFYcnVHSVJ5cng5R2R6ZnVjYUs4MGVtM0NITUZPRlRPazR1MFA0NExtd202WGx6c2pCeVJZU3JFclhxeHozV05LNHhRTEI1VUYrVGVXR1laMHdSLytZeVNpbjVyZ1NjdjA3MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a220dd66-9e94-41a6-a564-884e67d2dffe", "record_id": "flaws_cloudtrail:0000303:a220dd66-9e94-41a6-a564-884e67d2dffe", "row_index": 303, "timestamp": "2019-06-19T13:10:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a220dd66-9e94-41a6-a564-884e67d2dffe", "eventTime": "2019-06-19T13:10:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTRCtQOUhWRmZuWGFvZ3FuL0toVHB3NFJWb0QrV25jWGttZGxvWnhPUUJkZ0sxZnRmK3hMUUs2UmN6bGZhQjBudnJPdUV2VXhpUGtDaFJsYWNDdUhBdHFVQ1lkcWFYcnVHSVJ5cng5R2R6ZnVjYUs4MGVtM0NITUZPRlRPazR1MFA0NExtd202WGx6c2pCeVJZU3JFclhxeHozV05LNHhRTEI1VUYrVGVXR1laMHdSLytZeVNpbjVyZ1NjdjA3MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9642b798-eaac-45cb-9a37-92de46bc792b", "record_id": "flaws_cloudtrail:0000304:9642b798-eaac-45cb-9a37-92de46bc792b", "row_index": 304, "timestamp": "2019-06-19T13:10:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9642b798-eaac-45cb-9a37-92de46bc792b", "eventTime": "2019-06-19T13:10:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRnFISmNicy9Ca1lzQ2h4WHVKRHd1MlNLcHNySzB1Z3kyTVJTV2lFT08wbTBUMmRCSHZpb3FBTXpqRGh2NDFhODJLd2h4NllhN2Z3aUk2MS9xbDhvVEJWSGhUT29mODVvNTl6Tm5yTzJSdThwUWFBUlJOSWFGaFE1RG55TjIwK2d3RkJIeGFMa1ByWTc1emp5dTRLejdwV3k0Lzkwa2JrMGgvVjBFaitIWnh0RjR6dy9BMEw4cWFhSENRNFpMZmt0ZzJwM3puc2xWS1pMNmJCM0JGUnlZQzA5SXN3OXFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9642b798-eaac-45cb-9a37-92de46bc792b", "record_id": "flaws_cloudtrail:0000305:9642b798-eaac-45cb-9a37-92de46bc792b", "row_index": 305, "timestamp": "2019-06-19T13:10:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9642b798-eaac-45cb-9a37-92de46bc792b", "eventTime": "2019-06-19T13:10:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRnFISmNicy9Ca1lzQ2h4WHVKRHd1MlNLcHNySzB1Z3kyTVJTV2lFT08wbTBUMmRCSHZpb3FBTXpqRGh2NDFhODJLd2h4NllhN2Z3aUk2MS9xbDhvVEJWSGhUT29mODVvNTl6Tm5yTzJSdThwUWFBUlJOSWFGaFE1RG55TjIwK2d3RkJIeGFMa1ByWTc1emp5dTRLejdwV3k0Lzkwa2JrMGgvVjBFaitIWnh0RjR6dy9BMEw4cWFhSENRNFpMZmt0ZzJwM3puc2xWS1pMNmJCM0JGUnlZQzA5SXN3OXFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e742862-b252-4da9-82c1-cdee37e661809", "record_id": "flaws_cloudtrail:0000306:1e742862-b252-4da9-82c1-cdee37e661809", "row_index": 306, "timestamp": "2019-06-19T13:10:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e742862-b252-4da9-82c1-cdee37e661809", "eventTime": "2019-06-19T13:10:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e742862-b252-4da9-82c1-cdee37e661809", "record_id": "flaws_cloudtrail:0000307:1e742862-b252-4da9-82c1-cdee37e661809", "row_index": 307, "timestamp": "2019-06-19T13:10:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e742862-b252-4da9-82c1-cdee37e661809", "eventTime": "2019-06-19T13:10:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "394a186e-ca1b-4ef7-a812-dc90cbf248af", "record_id": "flaws_cloudtrail:0000308:394a186e-ca1b-4ef7-a812-dc90cbf248af", "row_index": 308, "timestamp": "2019-06-19T13:10:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "394a186e-ca1b-4ef7-a812-dc90cbf248af", "eventTime": "2019-06-19T13:10:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZWlhEMG9ib0NKVUJQcGhnRzRiZWp0allpb21EQXZUOVh4MGs2b0U0SHhURGVDeEorK1UvZVlzcXZzMVA2ajhhOC9hRGQ5NThSallUV0dYcGdlSUJmTnBnZDFEKzRsNXV4YndsR3d2RjRPK09LdktOSU9mdFpHVlFVaDZUUzQxK09Hek0vb2FqZFczcjlkUy9qcXZEU0lSSlhvU1laZDFvYmJCME9vV3F4dnRPYUtNbjZtZ25GR3NYNUd5eE9uWDZSSThONWhDLzlVN2tKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "394a186e-ca1b-4ef7-a812-dc90cbf248af", "record_id": "flaws_cloudtrail:0000309:394a186e-ca1b-4ef7-a812-dc90cbf248af", "row_index": 309, "timestamp": "2019-06-19T13:10:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "394a186e-ca1b-4ef7-a812-dc90cbf248af", "eventTime": "2019-06-19T13:10:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZWlhEMG9ib0NKVUJQcGhnRzRiZWp0allpb21EQXZUOVh4MGs2b0U0SHhURGVDeEorK1UvZVlzcXZzMVA2ajhhOC9hRGQ5NThSallUV0dYcGdlSUJmTnBnZDFEKzRsNXV4YndsR3d2RjRPK09LdktOSU9mdFpHVlFVaDZUUzQxK09Hek0vb2FqZFczcjlkUy9qcXZEU0lSSlhvU1laZDFvYmJCME9vV3F4dnRPYUtNbjZtZ25GR3NYNUd5eE9uWDZSSThONWhDLzlVN2tKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43f1105-1b89-42ca-9b82-4e032371f5a", "record_id": "flaws_cloudtrail:0000310:b43f1105-1b89-42ca-9b82-4e032371f5a", "row_index": 310, "timestamp": "2019-06-19T13:10:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43f1105-1b89-42ca-9b82-4e032371f5a", "eventTime": "2019-06-19T13:10:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0d3crYUE1elUxYkVySDRWV3kydVpCbHdGa1V2dGtiSW9hQ2g3eUVJRkVTbWhkaW5McnNZR2l1UEtPMlBSOWM2MEYwU1g4aUJTNU0zYUtQdXBCZDVXZkExUUhXTWVaY01yNGwxdjdiSUxFRjdBSU5UODVyWDhJQ2w2OUY5N0tSTlN1TVFSSTE0elVsaXlCa1RZbWo1WjdiMUh1L3luQW5XKzhtQUE5bXVsdXFLRTlHWUtnM2s0Snp4TDFETTlIeWFuazRraW51dURyUWx5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43f1105-1b89-42ca-9b82-4e032371f5a", "record_id": "flaws_cloudtrail:0000311:b43f1105-1b89-42ca-9b82-4e032371f5a", "row_index": 311, "timestamp": "2019-06-19T13:10:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43f1105-1b89-42ca-9b82-4e032371f5a", "eventTime": "2019-06-19T13:10:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0d3crYUE1elUxYkVySDRWV3kydVpCbHdGa1V2dGtiSW9hQ2g3eUVJRkVTbWhkaW5McnNZR2l1UEtPMlBSOWM2MEYwU1g4aUJTNU0zYUtQdXBCZDVXZkExUUhXTWVaY01yNGwxdjdiSUxFRjdBSU5UODVyWDhJQ2w2OUY5N0tSTlN1TVFSSTE0elVsaXlCa1RZbWo1WjdiMUh1L3luQW5XKzhtQUE5bXVsdXFLRTlHWUtnM2s0Snp4TDFETTlIeWFuazRraW51dURyUWx5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de5410db-cf47-4944-8b52-36ede6bd5ab2", "record_id": "flaws_cloudtrail:0000312:de5410db-cf47-4944-8b52-36ede6bd5ab2", "row_index": 312, "timestamp": "2019-06-19T13:10:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de5410db-cf47-4944-8b52-36ede6bd5ab2", "eventTime": "2019-06-19T13:10:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKNVdlSi92eGlxVFVFS0FPc3RvQkVBeXhuNkpEN0FRQlE1QlpiVnJIK2x6ZUxDUlpJSDU0akNLa1lzUllURllLQ24xaENsWlJ1djJuWktVWVpJWFlKdjB2d2drdVZ5Q0xlMVYvOHk5aDg3Y00wR3M1WFVWRU1HdlZPb1RrWUZLVjlDbTBkakNQQUMyaWtaRnloZTZ1aVZaZEhucnEwK09LUFc1a1ZxcG0yOW5seDF0b2xsdmVydnF4azlFRk0vcngyK0IvZmtESklrSHo3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de5410db-cf47-4944-8b52-36ede6bd5ab2", "record_id": "flaws_cloudtrail:0000313:de5410db-cf47-4944-8b52-36ede6bd5ab2", "row_index": 313, "timestamp": "2019-06-19T13:10:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de5410db-cf47-4944-8b52-36ede6bd5ab2", "eventTime": "2019-06-19T13:10:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKNVdlSi92eGlxVFVFS0FPc3RvQkVBeXhuNkpEN0FRQlE1QlpiVnJIK2x6ZUxDUlpJSDU0akNLa1lzUllURllLQ24xaENsWlJ1djJuWktVWVpJWFlKdjB2d2drdVZ5Q0xlMVYvOHk5aDg3Y00wR3M1WFVWRU1HdlZPb1RrWUZLVjlDbTBkakNQQUMyaWtaRnloZTZ1aVZaZEhucnEwK09LUFc1a1ZxcG0yOW5seDF0b2xsdmVydnF4azlFRk0vcngyK0IvZmtESklrSHo3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b8b126-c973-48ac-92c0-b1d6799b0456", "record_id": "flaws_cloudtrail:0000314:e0b8b126-c973-48ac-92c0-b1d6799b0456", "row_index": 314, "timestamp": "2019-06-19T13:10:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b8b126-c973-48ac-92c0-b1d6799b0456", "eventTime": "2019-06-19T13:10:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZ3BaNm5kWENsbkEzdXdVNHBHVEdWNnJaU2JnZTZmMlpmUFJIT2lFWTNXSmxTNGd1cC96VzV2N3RvL2RkZUdFeEp4UEJlZDBZZkNaNTBwWnFrMC9TNHoyUTRUL3p4c1k1dUFiMUJLckk4S3p5RUVpWDVwN3RQZGhUV1lnSWJhb3ExRi9xbldvdjdNQkN1VnN0NGVwQjRENzE1YlR2TkFEUFc2OS9XV1lKZVpBeDdoclZsS2EvNExCeE9FSSttZXZicE1mTlFvRHA5VkxTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b8b126-c973-48ac-92c0-b1d6799b0456", "record_id": "flaws_cloudtrail:0000315:e0b8b126-c973-48ac-92c0-b1d6799b0456", "row_index": 315, "timestamp": "2019-06-19T13:10:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b8b126-c973-48ac-92c0-b1d6799b0456", "eventTime": "2019-06-19T13:10:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlZ3BaNm5kWENsbkEzdXdVNHBHVEdWNnJaU2JnZTZmMlpmUFJIT2lFWTNXSmxTNGd1cC96VzV2N3RvL2RkZUdFeEp4UEJlZDBZZkNaNTBwWnFrMC9TNHoyUTRUL3p4c1k1dUFiMUJLckk4S3p5RUVpWDVwN3RQZGhUV1lnSWJhb3ExRi9xbldvdjdNQkN1VnN0NGVwQjRENzE1YlR2TkFEUFc2OS9XV1lKZVpBeDdoclZsS2EvNExCeE9FSSttZXZicE1mTlFvRHA5VkxTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04279-8bd7-4a1e-8db8-5df0a4328a7d", "record_id": "flaws_cloudtrail:0000316:04279-8bd7-4a1e-8db8-5df0a4328a7d", "row_index": 316, "timestamp": "2019-06-19T13:10:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04279-8bd7-4a1e-8db8-5df0a4328a7d", "eventTime": "2019-06-19T13:10:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiWmVEZmV0SVM1OXlMSVNPTUlqbjJQandoY2N6QU94UlBjN2w5dTBWazhRRml4d3d3TGtGZ0FIcTNsRzZKa1NPbk9rLzFRVWZFQWRNQ211K2VXeXB4elJnTi9tL05QTFAvbVUybnh4b3RtaFgxbEN6dGZMMXl0bmIzZWZFMUFDbTl4WHk5SWNibnN1OWZ2K0FyK0xDNUlsd00wdjJSWldDcHZQR1lCMG1iRWdIMjRiOEoybTMyM3ZTZjN6ZGs3WkNMaUNlSlJzeUNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04279-8bd7-4a1e-8db8-5df0a4328a7d", "record_id": "flaws_cloudtrail:0000317:04279-8bd7-4a1e-8db8-5df0a4328a7d", "row_index": 317, "timestamp": "2019-06-19T13:10:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04279-8bd7-4a1e-8db8-5df0a4328a7d", "eventTime": "2019-06-19T13:10:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiWmVEZmV0SVM1OXlMSVNPTUlqbjJQandoY2N6QU94UlBjN2w5dTBWazhRRml4d3d3TGtGZ0FIcTNsRzZKa1NPbk9rLzFRVWZFQWRNQ211K2VXeXB4elJnTi9tL05QTFAvbVUybnh4b3RtaFgxbEN6dGZMMXl0bmIzZWZFMUFDbTl4WHk5SWNibnN1OWZ2K0FyK0xDNUlsd00wdjJSWldDcHZQR1lCMG1iRWdIMjRiOEoybTMyM3ZTZjN6ZGs3WkNMaUNlSlJzeUNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc32f13c-0da8-412a-893a-828e336a3d07", "record_id": "flaws_cloudtrail:0000318:bc32f13c-0da8-412a-893a-828e336a3d07", "row_index": 318, "timestamp": "2019-06-19T13:10:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc32f13c-0da8-412a-893a-828e336a3d07", "eventTime": "2019-06-19T13:10:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPcXF0ays3SW5aYmhiUWlMQU1rZEhzVGZ4alFRQU9xN3NCNlNUeWkwWDZPODhwQjhOQ29MZ0RKMjRTOVJzaTJ4SkU5cUFJRmVnWW9FdThpRTNRUWZielY5dlhhQ3g2Z0srNTJxVml2YlB4SXQvTzQyWitBNFQ5SFB2OHR1K0REQXZkMXMycFRMOGJKQVc5TFBNOUNKa0JIVXRpeTUvdEV0cFBOY2J4UXFFT3ozTWlGRGlRYmhrcmZ6eUVwZ0ZZTTNndTJmbFpXNjc4RlBsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc32f13c-0da8-412a-893a-828e336a3d07", "record_id": "flaws_cloudtrail:0000319:bc32f13c-0da8-412a-893a-828e336a3d07", "row_index": 319, "timestamp": "2019-06-19T13:10:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc32f13c-0da8-412a-893a-828e336a3d07", "eventTime": "2019-06-19T13:10:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPcXF0ays3SW5aYmhiUWlMQU1rZEhzVGZ4alFRQU9xN3NCNlNUeWkwWDZPODhwQjhOQ29MZ0RKMjRTOVJzaTJ4SkU5cUFJRmVnWW9FdThpRTNRUWZielY5dlhhQ3g2Z0srNTJxVml2YlB4SXQvTzQyWitBNFQ5SFB2OHR1K0REQXZkMXMycFRMOGJKQVc5TFBNOUNKa0JIVXRpeTUvdEV0cFBOY2J4UXFFT3ozTWlGRGlRYmhrcmZ6eUVwZ0ZZTTNndTJmbFpXNjc4RlBsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d2232e1-dadb-410c-813d-6163af386ccd", "record_id": "flaws_cloudtrail:0000320:9d2232e1-dadb-410c-813d-6163af386ccd", "row_index": 320, "timestamp": "2019-06-19T13:10:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d2232e1-dadb-410c-813d-6163af386ccd", "eventTime": "2019-06-19T13:10:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJodG9BRDIzWFpuNWs1WWdTd0ltUlpSaUdvUHlINHA5aFdxVVUyRUtnQW42eExKdnZMS0pyL0Y2TllEL2kyRjJBYUIzdm1JakF1UDhPL1p1bmZZWVdlbEFXTmFyelVwQ2tZc0ZZalF5ZVNEY3JxbkE4dXBkS0NvMmlmZTd1QXBZRUJUeVh4N0RidlpFQ3BrZkVmN2ZZUnZTVm1SRHZqVVBBNk1UbkVVajBkQUQvVHRJbWVTS2VtUjMrOFpMRVVxcmhTZmhzSHY0cVpxSFU0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d2232e1-dadb-410c-813d-6163af386ccd", "record_id": "flaws_cloudtrail:0000321:9d2232e1-dadb-410c-813d-6163af386ccd", "row_index": 321, "timestamp": "2019-06-19T13:10:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d2232e1-dadb-410c-813d-6163af386ccd", "eventTime": "2019-06-19T13:10:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJodG9BRDIzWFpuNWs1WWdTd0ltUlpSaUdvUHlINHA5aFdxVVUyRUtnQW42eExKdnZMS0pyL0Y2TllEL2kyRjJBYUIzdm1JakF1UDhPL1p1bmZZWVdlbEFXTmFyelVwQ2tZc0ZZalF5ZVNEY3JxbkE4dXBkS0NvMmlmZTd1QXBZRUJUeVh4N0RidlpFQ3BrZkVmN2ZZUnZTVm1SRHZqVVBBNk1UbkVVajBkQUQvVHRJbWVTS2VtUjMrOFpMRVVxcmhTZmhzSHY0cVpxSFU0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "record_id": "flaws_cloudtrail:0000322:6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "row_index": 322, "timestamp": "2019-06-19T13:11:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "eventTime": "2019-06-19T13:11:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "record_id": "flaws_cloudtrail:0000323:6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "row_index": 323, "timestamp": "2019-06-19T13:11:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ace468d-34f5-4ea4-9c4b-b0f4cb60a3ad", "eventTime": "2019-06-19T13:11:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "record_id": "flaws_cloudtrail:0000324:1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "row_index": 324, "timestamp": "2019-06-19T13:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "eventTime": "2019-06-19T13:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "record_id": "flaws_cloudtrail:0000325:1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "row_index": 325, "timestamp": "2019-06-19T13:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cdeae6e-840d-4ff1-aaa0-04bc8bfa458b", "eventTime": "2019-06-19T13:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "record_id": "flaws_cloudtrail:0000326:4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "row_index": 326, "timestamp": "2019-06-19T13:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "eventTime": "2019-06-19T13:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNa1FlUDFaMDBCRTlJdU0rS3dPdDMyLzQ1MWRkUEJKYUswOEp6cEoxTFRFS3lDamw5SksrcUlHaXd0YnE4Mllna0p1M2VIY0lnMW0zZ3B4c0h2dEpGWTJHWjNQRVZXRnRnL29iYlA5UUpUUTFUNVZ2d01GMTdYSmJ0V1kvdEI5VHcremtZZlltdyt6czVyby8welNYQUNBNTRMOWF0UDJyTWVHaFVmYU5MT0dQQTIwMGFHeW9rUzRBNldITk1DcjhhTlVlMWJLL3NqOUdOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "record_id": "flaws_cloudtrail:0000327:4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "row_index": 327, "timestamp": "2019-06-19T13:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bc31e00-4d4b-4352-9c95-d4ff41a01a70", "eventTime": "2019-06-19T13:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNa1FlUDFaMDBCRTlJdU0rS3dPdDMyLzQ1MWRkUEJKYUswOEp6cEoxTFRFS3lDamw5SksrcUlHaXd0YnE4Mllna0p1M2VIY0lnMW0zZ3B4c0h2dEpGWTJHWjNQRVZXRnRnL29iYlA5UUpUUTFUNVZ2d01GMTdYSmJ0V1kvdEI5VHcremtZZlltdyt6czVyby8welNYQUNBNTRMOWF0UDJyTWVHaFVmYU5MT0dQQTIwMGFHeW9rUzRBNldITk1DcjhhTlVlMWJLL3NqOUdOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "978d2990-806c-4e33-9ba2-7e8ca06804ff", "record_id": "flaws_cloudtrail:0000328:978d2990-806c-4e33-9ba2-7e8ca06804ff", "row_index": 328, "timestamp": "2019-06-19T13:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "978d2990-806c-4e33-9ba2-7e8ca06804ff", "eventTime": "2019-06-19T13:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UjhvMlRseTA0TTgwdS9CWDE4NWxCZjhDTUZDUHlOWHJaWklNQ0ozNTZoNi9IRGxwQWlzQmpQbDBibzJ6OXhHSTFibXk5SmJHSy83ZER6L1E2UkJKSHBndzN6OXRVZ2Fyb0tXVU1CZVQxQk04UGVJWk1DYTJFNXZmdFdjd3U0bWh5OXRtaHVpRmtjeFR5Y2ZjU1EyZkFMTGg2ajRLZ0NtSzZVQ1VEQVpKZjNMazFsdVhHNG9GSXMvbVFlVWFKczlHYWVWcVJKckhIWHQydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "978d2990-806c-4e33-9ba2-7e8ca06804ff", "record_id": "flaws_cloudtrail:0000329:978d2990-806c-4e33-9ba2-7e8ca06804ff", "row_index": 329, "timestamp": "2019-06-19T13:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "978d2990-806c-4e33-9ba2-7e8ca06804ff", "eventTime": "2019-06-19T13:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UjhvMlRseTA0TTgwdS9CWDE4NWxCZjhDTUZDUHlOWHJaWklNQ0ozNTZoNi9IRGxwQWlzQmpQbDBibzJ6OXhHSTFibXk5SmJHSy83ZER6L1E2UkJKSHBndzN6OXRVZ2Fyb0tXVU1CZVQxQk04UGVJWk1DYTJFNXZmdFdjd3U0bWh5OXRtaHVpRmtjeFR5Y2ZjU1EyZkFMTGg2ajRLZ0NtSzZVQ1VEQVpKZjNMazFsdVhHNG9GSXMvbVFlVWFKczlHYWVWcVJKckhIWHQydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47c029bc-7045-4b2b-9cc2-5a083657f43", "record_id": "flaws_cloudtrail:0000330:47c029bc-7045-4b2b-9cc2-5a083657f43", "row_index": 330, "timestamp": "2019-06-19T13:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47c029bc-7045-4b2b-9cc2-5a083657f43", "eventTime": "2019-06-19T13:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCbDhCcGwwSU9YVU9XcEd6aHMwRU9RUUZqUzZmTXFmZStKZmMvaGZiakN1NG5nbDVqVUNVamJvL3gwbENPUHY5QWNZVnNtSWdjckxqdXo0UktmZnJIK1hqRGcweFhLUXFkck0rY0Vnd3p2elVSQ1JKODZHVlRFZ00xNENwc3hWd2JEczA5ZHZia0Y5NW9zT29jZFF3bjhtUlROVnF2a1NnamhWK3lGRjBzV3JiSTFvRzY4UTF2MmV0bFIxU1BQV29GZFYza25wdkFPaWRaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47c029bc-7045-4b2b-9cc2-5a083657f43", "record_id": "flaws_cloudtrail:0000331:47c029bc-7045-4b2b-9cc2-5a083657f43", "row_index": 331, "timestamp": "2019-06-19T13:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47c029bc-7045-4b2b-9cc2-5a083657f43", "eventTime": "2019-06-19T13:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCbDhCcGwwSU9YVU9XcEd6aHMwRU9RUUZqUzZmTXFmZStKZmMvaGZiakN1NG5nbDVqVUNVamJvL3gwbENPUHY5QWNZVnNtSWdjckxqdXo0UktmZnJIK1hqRGcweFhLUXFkck0rY0Vnd3p2elVSQ1JKODZHVlRFZ00xNENwc3hWd2JEczA5ZHZia0Y5NW9zT29jZFF3bjhtUlROVnF2a1NnamhWK3lGRjBzV3JiSTFvRzY4UTF2MmV0bFIxU1BQV29GZFYza25wdkFPaWRaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a60c12-81b8-433d-895a-8d268406a049", "record_id": "flaws_cloudtrail:0000332:85a60c12-81b8-433d-895a-8d268406a049", "row_index": 332, "timestamp": "2019-06-19T13:11:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a60c12-81b8-433d-895a-8d268406a049", "eventTime": "2019-06-19T13:11:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyeXA4WnpaTnpGZFFRNmZKWVl3UThqVitmR2dwbzlBcWxsNEk2cGJFdXJJNElvUmY2VmZsUHFEeHhIWVM0Tk5zWDdweTBaaDhqSklVSkRDVnVjenM2NmVpbWlHWWxqNUF2cDlMOWxTaENJWXoySGlySzdIamZTNWNMT29mbVRJc2V3RCtTU2RySE5WMDFLcFQ3YUtPZjNndGRmZzVSNkNQdnZ2RjVrRzVpeVNwWEtpMVZkVnhaNStFT3NzdCtwYWQrZFk5OWlSeWpzeWwzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a60c12-81b8-433d-895a-8d268406a049", "record_id": "flaws_cloudtrail:0000333:85a60c12-81b8-433d-895a-8d268406a049", "row_index": 333, "timestamp": "2019-06-19T13:11:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a60c12-81b8-433d-895a-8d268406a049", "eventTime": "2019-06-19T13:11:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyeXA4WnpaTnpGZFFRNmZKWVl3UThqVitmR2dwbzlBcWxsNEk2cGJFdXJJNElvUmY2VmZsUHFEeHhIWVM0Tk5zWDdweTBaaDhqSklVSkRDVnVjenM2NmVpbWlHWWxqNUF2cDlMOWxTaENJWXoySGlySzdIamZTNWNMT29mbVRJc2V3RCtTU2RySE5WMDFLcFQ3YUtPZjNndGRmZzVSNkNQdnZ2RjVrRzVpeVNwWEtpMVZkVnhaNStFT3NzdCtwYWQrZFk5OWlSeWpzeWwzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc219e7c-2741-4a14-8dbd-36a550299bb6", "record_id": "flaws_cloudtrail:0000334:dc219e7c-2741-4a14-8dbd-36a550299bb6", "row_index": 334, "timestamp": "2019-06-19T13:11:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc219e7c-2741-4a14-8dbd-36a550299bb6", "eventTime": "2019-06-19T13:11:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiVjlIUjJ6VTA5K0FQcmJjeGJ0Ukg0MC9uOExTMHVVWko3NGFDVFRraDdNSWV1TnMxSDd2RkRDdzV2NU5QeGk1c3hLdHNiRlN5cXpCKzJtZitxOTlhaXpwdVRhZjVHK3BMTzV6dzR3am5ESnBrVWhGbmprd3NjelZEWVoyNTg0QVUrY2duOHlZWklVWERzUm1yN3h5bWx2eEk0UHRpNDBxcmJGM1dtS0pOOUpOTkVtK0J6Z2doU0cvRlRCeUsyVEVLNFdMWmZVUzhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc219e7c-2741-4a14-8dbd-36a550299bb6", "record_id": "flaws_cloudtrail:0000335:dc219e7c-2741-4a14-8dbd-36a550299bb6", "row_index": 335, "timestamp": "2019-06-19T13:11:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc219e7c-2741-4a14-8dbd-36a550299bb6", "eventTime": "2019-06-19T13:11:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiVjlIUjJ6VTA5K0FQcmJjeGJ0Ukg0MC9uOExTMHVVWko3NGFDVFRraDdNSWV1TnMxSDd2RkRDdzV2NU5QeGk1c3hLdHNiRlN5cXpCKzJtZitxOTlhaXpwdVRhZjVHK3BMTzV6dzR3am5ESnBrVWhGbmprd3NjelZEWVoyNTg0QVUrY2duOHlZWklVWERzUm1yN3h5bWx2eEk0UHRpNDBxcmJGM1dtS0pOOUpOTkVtK0J6Z2doU0cvRlRCeUsyVEVLNFdMWmZVUzhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87648-59f6-4ce7-b408-6fc0607cb685", "record_id": "flaws_cloudtrail:0000336:f87648-59f6-4ce7-b408-6fc0607cb685", "row_index": 336, "timestamp": "2019-06-19T13:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87648-59f6-4ce7-b408-6fc0607cb685", "eventTime": "2019-06-19T13:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3QzVqbkdZYjJZYlA5RVJhMU0yUXRkcU0ySWg5WlVackpNSHZYOEc5STBLMFV3V2RvZDNlRG9JaUZ4K1U5Z0JFaEVLNzNvb2tsSSsvczFHZHI5YUxmT0pIZWRhOGVlbGhDTVpLUkVUQzA1Sm9SalZzVGhrWXRvNGltMUdVNUNRVFY2YlhXWHBYdGtCTjVoQWNiNk0zVGtuakxOL2k2ajlIbjRQZVkyeDBmV0VSTzZPaVVzckZCOUdvdnlKSjVFWTNtTTBXM3ZQdmJjclhDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87648-59f6-4ce7-b408-6fc0607cb685", "record_id": "flaws_cloudtrail:0000337:f87648-59f6-4ce7-b408-6fc0607cb685", "row_index": 337, "timestamp": "2019-06-19T13:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87648-59f6-4ce7-b408-6fc0607cb685", "eventTime": "2019-06-19T13:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3QzVqbkdZYjJZYlA5RVJhMU0yUXRkcU0ySWg5WlVackpNSHZYOEc5STBLMFV3V2RvZDNlRG9JaUZ4K1U5Z0JFaEVLNzNvb2tsSSsvczFHZHI5YUxmT0pIZWRhOGVlbGhDTVpLUkVUQzA1Sm9SalZzVGhrWXRvNGltMUdVNUNRVFY2YlhXWHBYdGtCTjVoQWNiNk0zVGtuakxOL2k2ajlIbjRQZVkyeDBmV0VSTzZPaVVzckZCOUdvdnlKSjVFWTNtTTBXM3ZQdmJjclhDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f3be510-74ac-4138-ae28-1e5eed3b462a", "record_id": "flaws_cloudtrail:0000338:9f3be510-74ac-4138-ae28-1e5eed3b462a", "row_index": 338, "timestamp": "2019-06-19T13:11:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f3be510-74ac-4138-ae28-1e5eed3b462a", "eventTime": "2019-06-19T13:11:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5blZ0Z3RSYlVKZG5RTlBxVXRTMmxMWGo4cUJVblRPa1pwTDdOTGtTYURMQlQ4eERWa2h6aDR0enhqa3hBdG8wQnYzT2MzNTFTSEZ2eDZSTkV0YVZtSDMzMW1pL1ZVZGVXcndqUlRnSjM5MVpqaE1NRW9yMGdxUHp5Ty8rYTZsek5VZWxUb3hBR1hZWEdVcXQxUzh3enhJTG1RMlVpNzBSMjFuSCs1ajRFSXVGejcxVVlWV1B3N1kzSUQ0alFkNjFENENKaVVsRWlFMDYrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f3be510-74ac-4138-ae28-1e5eed3b462a", "record_id": "flaws_cloudtrail:0000339:9f3be510-74ac-4138-ae28-1e5eed3b462a", "row_index": 339, "timestamp": "2019-06-19T13:11:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f3be510-74ac-4138-ae28-1e5eed3b462a", "eventTime": "2019-06-19T13:11:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5blZ0Z3RSYlVKZG5RTlBxVXRTMmxMWGo4cUJVblRPa1pwTDdOTGtTYURMQlQ4eERWa2h6aDR0enhqa3hBdG8wQnYzT2MzNTFTSEZ2eDZSTkV0YVZtSDMzMW1pL1ZVZGVXcndqUlRnSjM5MVpqaE1NRW9yMGdxUHp5Ty8rYTZsek5VZWxUb3hBR1hZWEdVcXQxUzh3enhJTG1RMlVpNzBSMjFuSCs1ajRFSXVGejcxVVlWV1B3N1kzSUQ0alFkNjFENENKaVVsRWlFMDYrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "record_id": "flaws_cloudtrail:0000340:669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "row_index": 340, "timestamp": "2019-06-19T13:11:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "eventTime": "2019-06-19T13:11:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEWEw4MkI5UU5WMml3R0tkOE13L1dyZjlUZzJYSUg2TE11RkVUYWVvdjNlUDlCenJEUVhsSDhUeUZ5WFJsbm54ODV6b3V1VjM1YzNpL3BPVHNNeHVwVkcwS2FLNkxzK1RzdU1TSkZlVDJydDdhYjdSenV3TnRJSU1YM1k3QVRNRVlUU2poN1lSN01PY2dSbkNmMGt4TndhQ1hIamE5M1ZEMkl3VUtPZExrUlFOVE8zTnpITGdMMG1hYlAyc1A4N1FPZVdnTG0ySnBGMnY2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "record_id": "flaws_cloudtrail:0000341:669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "row_index": 341, "timestamp": "2019-06-19T13:11:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "669986eaf-fa2f-4f8b-b4a9-570aa5f138e0", "eventTime": "2019-06-19T13:11:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEWEw4MkI5UU5WMml3R0tkOE13L1dyZjlUZzJYSUg2TE11RkVUYWVvdjNlUDlCenJEUVhsSDhUeUZ5WFJsbm54ODV6b3V1VjM1YzNpL3BPVHNNeHVwVkcwS2FLNkxzK1RzdU1TSkZlVDJydDdhYjdSenV3TnRJSU1YM1k3QVRNRVlUU2poN1lSN01PY2dSbkNmMGt4TndhQ1hIamE5M1ZEMkl3VUtPZExrUlFOVE8zTnpITGdMMG1hYlAyc1A4N1FPZVdnTG0ySnBGMnY2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a95e07-789b-404e-8942-a56bff0444fa", "record_id": "flaws_cloudtrail:0000342:03a95e07-789b-404e-8942-a56bff0444fa", "row_index": 342, "timestamp": "2019-06-19T13:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a95e07-789b-404e-8942-a56bff0444fa", "eventTime": "2019-06-19T13:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGM3JqcXJBRWJabmpJK0Nhcmt2NytNb3AyRlc5T214ZW5DaDNtWkpJcDl6RGRNQ2lvNHBFYmRLYmRSbFErdFV5WE5VMFZGK0VDeGI1ZTlOK0ptQXZuNHNxMXJmT3RWMzJjem0valVKZHk2dGdvdW8wdUNQMWZXQk1GUG9hWDBMSENoR0NRbGYzWk5OZ0lmM0lkYlRQVmd6QUNEbTI3ZjA2R215QjZ6SWNtdFR5VEU4VjZnVlkwbjlISkU4c0dJZjFOblhTRStZVHp0U0xPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a95e07-789b-404e-8942-a56bff0444fa", "record_id": "flaws_cloudtrail:0000343:03a95e07-789b-404e-8942-a56bff0444fa", "row_index": 343, "timestamp": "2019-06-19T13:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a95e07-789b-404e-8942-a56bff0444fa", "eventTime": "2019-06-19T13:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGM3JqcXJBRWJabmpJK0Nhcmt2NytNb3AyRlc5T214ZW5DaDNtWkpJcDl6RGRNQ2lvNHBFYmRLYmRSbFErdFV5WE5VMFZGK0VDeGI1ZTlOK0ptQXZuNHNxMXJmT3RWMzJjem0valVKZHk2dGdvdW8wdUNQMWZXQk1GUG9hWDBMSENoR0NRbGYzWk5OZ0lmM0lkYlRQVmd6QUNEbTI3ZjA2R215QjZ6SWNtdFR5VEU4VjZnVlkwbjlISkU4c0dJZjFOblhTRStZVHp0U0xPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "record_id": "flaws_cloudtrail:0000344:d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "row_index": 344, "timestamp": "2019-06-19T13:11:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "eventTime": "2019-06-19T13:11:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKZlhCT1lyb3pBcnZTUGhGZkZ2bll3Z0xackFLcVA0R0RiTVBlRzBRV1QrZjVKQWZEYytBaHZDbDF4bWxiclh0SGdCSjRaZVkxZ0o1alp6K2xmU3hTTHE1ZGxDMC9FcWUydG1jVXZVMDdTQ2cralYxTzMrb29CNGNQZTRNajhsaVZJVDd5ejZqdEtzM2dBUHh3bGlNQlN5cFBlL1B1UU45cGJRV2QzUUlXajBscjZzZUZpa3B1T3lpbGRGMFNiUGhzMGx5aVhFRGViZ2o1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "record_id": "flaws_cloudtrail:0000345:d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "row_index": 345, "timestamp": "2019-06-19T13:11:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fb7160-7fb3-4847-96a4-51b0175e2ebb", "eventTime": "2019-06-19T13:11:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKZlhCT1lyb3pBcnZTUGhGZkZ2bll3Z0xackFLcVA0R0RiTVBlRzBRV1QrZjVKQWZEYytBaHZDbDF4bWxiclh0SGdCSjRaZVkxZ0o1alp6K2xmU3hTTHE1ZGxDMC9FcWUydG1jVXZVMDdTQ2cralYxTzMrb29CNGNQZTRNajhsaVZJVDd5ejZqdEtzM2dBUHh3bGlNQlN5cFBlL1B1UU45cGJRV2QzUUlXajBscjZzZUZpa3B1T3lpbGRGMFNiUGhzMGx5aVhFRGViZ2o1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d494de-a769-4f77-b0bd-c6da425a6825", "record_id": "flaws_cloudtrail:0000346:44d494de-a769-4f77-b0bd-c6da425a6825", "row_index": 346, "timestamp": "2019-06-19T13:11:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d494de-a769-4f77-b0bd-c6da425a6825", "eventTime": "2019-06-19T13:11:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVWFoM1V3V2t1ZEdGWWZodkpZWW9jTmx1TERXNmlVWVlnbUxIdFN2ZlY4ei95eTJwZE9UV0NwUDJjcGJmSXJqTjZ4NTdTNXNERWdMY3JMZTB0dTlFaTV0eW9od09YSUFYbHdXbVo0N3JIaVgxUW41ZmhHRkhPemNRSlRLcmg2clQ3NFA3S2E5SlZVd08rMDZXNmlkY1JRZGJWU0hpc3pIREFhQ2IyTzBNTmw5MGlJMkM4VU5JV0ZWRFdJRGxyZHJ1aXgydXdJUEs0OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d494de-a769-4f77-b0bd-c6da425a6825", "record_id": "flaws_cloudtrail:0000347:44d494de-a769-4f77-b0bd-c6da425a6825", "row_index": 347, "timestamp": "2019-06-19T13:11:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d494de-a769-4f77-b0bd-c6da425a6825", "eventTime": "2019-06-19T13:11:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVWFoM1V3V2t1ZEdGWWZodkpZWW9jTmx1TERXNmlVWVlnbUxIdFN2ZlY4ei95eTJwZE9UV0NwUDJjcGJmSXJqTjZ4NTdTNXNERWdMY3JMZTB0dTlFaTV0eW9od09YSUFYbHdXbVo0N3JIaVgxUW41ZmhHRkhPemNRSlRLcmg2clQ3NFA3S2E5SlZVd08rMDZXNmlkY1JRZGJWU0hpc3pIREFhQ2IyTzBNTmw5MGlJMkM4VU5JV0ZWRFdJRGxyZHJ1aXgydXdJUEs0OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aacce111-0db1-497c-af32-8dae1aa0830b", "record_id": "flaws_cloudtrail:0000348:aacce111-0db1-497c-af32-8dae1aa0830b", "row_index": 348, "timestamp": "2019-06-19T13:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aacce111-0db1-497c-af32-8dae1aa0830b", "eventTime": "2019-06-19T13:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78154-3a4f-44d3-89cd-a6b077d32b69", "record_id": "flaws_cloudtrail:0000349:78154-3a4f-44d3-89cd-a6b077d32b69", "row_index": 349, "timestamp": "2019-06-19T13:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78154-3a4f-44d3-89cd-a6b077d32b69", "eventTime": "2019-06-19T13:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQeXhVWVZtelNQL2RRRGg5S3FtTDUvZXpnM090STlUb0x6czZsYWdsWWUxL3dMYi82UFFkUHRSYnFaVld6blNwTDdtTXFBY01hbGFHWEE3Um9ORXBOaks3NEZpM0lwSVBvSytLUFEybHd5UHNaSWZ3WlJib04yeURSUWdzUE5jcHlQVXpMZjFBZVUzRC81SEZUM0pXbW9UUmtDV3V2am1ydFIzcTE0TkhqTVlCbEJjK3poZXZneFR4S2wvTVRQR0x2RlMrM0FuVzRUMXlNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aacce111-0db1-497c-af32-8dae1aa0830b", "record_id": "flaws_cloudtrail:0000350:aacce111-0db1-497c-af32-8dae1aa0830b", "row_index": 350, "timestamp": "2019-06-19T13:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aacce111-0db1-497c-af32-8dae1aa0830b", "eventTime": "2019-06-19T13:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78154-3a4f-44d3-89cd-a6b077d32b69", "record_id": "flaws_cloudtrail:0000351:78154-3a4f-44d3-89cd-a6b077d32b69", "row_index": 351, "timestamp": "2019-06-19T13:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78154-3a4f-44d3-89cd-a6b077d32b69", "eventTime": "2019-06-19T13:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQeXhVWVZtelNQL2RRRGg5S3FtTDUvZXpnM090STlUb0x6czZsYWdsWWUxL3dMYi82UFFkUHRSYnFaVld6blNwTDdtTXFBY01hbGFHWEE3Um9ORXBOaks3NEZpM0lwSVBvSytLUFEybHd5UHNaSWZ3WlJib04yeURSUWdzUE5jcHlQVXpMZjFBZVUzRC81SEZUM0pXbW9UUmtDV3V2am1ydFIzcTE0TkhqTVlCbEJjK3poZXZneFR4S2wvTVRQR0x2RlMrM0FuVzRUMXlNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90556-62c0-4d40-8d41-b16e8944b720", "record_id": "flaws_cloudtrail:0000352:90556-62c0-4d40-8d41-b16e8944b720", "row_index": 352, "timestamp": "2019-06-19T13:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90556-62c0-4d40-8d41-b16e8944b720", "eventTime": "2019-06-19T13:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWjhkRkYyUWN2SFVvS1J4RDlwWEZ1dmFvNUhSSEorL1pTK2ZxZ3RZdzFDQVFTV3dWN1lKbExjOUw5SWYrY3d6ZndPVExRQTRLVkFDbFErYnczekxmdUhmcnhhVHAxR0NkRnF3K0RKcE1OLzNpUWN6R09RVTBKS3Q4dGxQV1NHMVMrb014WXh6MU96Tzl1ZVoxZEV4eHA0VG9DZ0ZySUcwMlRNQllXbkVvMUpRLzRKR0xwTmdsTHdpbnVzVFBvK3Z2c2N3OUpkR3FVNFRTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90556-62c0-4d40-8d41-b16e8944b720", "record_id": "flaws_cloudtrail:0000353:90556-62c0-4d40-8d41-b16e8944b720", "row_index": 353, "timestamp": "2019-06-19T13:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90556-62c0-4d40-8d41-b16e8944b720", "eventTime": "2019-06-19T13:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWjhkRkYyUWN2SFVvS1J4RDlwWEZ1dmFvNUhSSEorL1pTK2ZxZ3RZdzFDQVFTV3dWN1lKbExjOUw5SWYrY3d6ZndPVExRQTRLVkFDbFErYnczekxmdUhmcnhhVHAxR0NkRnF3K0RKcE1OLzNpUWN6R09RVTBKS3Q4dGxQV1NHMVMrb014WXh6MU96Tzl1ZVoxZEV4eHA0VG9DZ0ZySUcwMlRNQllXbkVvMUpRLzRKR0xwTmdsTHdpbnVzVFBvK3Z2c2N3OUpkR3FVNFRTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28af23e4-96cb-4523-b814-331bbda216347", "record_id": "flaws_cloudtrail:0000354:28af23e4-96cb-4523-b814-331bbda216347", "row_index": 354, "timestamp": "2019-06-19T13:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28af23e4-96cb-4523-b814-331bbda216347", "eventTime": "2019-06-19T13:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWHJ2QmZPUGxyRjd2TmthbkVNZXFvb2JGWGlEVDBpNldHSW1xUnU4OHZGTFJpalBQb0hiaUxoU20xOWZTanUzM1c2NmJIZXNHcnBwZGlkckdMamtIMUtwaTJxSFZTN1dqS0JUMTB2RFZSVFdqLzF0M1JhWmMxSTJmdFNGejdTUzZEbFQ3c1JtdW1MV3FkTzlVQzdBWUFaYkgxbG1ROFFqUDB0a0tGV0Vubkh2akxmYjFnRFFkV1ZJWjVpZ0dnVVpxWnhMNFZUWHpLMlJhL3BzcTgzamtBMGNFb0VFZnd3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28af23e4-96cb-4523-b814-331bbda216347", "record_id": "flaws_cloudtrail:0000355:28af23e4-96cb-4523-b814-331bbda216347", "row_index": 355, "timestamp": "2019-06-19T13:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28af23e4-96cb-4523-b814-331bbda216347", "eventTime": "2019-06-19T13:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWHJ2QmZPUGxyRjd2TmthbkVNZXFvb2JGWGlEVDBpNldHSW1xUnU4OHZGTFJpalBQb0hiaUxoU20xOWZTanUzM1c2NmJIZXNHcnBwZGlkckdMamtIMUtwaTJxSFZTN1dqS0JUMTB2RFZSVFdqLzF0M1JhWmMxSTJmdFNGejdTUzZEbFQ3c1JtdW1MV3FkTzlVQzdBWUFaYkgxbG1ROFFqUDB0a0tGV0Vubkh2akxmYjFnRFFkV1ZJWjVpZ0dnVVpxWnhMNFZUWHpLMlJhL3BzcTgzamtBMGNFb0VFZnd3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "record_id": "flaws_cloudtrail:0000356:a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "row_index": 356, "timestamp": "2019-06-19T13:11:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "eventTime": "2019-06-19T13:11:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSemIzZ3BoMVhrNnlMWEhjTGhJNGxadm1QclR1cEc2amN6U3ZZWGFNK1pZV3lKSFlaYzdKa2VWUDdGdldKZmN0RjFtRytSOVZRbzdxN1c3aWxYUkdzempwekY0MTlOdzFDODN4OHhnZkJYSUZXRXIwcHBwSmV4Wk5LUDBEaU1GdUJ5OUhyMHFIZVM5Y0h2YXJ3WlBaZEVobURTUFI3M05tbkk1YzV5Uy9zOXdEb0tvNzBkWjV0NXZZamtSdHlSQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "record_id": "flaws_cloudtrail:0000357:a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "row_index": 357, "timestamp": "2019-06-19T13:11:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a60db6f1-ea81-45b4-bfe1-e031b61aaffa", "eventTime": "2019-06-19T13:11:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSemIzZ3BoMVhrNnlMWEhjTGhJNGxadm1QclR1cEc2amN6U3ZZWGFNK1pZV3lKSFlaYzdKa2VWUDdGdldKZmN0RjFtRytSOVZRbzdxN1c3aWxYUkdzempwekY0MTlOdzFDODN4OHhnZkJYSUZXRXIwcHBwSmV4Wk5LUDBEaU1GdUJ5OUhyMHFIZVM5Y0h2YXJ3WlBaZEVobURTUFI3M05tbkk1YzV5Uy9zOXdEb0tvNzBkWjV0NXZZamtSdHlSQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f898bc19-27a6-41e9-84f4-ff2e2ace162b", "record_id": "flaws_cloudtrail:0000358:f898bc19-27a6-41e9-84f4-ff2e2ace162b", "row_index": 358, "timestamp": "2019-06-19T13:11:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f898bc19-27a6-41e9-84f4-ff2e2ace162b", "eventTime": "2019-06-19T13:11:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkcG40d0FmakRzV3NheE82RFhla1UrN2ZRNER1Zk5UY0xKeEk4T3hHRDFITkQxZzVCMFA1MCtmNGpGQ0lEem42djFiVFZJSFJWMkZLUGhyR0xYTXdsanFoeXp0alRPb25hNnlYcTB1VmcxVzNFQzJIRHgxaHVvRVVNQlpzKzNEaXNhcnl1cThBK3FQVnhGODdvQzQ5T0VXcVNwdVV0QklkS0VjSGZqdkpCQVlMQThxRGFhRXZYOUl3RXVXaTJxNGhlMTA2bGZSbkQwaTF2Smx1bmswbkRDNGpKUCtSaCt3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f898bc19-27a6-41e9-84f4-ff2e2ace162b", "record_id": "flaws_cloudtrail:0000359:f898bc19-27a6-41e9-84f4-ff2e2ace162b", "row_index": 359, "timestamp": "2019-06-19T13:11:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f898bc19-27a6-41e9-84f4-ff2e2ace162b", "eventTime": "2019-06-19T13:11:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkcG40d0FmakRzV3NheE82RFhla1UrN2ZRNER1Zk5UY0xKeEk4T3hHRDFITkQxZzVCMFA1MCtmNGpGQ0lEem42djFiVFZJSFJWMkZLUGhyR0xYTXdsanFoeXp0alRPb25hNnlYcTB1VmcxVzNFQzJIRHgxaHVvRVVNQlpzKzNEaXNhcnl1cThBK3FQVnhGODdvQzQ5T0VXcVNwdVV0QklkS0VjSGZqdkpCQVlMQThxRGFhRXZYOUl3RXVXaTJxNGhlMTA2bGZSbkQwaTF2Smx1bmswbkRDNGpKUCtSaCt3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d685f3be-a59d-4384-8f15-c9964a23d98d", "record_id": "flaws_cloudtrail:0000360:d685f3be-a59d-4384-8f15-c9964a23d98d", "row_index": 360, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d685f3be-a59d-4384-8f15-c9964a23d98d", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3147bfb7-5aca-405b-bd03-43c44c538862", "record_id": "flaws_cloudtrail:0000361:3147bfb7-5aca-405b-bd03-43c44c538862", "row_index": 361, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3147bfb7-5aca-405b-bd03-43c44c538862", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmM0xzTjhQTVcxWWZwbElrbklqZEkwMVpLclpQNXk2ank3WHJaZEU0eVJ2aDFRMU54eitsRWhsb2lmQjJiSTUweDlnTDdlN0xDcTJpdzhTdjN5dmNPNmYxZEpZZlB2TCsvak9PaDVIUDVCS005MTF6THNTRkhkbGR0dyt6S3FDU0FLMUlmcmNsK25UTW95em9XZFEzNGZZeWVXQkJaZjVIRGVPbTBWcXFucWVGMTJQMXFpVHphUFlkL1h5VnAreFdZM2w3ZDJ3SVVNOEt4WktvcHhyZTYwT3NPTnZ3emdJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73904e-e77e-49bd-912d-961d5dbcb2a7", "record_id": "flaws_cloudtrail:0000362:73904e-e77e-49bd-912d-961d5dbcb2a7", "row_index": 362, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73904e-e77e-49bd-912d-961d5dbcb2a7", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZaUQvUW9HYXc0WmdyclN2S2V5T24zcWJ6VkNyU3JHS2hUK0xjTjgrVTZ5MHMwQlhuSzZCSEdUTVN6Y3RnM0t6OERFRnZpbVZRbEk5T1g0elFwZFR6cmU4dlJPRVJqYmwyeXNaWEVrNFJJWTlxWW1xZjNDcmZqSUVEZnZrN09HWit6UC8yYVRlOUdqVy9xa1krQVhDaWI5aWs4ck14UUYwWTdXbEI2SDNLZlQzVzNHRjA1WFV6dHVGT24vTXVsOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d685f3be-a59d-4384-8f15-c9964a23d98d", "record_id": "flaws_cloudtrail:0000363:d685f3be-a59d-4384-8f15-c9964a23d98d", "row_index": 363, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d685f3be-a59d-4384-8f15-c9964a23d98d", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3147bfb7-5aca-405b-bd03-43c44c538862", "record_id": "flaws_cloudtrail:0000364:3147bfb7-5aca-405b-bd03-43c44c538862", "row_index": 364, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3147bfb7-5aca-405b-bd03-43c44c538862", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmM0xzTjhQTVcxWWZwbElrbklqZEkwMVpLclpQNXk2ank3WHJaZEU0eVJ2aDFRMU54eitsRWhsb2lmQjJiSTUweDlnTDdlN0xDcTJpdzhTdjN5dmNPNmYxZEpZZlB2TCsvak9PaDVIUDVCS005MTF6THNTRkhkbGR0dyt6S3FDU0FLMUlmcmNsK25UTW95em9XZFEzNGZZeWVXQkJaZjVIRGVPbTBWcXFucWVGMTJQMXFpVHphUFlkL1h5VnAreFdZM2w3ZDJ3SVVNOEt4WktvcHhyZTYwT3NPTnZ3emdJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73904e-e77e-49bd-912d-961d5dbcb2a7", "record_id": "flaws_cloudtrail:0000365:73904e-e77e-49bd-912d-961d5dbcb2a7", "row_index": 365, "timestamp": "2019-06-19T13:11:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73904e-e77e-49bd-912d-961d5dbcb2a7", "eventTime": "2019-06-19T13:11:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZaUQvUW9HYXc0WmdyclN2S2V5T24zcWJ6VkNyU3JHS2hUK0xjTjgrVTZ5MHMwQlhuSzZCSEdUTVN6Y3RnM0t6OERFRnZpbVZRbEk5T1g0elFwZFR6cmU4dlJPRVJqYmwyeXNaWEVrNFJJWTlxWW1xZjNDcmZqSUVEZnZrN09HWit6UC8yYVRlOUdqVy9xa1krQVhDaWI5aWs4ck14UUYwWTdXbEI2SDNLZlQzVzNHRjA1WFV6dHVGT24vTXVsOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "record_id": "flaws_cloudtrail:0000366:11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "row_index": 366, "timestamp": "2019-06-19T13:11:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "eventTime": "2019-06-19T13:11:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVlREbnEzd1F3TTAxZ0ZKUHh6UUw0b3dQamVDVitlWS9OUmVrL21aTFFwNE5IOEt2K2dnbm1EWk5Vc0x5bHJyM1ZsTndPSTd6ejZHNUpNazJVajdJcEVqckJNV0dHV1dmeVdDcEtmTXZEV3owUTdJUTN3OW1DUDI3SnBWRWdmckRON3AxU2dkdjJEVkhZMldrOGE3NFVTSEJpbExDbnpnNUdOZTRhOFRDS28wOW5QLzdIVjBBMHNUNkdjQzRTVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "record_id": "flaws_cloudtrail:0000367:11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "row_index": 367, "timestamp": "2019-06-19T13:11:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f9ec23-a7be-43e2-b4ca-71eaf2d35fe9", "eventTime": "2019-06-19T13:11:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVlREbnEzd1F3TTAxZ0ZKUHh6UUw0b3dQamVDVitlWS9OUmVrL21aTFFwNE5IOEt2K2dnbm1EWk5Vc0x5bHJyM1ZsTndPSTd6ejZHNUpNazJVajdJcEVqckJNV0dHV1dmeVdDcEtmTXZEV3owUTdJUTN3OW1DUDI3SnBWRWdmckRON3AxU2dkdjJEVkhZMldrOGE3NFVTSEJpbExDbnpnNUdOZTRhOFRDS28wOW5QLzdIVjBBMHNUNkdjQzRTVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "record_id": "flaws_cloudtrail:0000368:adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "row_index": 368, "timestamp": "2019-06-19T13:11:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "eventTime": "2019-06-19T13:11:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337f26bf-d526-4e6c-aa24-4887a4e634d3", "record_id": "flaws_cloudtrail:0000369:337f26bf-d526-4e6c-aa24-4887a4e634d3", "row_index": 369, "timestamp": "2019-06-19T13:11:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337f26bf-d526-4e6c-aa24-4887a4e634d3", "eventTime": "2019-06-19T13:11:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFNVRTbjJWaTJBc28rbGgxaktXUWZzYTFpNmRCOTNKb3ZUY3N3N0JiK1l1U0RNbzF5aDhCYVFvWmZDNmF0bjJNb013WldUbUhoUWFtV29PMzBxeEVKQmZTMTNSNy93ZzJGMmh0eDcxQk9hRkZlVmdJLzdDbnhmVGRsMktQekFZc0c2Z3FaMEJLUUxnaWQydEdXdzhiVFVGTk5paEhsSWppazZGOG5hUXUrOWNCSjNlWXhhL1pTaUIyZVU0TDFtanJvMTZud1prZU5KbmM4Z3E3VFVTZDdWdll4MG8zUlRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "record_id": "flaws_cloudtrail:0000370:adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "row_index": 370, "timestamp": "2019-06-19T13:11:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc1f0cc-bb9f-4e60-af2a-34e0fa206158", "eventTime": "2019-06-19T13:11:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337f26bf-d526-4e6c-aa24-4887a4e634d3", "record_id": "flaws_cloudtrail:0000371:337f26bf-d526-4e6c-aa24-4887a4e634d3", "row_index": 371, "timestamp": "2019-06-19T13:11:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337f26bf-d526-4e6c-aa24-4887a4e634d3", "eventTime": "2019-06-19T13:11:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFNVRTbjJWaTJBc28rbGgxaktXUWZzYTFpNmRCOTNKb3ZUY3N3N0JiK1l1U0RNbzF5aDhCYVFvWmZDNmF0bjJNb013WldUbUhoUWFtV29PMzBxeEVKQmZTMTNSNy93ZzJGMmh0eDcxQk9hRkZlVmdJLzdDbnhmVGRsMktQekFZc0c2Z3FaMEJLUUxnaWQydEdXdzhiVFVGTk5paEhsSWppazZGOG5hUXUrOWNCSjNlWXhhL1pTaUIyZVU0TDFtanJvMTZud1prZU5KbmM4Z3E3VFVTZDdWdll4MG8zUlRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88d94d97-e0b2-4748-81bb-a6779e745cd9", "record_id": "flaws_cloudtrail:0000372:88d94d97-e0b2-4748-81bb-a6779e745cd9", "row_index": 372, "timestamp": "2019-06-19T13:11:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88d94d97-e0b2-4748-81bb-a6779e745cd9", "eventTime": "2019-06-19T13:11:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNnl2UHNGMWlzc2ZVRXkranRJRU4rUVRCTmk1eWpQaWd2bjRRUzVoeG9OZmJxL0VtNEMxZGdNbTR5bENkNk01TERSSGxZcTVYRmxOcTMrN3dEeE9Yc0lhcEppbTRSWFlnTkhJTmJTYVNZN2tFeGtrdE1kZWI3bTVZSkpCem1QMzVCYXRHb2U3UkQ5QzJyQUU3VFcrWXB0aGNyWkFDaDNnaXpTMHliV3JzT05pQnNCcEpRODdHbVNZUk8zMXBBQ1BRUFJGQ1crazlxVENPRXlqdjJPdjRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88d94d97-e0b2-4748-81bb-a6779e745cd9", "record_id": "flaws_cloudtrail:0000373:88d94d97-e0b2-4748-81bb-a6779e745cd9", "row_index": 373, "timestamp": "2019-06-19T13:11:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88d94d97-e0b2-4748-81bb-a6779e745cd9", "eventTime": "2019-06-19T13:11:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqNnl2UHNGMWlzc2ZVRXkranRJRU4rUVRCTmk1eWpQaWd2bjRRUzVoeG9OZmJxL0VtNEMxZGdNbTR5bENkNk01TERSSGxZcTVYRmxOcTMrN3dEeE9Yc0lhcEppbTRSWFlnTkhJTmJTYVNZN2tFeGtrdE1kZWI3bTVZSkpCem1QMzVCYXRHb2U3UkQ5QzJyQUU3VFcrWXB0aGNyWkFDaDNnaXpTMHliV3JzT05pQnNCcEpRODdHbVNZUk8zMXBBQ1BRUFJGQ1crazlxVENPRXlqdjJPdjRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "record_id": "flaws_cloudtrail:0000374:ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "row_index": 374, "timestamp": "2019-06-19T13:11:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "eventTime": "2019-06-19T13:11:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBeEJJQ05Pb1gxQXhjMHZwd2xYa0lTVXMyUSsvN2V2RUNwbEpqM3dMQVFhcHk0THdFc0ZkZkZQOXpwN3NrZHpGVkEwWW9qVjI3SS9SWndnRlRBa1dVcWxWaHZDSjJGSlJIRTNYb21yUVh5L0twbFIwY1dVTWx2Y05BQnBrZGNSM1M2N0o4dkQ5Z2NLNk5ianRUUTBCQ3N3My9jVFFqSFU1V3J3a1A5NjAyRXdFQUdydHJxaWFqVXFzVkFDRzZ4cFFoOVNoc3A0dENZLzRtZm1GdllFd09CcFhVdy9ack1rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "record_id": "flaws_cloudtrail:0000375:ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "row_index": 375, "timestamp": "2019-06-19T13:11:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebf7bbcc-3e55-48aa-ad0e-b4980b07d4c3", "eventTime": "2019-06-19T13:11:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBeEJJQ05Pb1gxQXhjMHZwd2xYa0lTVXMyUSsvN2V2RUNwbEpqM3dMQVFhcHk0THdFc0ZkZkZQOXpwN3NrZHpGVkEwWW9qVjI3SS9SWndnRlRBa1dVcWxWaHZDSjJGSlJIRTNYb21yUVh5L0twbFIwY1dVTWx2Y05BQnBrZGNSM1M2N0o4dkQ5Z2NLNk5ianRUUTBCQ3N3My9jVFFqSFU1V3J3a1A5NjAyRXdFQUdydHJxaWFqVXFzVkFDRzZ4cFFoOVNoc3A0dENZLzRtZm1GdllFd09CcFhVdy9ack1rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "record_id": "flaws_cloudtrail:0000376:cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "row_index": 376, "timestamp": "2019-06-19T13:11:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "eventTime": "2019-06-19T13:11:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNVNsOGJUVUxwZDk1Z2s0eXR4TnZrUklLbFlraHlCdDExbmtSbFUvY0FLNVg5eUp2UTVqTWNSNkJrSjBvYmo4TmhJNFlrWTczUllpREhYMFc0bHExeGlZWGdKbkduRXFyY1p5N3BOV3VMQ3VRWHRUbnROSnllQ2UyWGNkUmVHaGNGdENCUEYyZmpZdkNPSTJ5bloyL2RFdU1HamF5NUM2aVZwdk5MbkJBT2swM3hZaXd6VE9yT2pnRlFRQVh5ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "record_id": "flaws_cloudtrail:0000377:cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "row_index": 377, "timestamp": "2019-06-19T13:11:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdb9563c-ab35-4a3f-a3d6-24ba1ddd5e77", "eventTime": "2019-06-19T13:11:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNVNsOGJUVUxwZDk1Z2s0eXR4TnZrUklLbFlraHlCdDExbmtSbFUvY0FLNVg5eUp2UTVqTWNSNkJrSjBvYmo4TmhJNFlrWTczUllpREhYMFc0bHExeGlZWGdKbkduRXFyY1p5N3BOV3VMQ3VRWHRUbnROSnllQ2UyWGNkUmVHaGNGdENCUEYyZmpZdkNPSTJ5bloyL2RFdU1HamF5NUM2aVZwdk5MbkJBT2swM3hZaXd6VE9yT2pnRlFRQVh5ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "record_id": "flaws_cloudtrail:0000378:a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "row_index": 378, "timestamp": "2019-06-19T13:11:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "eventTime": "2019-06-19T13:11:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "record_id": "flaws_cloudtrail:0000379:a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "row_index": 379, "timestamp": "2019-06-19T13:11:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a548bd0b-cd63-4ea6-9087-c7b9905a14c2", "eventTime": "2019-06-19T13:11:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81a203b8-b7a9-404d-8ffc-c807c93ae201", "record_id": "flaws_cloudtrail:0000380:81a203b8-b7a9-404d-8ffc-c807c93ae201", "row_index": 380, "timestamp": "2019-06-19T13:13:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81a203b8-b7a9-404d-8ffc-c807c93ae201", "eventTime": "2019-06-19T13:13:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81a203b8-b7a9-404d-8ffc-c807c93ae201", "record_id": "flaws_cloudtrail:0000381:81a203b8-b7a9-404d-8ffc-c807c93ae201", "row_index": 381, "timestamp": "2019-06-19T13:13:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81a203b8-b7a9-404d-8ffc-c807c93ae201", "eventTime": "2019-06-19T13:13:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9ddd90-c545-4c0e-af73-d92aba261c77", "record_id": "flaws_cloudtrail:0000382:6e9ddd90-c545-4c0e-af73-d92aba261c77", "row_index": 382, "timestamp": "2019-06-19T13:14:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9ddd90-c545-4c0e-af73-d92aba261c77", "eventTime": "2019-06-19T13:14:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9ddd90-c545-4c0e-af73-d92aba261c77", "record_id": "flaws_cloudtrail:0000383:6e9ddd90-c545-4c0e-af73-d92aba261c77", "row_index": 383, "timestamp": "2019-06-19T13:14:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9ddd90-c545-4c0e-af73-d92aba261c77", "eventTime": "2019-06-19T13:14:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4814f072-f204-421f-bab4-0dc06bf6eefa", "record_id": "flaws_cloudtrail:0000384:4814f072-f204-421f-bab4-0dc06bf6eefa", "row_index": 384, "timestamp": "2019-06-19T13:14:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4814f072-f204-421f-bab4-0dc06bf6eefa", "eventTime": "2019-06-19T13:14:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4814f072-f204-421f-bab4-0dc06bf6eefa", "record_id": "flaws_cloudtrail:0000385:4814f072-f204-421f-bab4-0dc06bf6eefa", "row_index": 385, "timestamp": "2019-06-19T13:14:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4814f072-f204-421f-bab4-0dc06bf6eefa", "eventTime": "2019-06-19T13:14:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c3ff0d-2500-4d07-8782-c99ffadc9145", "record_id": "flaws_cloudtrail:0000386:29c3ff0d-2500-4d07-8782-c99ffadc9145", "row_index": 386, "timestamp": "2019-06-19T13:14:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c3ff0d-2500-4d07-8782-c99ffadc9145", "eventTime": "2019-06-19T13:14:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c3ff0d-2500-4d07-8782-c99ffadc9145", "record_id": "flaws_cloudtrail:0000387:29c3ff0d-2500-4d07-8782-c99ffadc9145", "row_index": 387, "timestamp": "2019-06-19T13:14:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c3ff0d-2500-4d07-8782-c99ffadc9145", "eventTime": "2019-06-19T13:14:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "record_id": "flaws_cloudtrail:0000388:31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "row_index": 388, "timestamp": "2019-06-19T13:14:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "eventTime": "2019-06-19T13:14:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "record_id": "flaws_cloudtrail:0000389:31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "row_index": 389, "timestamp": "2019-06-19T13:14:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31db4285-9e09-4eb7-b6f5-40ff0bc16d81", "eventTime": "2019-06-19T13:14:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d728bc5f-9985-438e-96f1-a7b822440f4", "record_id": "flaws_cloudtrail:0000390:d728bc5f-9985-438e-96f1-a7b822440f4", "row_index": 390, "timestamp": "2019-06-19T13:14:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d728bc5f-9985-438e-96f1-a7b822440f4", "eventTime": "2019-06-19T13:14:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d728bc5f-9985-438e-96f1-a7b822440f4", "record_id": "flaws_cloudtrail:0000391:d728bc5f-9985-438e-96f1-a7b822440f4", "row_index": 391, "timestamp": "2019-06-19T13:14:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d728bc5f-9985-438e-96f1-a7b822440f4", "eventTime": "2019-06-19T13:14:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "074a7d90-d95a-4c6c-9132-97bffe4ee982", "record_id": "flaws_cloudtrail:0000392:074a7d90-d95a-4c6c-9132-97bffe4ee982", "row_index": 392, "timestamp": "2019-06-19T13:15:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "074a7d90-d95a-4c6c-9132-97bffe4ee982", "eventTime": "2019-06-19T13:15:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "074a7d90-d95a-4c6c-9132-97bffe4ee982", "record_id": "flaws_cloudtrail:0000393:074a7d90-d95a-4c6c-9132-97bffe4ee982", "row_index": 393, "timestamp": "2019-06-19T13:15:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "074a7d90-d95a-4c6c-9132-97bffe4ee982", "eventTime": "2019-06-19T13:15:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05454d-a368-4f10-8956-148c78d135de", "record_id": "flaws_cloudtrail:0000394:05454d-a368-4f10-8956-148c78d135de", "row_index": 394, "timestamp": "2019-06-19T13:15:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05454d-a368-4f10-8956-148c78d135de", "eventTime": "2019-06-19T13:15:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05454d-a368-4f10-8956-148c78d135de", "record_id": "flaws_cloudtrail:0000395:05454d-a368-4f10-8956-148c78d135de", "row_index": 395, "timestamp": "2019-06-19T13:15:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05454d-a368-4f10-8956-148c78d135de", "eventTime": "2019-06-19T13:15:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e02f1a53-a8a8-4e33-b332-e26fe0145d23", "record_id": "flaws_cloudtrail:0000396:e02f1a53-a8a8-4e33-b332-e26fe0145d23", "row_index": 396, "timestamp": "2019-06-19T13:15:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e02f1a53-a8a8-4e33-b332-e26fe0145d23", "eventTime": "2019-06-19T13:15:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e02f1a53-a8a8-4e33-b332-e26fe0145d23", "record_id": "flaws_cloudtrail:0000397:e02f1a53-a8a8-4e33-b332-e26fe0145d23", "row_index": 397, "timestamp": "2019-06-19T13:15:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e02f1a53-a8a8-4e33-b332-e26fe0145d23", "eventTime": "2019-06-19T13:15:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628f7137-b880-404d-9a19-154586154650", "record_id": "flaws_cloudtrail:0000398:628f7137-b880-404d-9a19-154586154650", "row_index": 398, "timestamp": "2019-06-19T13:15:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628f7137-b880-404d-9a19-154586154650", "eventTime": "2019-06-19T13:15:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628f7137-b880-404d-9a19-154586154650", "record_id": "flaws_cloudtrail:0000399:628f7137-b880-404d-9a19-154586154650", "row_index": 399, "timestamp": "2019-06-19T13:15:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628f7137-b880-404d-9a19-154586154650", "eventTime": "2019-06-19T13:15:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "record_id": "flaws_cloudtrail:0000400:b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "row_index": 400, "timestamp": "2019-06-19T13:16:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.0.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "eventTime": "2019-06-19T13:16:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.0.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "record_id": "flaws_cloudtrail:0000401:b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "row_index": 401, "timestamp": "2019-06-19T13:16:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.0.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0ad00c3-cf96-4ea8-b70c-63a3514134ba", "eventTime": "2019-06-19T13:16:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.0.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "record_id": "flaws_cloudtrail:0000402:4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "row_index": 402, "timestamp": "2019-06-19T13:16:15Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1520, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "eventTime": "2019-06-19T13:16:15Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: sVFBXbZMCc8Mv0UNhqRPdPbae2aOzRay4trsLc2rKlHc5lvAgaWeP2LoFG1VCJFm5Cuqrl5Ypg3E_Z4bzrJyDS1CzcJrnRct7z58DQoAC_Y8aXd36sNbvkpAkbsKOBCFDuhi2IxeUKsZWXqTSC9rrwDJ57CwpA2s3FOt9han8c-U-OO8r_RjQvPKCNbwkDXoGa8AnRdxWHKYdaL9HASqt9kngi08M2l7MqedinjqNt6ykoa25XGRUP6s4r1eNpxK7wxQX4nhY4BX1d5Okh_3O2JELKefjlMYPzP06HxO3zn0POlJASxIAFkAUUOJjteZkqPEzxxGR22AtkOnLKNpuIw_ZjASDdkmNRWooIzaq8vxY1pV8CQBfQ4x9jrTHSkw-_pcL52mIWpTgCwbBFoV9NmUnkajxTiK-8y_6f5g4LF_EjV_byx22e7IZDy9gCbN8XgINd7gPRU-MBjEb0lfvFxdZd-RWBtn8BflXMdc1F7W5qvbTViXEuRyMk9pAmIeNHwCZOmQ_GlPlnhWDgbhRPdk6TFdE79--g5j9gQ5GNoO4Ua10W6eqWanTASTXsoaAHIIEZfbmZD0_PO2D_dtDDADjZF4uQeirvbEZuaSMzceb3LEctLjkFVnpCYm7uuKFoctZmDD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "record_id": "flaws_cloudtrail:0000403:4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "row_index": 403, "timestamp": "2019-06-19T13:16:15Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1520, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c66d8b0-fb5d-4a08-84ca-f817dbce0105", "eventTime": "2019-06-19T13:16:15Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: sVFBXbZMCc8Mv0UNhqRPdPbae2aOzRay4trsLc2rKlHc5lvAgaWeP2LoFG1VCJFm5Cuqrl5Ypg3E_Z4bzrJyDS1CzcJrnRct7z58DQoAC_Y8aXd36sNbvkpAkbsKOBCFDuhi2IxeUKsZWXqTSC9rrwDJ57CwpA2s3FOt9han8c-U-OO8r_RjQvPKCNbwkDXoGa8AnRdxWHKYdaL9HASqt9kngi08M2l7MqedinjqNt6ykoa25XGRUP6s4r1eNpxK7wxQX4nhY4BX1d5Okh_3O2JELKefjlMYPzP06HxO3zn0POlJASxIAFkAUUOJjteZkqPEzxxGR22AtkOnLKNpuIw_ZjASDdkmNRWooIzaq8vxY1pV8CQBfQ4x9jrTHSkw-_pcL52mIWpTgCwbBFoV9NmUnkajxTiK-8y_6f5g4LF_EjV_byx22e7IZDy9gCbN8XgINd7gPRU-MBjEb0lfvFxdZd-RWBtn8BflXMdc1F7W5qvbTViXEuRyMk9pAmIeNHwCZOmQ_GlPlnhWDgbhRPdk6TFdE79--g5j9gQ5GNoO4Ua10W6eqWanTASTXsoaAHIIEZfbmZD0_PO2D_dtDDADjZF4uQeirvbEZuaSMzceb3LEctLjkFVnpCYm7uuKFoctZmDD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "record_id": "flaws_cloudtrail:0000404:42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "row_index": 404, "timestamp": "2019-06-19T13:16:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "eventTime": "2019-06-19T13:16:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "record_id": "flaws_cloudtrail:0000405:42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "row_index": 405, "timestamp": "2019-06-19T13:16:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42efb95d-a518-4e0f-89fc-a20bbcb75e3f", "eventTime": "2019-06-19T13:16:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "record_id": "flaws_cloudtrail:0000406:b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "row_index": 406, "timestamp": "2019-06-19T13:16:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "eventTime": "2019-06-19T13:16:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "record_id": "flaws_cloudtrail:0000407:b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "row_index": 407, "timestamp": "2019-06-19T13:16:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2857a7c-9a67-4ef0-8658-b58cdd895ddd", "eventTime": "2019-06-19T13:16:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed29037-1c72-407d-8e41-0e9e7756b3af", "record_id": "flaws_cloudtrail:0000408:1ed29037-1c72-407d-8e41-0e9e7756b3af", "row_index": 408, "timestamp": "2019-06-19T13:16:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed29037-1c72-407d-8e41-0e9e7756b3af", "eventTime": "2019-06-19T13:16:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed29037-1c72-407d-8e41-0e9e7756b3af", "record_id": "flaws_cloudtrail:0000409:1ed29037-1c72-407d-8e41-0e9e7756b3af", "row_index": 409, "timestamp": "2019-06-19T13:16:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed29037-1c72-407d-8e41-0e9e7756b3af", "eventTime": "2019-06-19T13:16:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "record_id": "flaws_cloudtrail:0000410:9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "row_index": 410, "timestamp": "2019-06-19T13:16:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "eventTime": "2019-06-19T13:16:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDRnNaV3NZOEpuSDdETDBnbTI2dGNudENvN3B3ZVE5MjExYVRyS3hxQWNnOWRrQnM0K0JSZlh2QUpVbUhqblJySWlDZExJbEp4dWV3b3Z6TlJLNFYrSzNUZ2xXTmVreVhOazBMNTFLMExwWFpYd1VZVThBbnJBSFl4ZUY3UjZpUEF1akpDdG55NDVQMU5wY0VLclJ3MThOUmRndml4d094Q0ZySnIrbkZiUkN5UHllMy9ZV2dPbFhXdmw2T1VUdnc4ZmtWRGxVQjFuL2I5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "record_id": "flaws_cloudtrail:0000411:9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "row_index": 411, "timestamp": "2019-06-19T13:16:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9946a175-760d-4e6a-ac0a-d6f4eb8948fc", "eventTime": "2019-06-19T13:16:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDRnNaV3NZOEpuSDdETDBnbTI2dGNudENvN3B3ZVE5MjExYVRyS3hxQWNnOWRrQnM0K0JSZlh2QUpVbUhqblJySWlDZExJbEp4dWV3b3Z6TlJLNFYrSzNUZ2xXTmVreVhOazBMNTFLMExwWFpYd1VZVThBbnJBSFl4ZUY3UjZpUEF1akpDdG55NDVQMU5wY0VLclJ3MThOUmRndml4d094Q0ZySnIrbkZiUkN5UHllMy9ZV2dPbFhXdmw2T1VUdnc4ZmtWRGxVQjFuL2I5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "record_id": "flaws_cloudtrail:0000412:7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "row_index": 412, "timestamp": "2019-06-19T13:16:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "eventTime": "2019-06-19T13:16:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJreUNWWXZaRzc3Qkx5MDA1SkFBOUNwZGRYRXI1cnBUK2hxeG1kaWRveFhuRHFFQm1GSkJUdXFWSHhEQ0ZEL2puOUQweWJ0Wkk5YTJPdDl2OWFUaWlyN0pidGNuWFZtdUJDVXZrQzBnZ3pvWVZydWd6dUdGTmtzbEpoOGNvWjUzTWtZMkpCeHROd3FSQWZ1YXhHcy9TR0tLQkd6dDljMTBoeERDMm4zcE9xRnYyVy8wOGRDdno2TmZzelBLV3pQV1VXTlUvaXhPWHJuNk9RUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d367cc1a-7028-4c58-8608-817b50cdea3d", "record_id": "flaws_cloudtrail:0000413:d367cc1a-7028-4c58-8608-817b50cdea3d", "row_index": 413, "timestamp": "2019-06-19T13:16:53Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d367cc1a-7028-4c58-8608-817b50cdea3d", "eventTime": "2019-06-19T13:16:53Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -x5w0ziNXBaMD0rTJsGfuAXTAiRGud90xS91fPDBPvK8OP6_A0Uue1XdLDs92H2Q-3ZLNrvjV5fM_egPhPOcnOeQX1Ubx5GHCAqA5urO6KopRaxVwfCpPnIfpOgiWqmRN4W7FDaEtOpemTo0rwsBSpDLn3WMwrU89exvNZdgcACB6hGlxB7WZf8r4Le7s5ig57ZQk2RnitdKIWIWtKANtH4aRiOYjkhn0Z4sUKG-A5MO6fTMFCNWRY5zYDmkWHZh1Eep0QlkFjer_O9RbwAbv1OskmeSwLy8CKtBFsHeyclk5goA8mXJ6vlaROF0H-h-fBd9k9j3HynCCkZmEbiLQWdKrA_iTWunfDDulXVjYHkg1GO4BmimnlC2-YfyW7p-w45u6034biu97DW5z4CWI9UlFt0k51On5Np3vRfNTEwQuzXFHslB_f67uDVALQY_0rFJZDEVLrHGPogGMY1LQOcYsWXgAbR2DupPRTFUKK1RJyiaxvaXM77Hag7RmiSY-OwSyja_yRTeXImApOTRxuXVEPpHvEW-_2yU2ugSZCcMRAa4ZJbXGw1APp8-XIpMObKU-aMR-jCzpgnFlPqSEblYh3ZP4Fi7YVnwGxloPj59yGbP_uSUV0VlK7TC33j3HOs0g08Y8Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "record_id": "flaws_cloudtrail:0000414:7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "row_index": 414, "timestamp": "2019-06-19T13:16:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f23aceb-7766-4ba8-b84e-42ad6c6c2bce", "eventTime": "2019-06-19T13:16:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJreUNWWXZaRzc3Qkx5MDA1SkFBOUNwZGRYRXI1cnBUK2hxeG1kaWRveFhuRHFFQm1GSkJUdXFWSHhEQ0ZEL2puOUQweWJ0Wkk5YTJPdDl2OWFUaWlyN0pidGNuWFZtdUJDVXZrQzBnZ3pvWVZydWd6dUdGTmtzbEpoOGNvWjUzTWtZMkpCeHROd3FSQWZ1YXhHcy9TR0tLQkd6dDljMTBoeERDMm4zcE9xRnYyVy8wOGRDdno2TmZzelBLV3pQV1VXTlUvaXhPWHJuNk9RUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d367cc1a-7028-4c58-8608-817b50cdea3d", "record_id": "flaws_cloudtrail:0000415:d367cc1a-7028-4c58-8608-817b50cdea3d", "row_index": 415, "timestamp": "2019-06-19T13:16:53Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d367cc1a-7028-4c58-8608-817b50cdea3d", "eventTime": "2019-06-19T13:16:53Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -x5w0ziNXBaMD0rTJsGfuAXTAiRGud90xS91fPDBPvK8OP6_A0Uue1XdLDs92H2Q-3ZLNrvjV5fM_egPhPOcnOeQX1Ubx5GHCAqA5urO6KopRaxVwfCpPnIfpOgiWqmRN4W7FDaEtOpemTo0rwsBSpDLn3WMwrU89exvNZdgcACB6hGlxB7WZf8r4Le7s5ig57ZQk2RnitdKIWIWtKANtH4aRiOYjkhn0Z4sUKG-A5MO6fTMFCNWRY5zYDmkWHZh1Eep0QlkFjer_O9RbwAbv1OskmeSwLy8CKtBFsHeyclk5goA8mXJ6vlaROF0H-h-fBd9k9j3HynCCkZmEbiLQWdKrA_iTWunfDDulXVjYHkg1GO4BmimnlC2-YfyW7p-w45u6034biu97DW5z4CWI9UlFt0k51On5Np3vRfNTEwQuzXFHslB_f67uDVALQY_0rFJZDEVLrHGPogGMY1LQOcYsWXgAbR2DupPRTFUKK1RJyiaxvaXM77Hag7RmiSY-OwSyja_yRTeXImApOTRxuXVEPpHvEW-_2yU2ugSZCcMRAa4ZJbXGw1APp8-XIpMObKU-aMR-jCzpgnFlPqSEblYh3ZP4Fi7YVnwGxloPj59yGbP_uSUV0VlK7TC33j3HOs0g08Y8Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eccb852-097f-42f7-b694-7f5d450b0629", "record_id": "flaws_cloudtrail:0000416:4eccb852-097f-42f7-b694-7f5d450b0629", "row_index": 416, "timestamp": "2019-06-19T13:16:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eccb852-097f-42f7-b694-7f5d450b0629", "eventTime": "2019-06-19T13:16:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdXFWUExaR1Y1YnI5S1lUNEg0bHlyOGF6MXB6WTZ6emdTVk5MbWZsWGo0cmJIMFh1MUpER1pjK2lDZTM2NnlZWGo2NEJsd3N1OHV1enI1RklUMjVMZ3FmTlIzemV4TXp0K1B5cnRLazNxNmhMMDlTMDY0OUZoSVljbWY2Q3ZVdHlxdUltNUlxTDdWZE9FZkZLWW5Pd0h1UERCc25NdU5vWVRjdE1IMmIvbE9lRng3UVM1WGprQkJWL0hwSDE0Um9kcHNjVjFNN05YR1RuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eccb852-097f-42f7-b694-7f5d450b0629", "record_id": "flaws_cloudtrail:0000417:4eccb852-097f-42f7-b694-7f5d450b0629", "row_index": 417, "timestamp": "2019-06-19T13:16:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eccb852-097f-42f7-b694-7f5d450b0629", "eventTime": "2019-06-19T13:16:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdXFWUExaR1Y1YnI5S1lUNEg0bHlyOGF6MXB6WTZ6emdTVk5MbWZsWGo0cmJIMFh1MUpER1pjK2lDZTM2NnlZWGo2NEJsd3N1OHV1enI1RklUMjVMZ3FmTlIzemV4TXp0K1B5cnRLazNxNmhMMDlTMDY0OUZoSVljbWY2Q3ZVdHlxdUltNUlxTDdWZE9FZkZLWW5Pd0h1UERCc25NdU5vWVRjdE1IMmIvbE9lRng3UVM1WGprQkJWL0hwSDE0Um9kcHNjVjFNN05YR1RuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b46278-b8e2-4e61-b318-bf11868bc13", "record_id": "flaws_cloudtrail:0000418:b46278-b8e2-4e61-b318-bf11868bc13", "row_index": 418, "timestamp": "2019-06-19T13:16:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b46278-b8e2-4e61-b318-bf11868bc13", "eventTime": "2019-06-19T13:16:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrM0JKRFZLd2wvSTE3d0YxVGFxRmhNb05TaXFOU1VQQlRpNmZ3N0o4SXg0eHNTVkp4S0M1dndmWEtJOVpoRDAzYVJaa2ZWOUszSFRiZ3RKTURSZHRwNWlCMUUyWlVhKzh2Mk5nRmVVZzFNempLc0RlT2hKdS9JVkNWZDN1MEJQRis3dklvekFzN09UMVVEaEY3VVJtaVJ4SzIxREpGd0s2MS9GMFU1WVVWV2pQb3dXVEVSdVpWK0pnMXlxNXFWbG9ZdklLdWl2b1NybVpuQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b46278-b8e2-4e61-b318-bf11868bc13", "record_id": "flaws_cloudtrail:0000419:b46278-b8e2-4e61-b318-bf11868bc13", "row_index": 419, "timestamp": "2019-06-19T13:16:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b46278-b8e2-4e61-b318-bf11868bc13", "eventTime": "2019-06-19T13:16:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrM0JKRFZLd2wvSTE3d0YxVGFxRmhNb05TaXFOU1VQQlRpNmZ3N0o4SXg0eHNTVkp4S0M1dndmWEtJOVpoRDAzYVJaa2ZWOUszSFRiZ3RKTURSZHRwNWlCMUUyWlVhKzh2Mk5nRmVVZzFNempLc0RlT2hKdS9JVkNWZDN1MEJQRis3dklvekFzN09UMVVEaEY3VVJtaVJ4SzIxREpGd0s2MS9GMFU1WVVWV2pQb3dXVEVSdVpWK0pnMXlxNXFWbG9ZdklLdWl2b1NybVpuQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5065ffd0-aadb-4734-afd8-727b2714bc0a", "record_id": "flaws_cloudtrail:0000420:5065ffd0-aadb-4734-afd8-727b2714bc0a", "row_index": 420, "timestamp": "2019-06-19T13:16:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5065ffd0-aadb-4734-afd8-727b2714bc0a", "eventTime": "2019-06-19T13:16:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUEFrM1MrdDQxYVI5aklPa09DZXc0VW50Z1NBeVdlSytVT0RWd3lFaDR2ako4bjRzcmRkOFU5TTQrVzBxaXZvWUhycURnMEozbWxxRU01RUtsSVNiK0ZETFBoeTVlcllYd3lZSGNwWEZ3aUwxSWNzSlNIWGJiQ2pwUUF6RmppKzJkRGFSV2JCNHNHSWMxQlQ3T25MYWZTa3RiSE0xVDRJR29ZYzFRdFQ0WGJXWm1wWjlpanhVcVVySWUzZlllS0VzTDFiZGtYYXdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5065ffd0-aadb-4734-afd8-727b2714bc0a", "record_id": "flaws_cloudtrail:0000421:5065ffd0-aadb-4734-afd8-727b2714bc0a", "row_index": 421, "timestamp": "2019-06-19T13:16:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5065ffd0-aadb-4734-afd8-727b2714bc0a", "eventTime": "2019-06-19T13:16:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUEFrM1MrdDQxYVI5aklPa09DZXc0VW50Z1NBeVdlSytVT0RWd3lFaDR2ako4bjRzcmRkOFU5TTQrVzBxaXZvWUhycURnMEozbWxxRU01RUtsSVNiK0ZETFBoeTVlcllYd3lZSGNwWEZ3aUwxSWNzSlNIWGJiQ2pwUUF6RmppKzJkRGFSV2JCNHNHSWMxQlQ3T25MYWZTa3RiSE0xVDRJR29ZYzFRdFQ0WGJXWm1wWjlpanhVcVVySWUzZlllS0VzTDFiZGtYYXdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "record_id": "flaws_cloudtrail:0000422:9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "row_index": 422, "timestamp": "2019-06-19T13:17:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "eventTime": "2019-06-19T13:17:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHcDFtQjBaRlR2UGhwNGI0S1ZWUFhFNWpUR3pKeHNsU2daTnF0cHBoNStBcnc4UGpEVnpnQjBMSVBxejZmQ1NhTWJmRU1TUkYwSS9XdUd3RlhoWnNKc0ROSGlkTGUzNUVVQWFOYzVoakphWWpXWnVGTG9HY2hQRVlHSEdHUzB0N0k4SURxR1poWVQweldYN0pwWnZPWUZJdU1ZdkVtTGhTTXc0NEN6QkhXOUZPWEJUWnA3RzBjZjhHclJHMzBQNmQ5WU9jVXg2V0dTblZxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "record_id": "flaws_cloudtrail:0000423:9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "row_index": 423, "timestamp": "2019-06-19T13:17:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2f6c76-df01-4b1b-8fd3-b0e40c577596", "eventTime": "2019-06-19T13:17:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHcDFtQjBaRlR2UGhwNGI0S1ZWUFhFNWpUR3pKeHNsU2daTnF0cHBoNStBcnc4UGpEVnpnQjBMSVBxejZmQ1NhTWJmRU1TUkYwSS9XdUd3RlhoWnNKc0ROSGlkTGUzNUVVQWFOYzVoakphWWpXWnVGTG9HY2hQRVlHSEdHUzB0N0k4SURxR1poWVQweldYN0pwWnZPWUZJdU1ZdkVtTGhTTXc0NEN6QkhXOUZPWEJUWnA3RzBjZjhHclJHMzBQNmQ5WU9jVXg2V0dTblZxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5910be11-eaa0-4196-bedb-59ec1af97a54", "record_id": "flaws_cloudtrail:0000424:5910be11-eaa0-4196-bedb-59ec1af97a54", "row_index": 424, "timestamp": "2019-06-19T13:17:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5910be11-eaa0-4196-bedb-59ec1af97a54", "eventTime": "2019-06-19T13:17:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdVBaYmNLRW9BZTNCaWl4NGp3L1RZdXNCc2FUaFp1SXZ5THFhVStFVU91TmVoN3E4VldtdU5JN1IwejE4Y1Z5eHlpczc3ZTNSUWhyOFc2RnUxanBTaUpoNzhoangzczQ4LzJNenN0YjZaSVY5a3FMdzdGQ2xqbEJQY0RNc1M2UEExdHdYWGViOFlJVUFQc2thSjJTcUhGaklYdjJJaVRERGx2Um9Jb3RySnNnQjh6WmRka3lSRlFmcVZmeTNXK0JRTWd0UEhkVmV0RTVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5910be11-eaa0-4196-bedb-59ec1af97a54", "record_id": "flaws_cloudtrail:0000425:5910be11-eaa0-4196-bedb-59ec1af97a54", "row_index": 425, "timestamp": "2019-06-19T13:17:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5910be11-eaa0-4196-bedb-59ec1af97a54", "eventTime": "2019-06-19T13:17:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdVBaYmNLRW9BZTNCaWl4NGp3L1RZdXNCc2FUaFp1SXZ5THFhVStFVU91TmVoN3E4VldtdU5JN1IwejE4Y1Z5eHlpczc3ZTNSUWhyOFc2RnUxanBTaUpoNzhoangzczQ4LzJNenN0YjZaSVY5a3FMdzdGQ2xqbEJQY0RNc1M2UEExdHdYWGViOFlJVUFQc2thSjJTcUhGaklYdjJJaVRERGx2Um9Jb3RySnNnQjh6WmRka3lSRlFmcVZmeTNXK0JRTWd0UEhkVmV0RTVtZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9502e55e-3065-49a7-add7-37aedf0ab8c7", "record_id": "flaws_cloudtrail:0000426:9502e55e-3065-49a7-add7-37aedf0ab8c7", "row_index": 426, "timestamp": "2019-06-19T13:17:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9502e55e-3065-49a7-add7-37aedf0ab8c7", "eventTime": "2019-06-19T13:17:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWWWVmbmRxSkhQVk9QY1dxckQvZW5ROGQxY2c3QmU5VUR6YU4wVHRnNm5KNkV3d3dIN3hLYVZUbzZNUUhjSFU0SjlIRVJzeEtzSy96TmdpNlM1RUt2TS9rM2RzTUlWUFBITk5ad20zb3lCcTh4V25hdjBua3N1cGlwaFR6UVdpYlFBRWNkU2RNdE9WRVFQSjJ6TnpWTGxBTTZDTEZtMHhwUU5OTm5UcFBtSlFjM1hWNEtBbG5XdmtNTXJ0cDljclFtRnJYYkFjQVNzZExjQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9502e55e-3065-49a7-add7-37aedf0ab8c7", "record_id": "flaws_cloudtrail:0000427:9502e55e-3065-49a7-add7-37aedf0ab8c7", "row_index": 427, "timestamp": "2019-06-19T13:17:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9502e55e-3065-49a7-add7-37aedf0ab8c7", "eventTime": "2019-06-19T13:17:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWWWVmbmRxSkhQVk9QY1dxckQvZW5ROGQxY2c3QmU5VUR6YU4wVHRnNm5KNkV3d3dIN3hLYVZUbzZNUUhjSFU0SjlIRVJzeEtzSy96TmdpNlM1RUt2TS9rM2RzTUlWUFBITk5ad20zb3lCcTh4V25hdjBua3N1cGlwaFR6UVdpYlFBRWNkU2RNdE9WRVFQSjJ6TnpWTGxBTTZDTEZtMHhwUU5OTm5UcFBtSlFjM1hWNEtBbG5XdmtNTXJ0cDljclFtRnJYYkFjQVNzZExjQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca509981b-c337-4c61-9dcc-eea7627c5f4b", "record_id": "flaws_cloudtrail:0000428:ca509981b-c337-4c61-9dcc-eea7627c5f4b", "row_index": 428, "timestamp": "2019-06-19T13:17:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca509981b-c337-4c61-9dcc-eea7627c5f4b", "eventTime": "2019-06-19T13:17:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca509981b-c337-4c61-9dcc-eea7627c5f4b", "record_id": "flaws_cloudtrail:0000429:ca509981b-c337-4c61-9dcc-eea7627c5f4b", "row_index": 429, "timestamp": "2019-06-19T13:17:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca509981b-c337-4c61-9dcc-eea7627c5f4b", "eventTime": "2019-06-19T13:17:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d283b98-297f-4688-ab44-b9bc009743b", "record_id": "flaws_cloudtrail:0000430:1d283b98-297f-4688-ab44-b9bc009743b", "row_index": 430, "timestamp": "2019-06-19T13:18:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d283b98-297f-4688-ab44-b9bc009743b", "eventTime": "2019-06-19T13:18:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d283b98-297f-4688-ab44-b9bc009743b", "record_id": "flaws_cloudtrail:0000431:1d283b98-297f-4688-ab44-b9bc009743b", "row_index": 431, "timestamp": "2019-06-19T13:18:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d283b98-297f-4688-ab44-b9bc009743b", "eventTime": "2019-06-19T13:18:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.180 Python/3.7.3 Darwin/18.6.0 botocore/1.12.170]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547cc6a6-fa26-45b2-91ed-f21863136fa8", "record_id": "flaws_cloudtrail:0000432:547cc6a6-fa26-45b2-91ed-f21863136fa8", "row_index": 432, "timestamp": "2019-06-19T13:19:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547cc6a6-fa26-45b2-91ed-f21863136fa8", "eventTime": "2019-06-19T13:19:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547cc6a6-fa26-45b2-91ed-f21863136fa8", "record_id": "flaws_cloudtrail:0000433:547cc6a6-fa26-45b2-91ed-f21863136fa8", "row_index": 433, "timestamp": "2019-06-19T13:19:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547cc6a6-fa26-45b2-91ed-f21863136fa8", "eventTime": "2019-06-19T13:19:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.3 Linux/4.9.0-8-amd64 botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "516fef3c-7033-4d9d-af94-72a4ed244fcf", "record_id": "flaws_cloudtrail:0000434:516fef3c-7033-4d9d-af94-72a4ed244fcf", "row_index": 434, "timestamp": "2019-06-19T13:19:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "516fef3c-7033-4d9d-af94-72a4ed244fcf", "eventTime": "2019-06-19T13:19:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "516fef3c-7033-4d9d-af94-72a4ed244fcf", "record_id": "flaws_cloudtrail:0000435:516fef3c-7033-4d9d-af94-72a4ed244fcf", "row_index": 435, "timestamp": "2019-06-19T13:19:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "516fef3c-7033-4d9d-af94-72a4ed244fcf", "eventTime": "2019-06-19T13:19:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bbedb86-51a8-46a7-882c-3073717da0a9", "record_id": "flaws_cloudtrail:0000436:1bbedb86-51a8-46a7-882c-3073717da0a9", "row_index": 436, "timestamp": "2019-06-19T13:19:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bbedb86-51a8-46a7-882c-3073717da0a9", "eventTime": "2019-06-19T13:19:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bbedb86-51a8-46a7-882c-3073717da0a9", "record_id": "flaws_cloudtrail:0000437:1bbedb86-51a8-46a7-882c-3073717da0a9", "row_index": 437, "timestamp": "2019-06-19T13:19:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bbedb86-51a8-46a7-882c-3073717da0a9", "eventTime": "2019-06-19T13:19:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "record_id": "flaws_cloudtrail:0000438:787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "row_index": 438, "timestamp": "2019-06-19T13:21:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "eventTime": "2019-06-19T13:21:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: lQxRnQnxzvF7bS1yGZlV7tpYzPG1lKhjl8E_dTjsLrySztwyOnKnjeJdfy8qr5PpzGKTN8jQPk8ljAxtySGcxpVObNdSKHxdQAaLyWVk-t8-aiNLvFXuO72uXK4SuThpKpvuBXV6MlMpPDAq4hxwjzjAB3ee392HA9xaIgoTr23A-zJpYPrlKVWvc4phoI8eOOtP9lgD05kMULZ4bg7QGs6628rBFi-G_oBHXTtHrGeWjsCzQneObrzR8EWKewYhaL3GZr3-CEF1CpSY4OzrzhEfwMXmjoFKxe4_dULrGXYgZaxqI_pbBvT7Q5wHc_VdkDIu_g9wovPaFIOJAN3YltR7G561k_4GjMZWXmtUN_k-VoL9VfAw9J9MMncbZ2aGFr6nwFBWJmpJTml2B7BMTtZVMdJaQ_wIqiNvoJmsjw-lTxQEGVU2bSheQTkGwuslKhVx5QAWKjd9Lt7JjAu0rOz5buhDHBhemPS8tvivOjAhA1-0p4CubHhq8DM1WGoqNwL4Ha0jz2SuBfXIu0rLFYbkvpEw_yBalWUUUK6aWdezota7CLVdvxFU_uGUSlozYp-_FQ1nmtkVNPnHc-WeqCzN1rKlNw3RCwW6Myb3rkd57l-me2ErWEytptDLuHCSi-8cXMRB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "record_id": "flaws_cloudtrail:0000439:787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "row_index": 439, "timestamp": "2019-06-19T13:21:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "787cf05b-6d24-47ff-a6dc-9c9fe6e1ecc4", "eventTime": "2019-06-19T13:21:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: lQxRnQnxzvF7bS1yGZlV7tpYzPG1lKhjl8E_dTjsLrySztwyOnKnjeJdfy8qr5PpzGKTN8jQPk8ljAxtySGcxpVObNdSKHxdQAaLyWVk-t8-aiNLvFXuO72uXK4SuThpKpvuBXV6MlMpPDAq4hxwjzjAB3ee392HA9xaIgoTr23A-zJpYPrlKVWvc4phoI8eOOtP9lgD05kMULZ4bg7QGs6628rBFi-G_oBHXTtHrGeWjsCzQneObrzR8EWKewYhaL3GZr3-CEF1CpSY4OzrzhEfwMXmjoFKxe4_dULrGXYgZaxqI_pbBvT7Q5wHc_VdkDIu_g9wovPaFIOJAN3YltR7G561k_4GjMZWXmtUN_k-VoL9VfAw9J9MMncbZ2aGFr6nwFBWJmpJTml2B7BMTtZVMdJaQ_wIqiNvoJmsjw-lTxQEGVU2bSheQTkGwuslKhVx5QAWKjd9Lt7JjAu0rOz5buhDHBhemPS8tvivOjAhA1-0p4CubHhq8DM1WGoqNwL4Ha0jz2SuBfXIu0rLFYbkvpEw_yBalWUUUK6aWdezota7CLVdvxFU_uGUSlozYp-_FQ1nmtkVNPnHc-WeqCzN1rKlNw3RCwW6Myb3rkd57l-me2ErWEytptDLuHCSi-8cXMRB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52cb21e8-4fce-462d-a4f3-b10860fae14", "record_id": "flaws_cloudtrail:0000440:52cb21e8-4fce-462d-a4f3-b10860fae14", "row_index": 440, "timestamp": "2019-06-19T13:25:36Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52cb21e8-4fce-462d-a4f3-b10860fae14", "eventTime": "2019-06-19T13:25:36Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cmCFgYdvV-w9MJn01zDEbSTInnb_FrmW1mVYUs6V8kgp66tuaQ0TVU-yxOOXZsY-cz3l70q6HvQGNzu5yfXEqJaIjmU0z8uogmT5I5fixcI5DhoesA8J1GkOPtpaK_VNqR4sWrys_USMpf8u2bArNLmEUsQOIa-3zFh9yLqP6wHLT-H1F69BxGvQkyjMDunSX4SAOLO2PX7hNZVsRxPZeceey3uJJbsIHVFLfAd3Rw21zRigpNQqdi6e-V4gNaE4s0dJK6Wl20LC8yazYSzb2s9VZUhzXpnZa83V8yCaShiM9bNoBVFfQToj0GNydCpcJU2Rf_2C_rKIwfjIbFaKG-_6nOwyhrUBba5ay2VDMCV4sYuY_SUrTMewd4OV2fFY0nmEkS_E6DhWqANS9nwHuczZmSe03uCkX9Wn80CvAsktXtlLbkI7ieTnyqURqLt1O51RBrKluPFWBGKQTu4I2-bFIFOYOzvYwlG2EYSmasB5iVpG1F4B7hgfvXYX-3fLwcYYzRtNyB3cjDCcjXK7FnZhvXL2c3KjxT9Zg4JdGwuGnr7-LL9mYgHGwZsOB__AFf6_-64yd7AeDul9vpugpdsUOgnN8bWUU5h_XMk3zPqPzhNKEKhR0afje9Kg9o7PPAOtQWeD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52cb21e8-4fce-462d-a4f3-b10860fae14", "record_id": "flaws_cloudtrail:0000441:52cb21e8-4fce-462d-a4f3-b10860fae14", "row_index": 441, "timestamp": "2019-06-19T13:25:36Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52cb21e8-4fce-462d-a4f3-b10860fae14", "eventTime": "2019-06-19T13:25:36Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cmCFgYdvV-w9MJn01zDEbSTInnb_FrmW1mVYUs6V8kgp66tuaQ0TVU-yxOOXZsY-cz3l70q6HvQGNzu5yfXEqJaIjmU0z8uogmT5I5fixcI5DhoesA8J1GkOPtpaK_VNqR4sWrys_USMpf8u2bArNLmEUsQOIa-3zFh9yLqP6wHLT-H1F69BxGvQkyjMDunSX4SAOLO2PX7hNZVsRxPZeceey3uJJbsIHVFLfAd3Rw21zRigpNQqdi6e-V4gNaE4s0dJK6Wl20LC8yazYSzb2s9VZUhzXpnZa83V8yCaShiM9bNoBVFfQToj0GNydCpcJU2Rf_2C_rKIwfjIbFaKG-_6nOwyhrUBba5ay2VDMCV4sYuY_SUrTMewd4OV2fFY0nmEkS_E6DhWqANS9nwHuczZmSe03uCkX9Wn80CvAsktXtlLbkI7ieTnyqURqLt1O51RBrKluPFWBGKQTu4I2-bFIFOYOzvYwlG2EYSmasB5iVpG1F4B7hgfvXYX-3fLwcYYzRtNyB3cjDCcjXK7FnZhvXL2c3KjxT9Zg4JdGwuGnr7-LL9mYgHGwZsOB__AFf6_-64yd7AeDul9vpugpdsUOgnN8bWUU5h_XMk3zPqPzhNKEKhR0afje9Kg9o7PPAOtQWeD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba4293f5-18df-45a3-b8b6-acfcf963d87e", "record_id": "flaws_cloudtrail:0000442:ba4293f5-18df-45a3-b8b6-acfcf963d87e", "row_index": 442, "timestamp": "2019-06-19T13:25:46Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba4293f5-18df-45a3-b8b6-acfcf963d87e", "eventTime": "2019-06-19T13:25:46Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba4293f5-18df-45a3-b8b6-acfcf963d87e", "record_id": "flaws_cloudtrail:0000443:ba4293f5-18df-45a3-b8b6-acfcf963d87e", "row_index": 443, "timestamp": "2019-06-19T13:25:46Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba4293f5-18df-45a3-b8b6-acfcf963d87e", "eventTime": "2019-06-19T13:25:46Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1729ee01-299f-4db1-9547-932800a7c", "record_id": "flaws_cloudtrail:0000444:1729ee01-299f-4db1-9547-932800a7c", "row_index": 444, "timestamp": "2019-06-19T13:25:51Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1729ee01-299f-4db1-9547-932800a7c", "eventTime": "2019-06-19T13:25:51Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1729ee01-299f-4db1-9547-932800a7c", "record_id": "flaws_cloudtrail:0000445:1729ee01-299f-4db1-9547-932800a7c", "row_index": 445, "timestamp": "2019-06-19T13:25:51Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1729ee01-299f-4db1-9547-932800a7c", "eventTime": "2019-06-19T13:25:51Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54932-8769-4609-bd10-1b15c501ddd4", "record_id": "flaws_cloudtrail:0000446:54932-8769-4609-bd10-1b15c501ddd4", "row_index": 446, "timestamp": "2019-06-19T13:25:59Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54932-8769-4609-bd10-1b15c501ddd4", "eventTime": "2019-06-19T13:25:59Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-a2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-a2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54932-8769-4609-bd10-1b15c501ddd4", "record_id": "flaws_cloudtrail:0000447:54932-8769-4609-bd10-1b15c501ddd4", "row_index": 447, "timestamp": "2019-06-19T13:25:59Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54932-8769-4609-bd10-1b15c501ddd4", "eventTime": "2019-06-19T13:25:59Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-a2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-a2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf51804-bd63-412e-9328-a81eb2a04042", "record_id": "flaws_cloudtrail:0000448:fdf51804-bd63-412e-9328-a81eb2a04042", "row_index": 448, "timestamp": "2019-06-19T13:26:06Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1520, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf51804-bd63-412e-9328-a81eb2a04042", "eventTime": "2019-06-19T13:26:06Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QkjYbcBcvLYgtZUUC4vBuVbuL_F31HW0tYLBTsPngCpFvnyqe6mZ3WlWrrv62me-CiPXzjmdNy_LKLXdYgyVtnn9cwmlUEy_JXrz505GJjGPur6Qu3Iav69Q2B3-wWUmg-lehcfHjFIH-rRwjW_CJplpVkYXeU1Ivn85ItHvheMTu-JidyZ5PdY0CdU_rTWgO35OhV-6-bR5UUM5ccONx8ULLl3sDZlmCltqPCTH0X3MfqqFK4u42eVrWfurp5vfTrU70V1zqyEVlH2LPDcbOkWc_CSQqdGjA0JryCMRe4snMYrD5UX0srifiHUrBUXUk5qcSi5km9L3MhJ_N8UoibEclOe3nv3Lz0hBIIgW1t3lc5NIcTNos0-vn4JFfxNUWFpSxs5bxQeFbFAoB1I8LpsfZBM_rIYlWewoVrvtg-gOnwrAgq6pTkMjDLxoZ0E1W0K6c1wzL_54XM7wv1x2bbsTbcVqNd9ipQGZUuvvpHJRS-CwN_ca_bsqtffgitE7bYcMUdajG26mOV6jcXD9ryOCawmtm0JrQfRyqWRBKA1YK75Z-2xrfNqs00EnT7KpB9cAVWcVA5vLbbBn_jE68eZAr8Jl6D8oVcGlBN-V_NPelQ-oUz2AkFnqilKqm4b9HmtNRVsx", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf51804-bd63-412e-9328-a81eb2a04042", "record_id": "flaws_cloudtrail:0000449:fdf51804-bd63-412e-9328-a81eb2a04042", "row_index": 449, "timestamp": "2019-06-19T13:26:06Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1520, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf51804-bd63-412e-9328-a81eb2a04042", "eventTime": "2019-06-19T13:26:06Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QkjYbcBcvLYgtZUUC4vBuVbuL_F31HW0tYLBTsPngCpFvnyqe6mZ3WlWrrv62me-CiPXzjmdNy_LKLXdYgyVtnn9cwmlUEy_JXrz505GJjGPur6Qu3Iav69Q2B3-wWUmg-lehcfHjFIH-rRwjW_CJplpVkYXeU1Ivn85ItHvheMTu-JidyZ5PdY0CdU_rTWgO35OhV-6-bR5UUM5ccONx8ULLl3sDZlmCltqPCTH0X3MfqqFK4u42eVrWfurp5vfTrU70V1zqyEVlH2LPDcbOkWc_CSQqdGjA0JryCMRe4snMYrD5UX0srifiHUrBUXUk5qcSi5km9L3MhJ_N8UoibEclOe3nv3Lz0hBIIgW1t3lc5NIcTNos0-vn4JFfxNUWFpSxs5bxQeFbFAoB1I8LpsfZBM_rIYlWewoVrvtg-gOnwrAgq6pTkMjDLxoZ0E1W0K6c1wzL_54XM7wv1x2bbsTbcVqNd9ipQGZUuvvpHJRS-CwN_ca_bsqtffgitE7bYcMUdajG26mOV6jcXD9ryOCawmtm0JrQfRyqWRBKA1YK75Z-2xrfNqs00EnT7KpB9cAVWcVA5vLbbBn_jE68eZAr8Jl6D8oVcGlBN-V_NPelQ-oUz2AkFnqilKqm4b9HmtNRVsx", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4fd3145-dc05-4275-b21c-a8cfa6535399", "record_id": "flaws_cloudtrail:0000450:f4fd3145-dc05-4275-b21c-a8cfa6535399", "row_index": 450, "timestamp": "2019-06-19T13:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4fd3145-dc05-4275-b21c-a8cfa6535399", "eventTime": "2019-06-19T13:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADXV5F6OT3G2BJCXA", "expiration": "Jun 19, 2019 7:50:17 PM", "sessionToken": "AgoJb3JpZ2luX2VjED4aCXVzLXdlc3QtMiJHMEUCIB52y20mMyTyqtKQ2DT/WkHX01ZoSoJHMcdGCE3nJ//yAiEAtbC0Y4FfgAS6TUrKMUY3DuWkWX7u+ZN5QCdfe3qXpi8q2gMIdxAAGgw5NzU0MjYyNjIwMjkiDPT2Ya1Qv+UCAnar5Cq3A5W+d9ALMG2NJUuFR2SRsOPzRli8qB675qZBVPc/SP3/zq9Ai9ORTAQAC84IU4Y9cXpMPrLeThmSZYV0p07pH6lG0ll3tIErFnCihRTDHw5M7SbQH9KAZA5GytVawDElA2oO+iXmrhRRi6adP25CE3VjL1Do3KmDtn71SLFzJx5JRMuudL5rvIab+1I2Axv2WysmTW5TIEFLWTTna/MRj/OMYoHV79Eg4SyEtdwpRgiT0BiBDiV/DslsZVD1rLAlEvU2CG9+fLZCbkYAey1+Jf8CpqT5GuJFJ8063DenkavxqCupmKU/sMPowU4NMMmdcRN9AL6J5JKo3nbVfud936d1vDcjA5xYIx3cDnNHDO7t4sMrJmaepjmBHX8dA1/Bp7l9UUEWFDt80XM8PMEM7ZolCvXgXAyqryAKlIfucn30aLct4TUUPV1M0TaU52f4iMBf6+aSXDf/O3xk16FAj5eBZXTA44pGRZk0ajyuS+5loZ6+BuWuJrtWKTtCfDcXSO7uRlHDmgxIk5gEuErSB2VkTPeXZkmDEEPP9sMD2cSGVgcFcXq9huJ/nPGchSRReVD3xDLHYmIwnvCo6AU6tAGPucX/QZw7kKFBvIiD2NKqfcbo/A92K1Kyng2sVfwhXHz8Mcuqq+jTVahctcMZQ2BG2Zho3cTwC97X0KyVzWZpETqyrzFi77J7eVFhUnwHedmzrxU1lK/p0E81GmeIiCc1OWjBNk4u41Q0peE36fFT1606jTykfTIXkWDJF6s2HuFTtB2huAxSl5VGGAHPkW1Tut5qOxpIZH7sn+yyWr1hq0xfaCFvA5wgL4qVpbqRZIMNXgI="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4fd3145-dc05-4275-b21c-a8cfa6535399", "record_id": "flaws_cloudtrail:0000451:f4fd3145-dc05-4275-b21c-a8cfa6535399", "row_index": 451, "timestamp": "2019-06-19T13:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4fd3145-dc05-4275-b21c-a8cfa6535399", "eventTime": "2019-06-19T13:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADXV5F6OT3G2BJCXA", "expiration": "Jun 19, 2019 7:50:17 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a736749-5936-4f0c-9b77-b1e337bc81f6", "record_id": "flaws_cloudtrail:0000452:a736749-5936-4f0c-9b77-b1e337bc81f6", "row_index": 452, "timestamp": "2019-06-19T13:28:49Z", "event_type": "DecodeAuthorizationMessage", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a736749-5936-4f0c-9b77-b1e337bc81f6", "eventTime": "2019-06-19T13:28:49Z", "eventName": "DecodeAuthorizationMessage", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:DecodeAuthorizationMessage", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a736749-5936-4f0c-9b77-b1e337bc81f6", "record_id": "flaws_cloudtrail:0000453:a736749-5936-4f0c-9b77-b1e337bc81f6", "row_index": 453, "timestamp": "2019-06-19T13:28:49Z", "event_type": "DecodeAuthorizationMessage", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.245.89.250", "user_agent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a736749-5936-4f0c-9b77-b1e337bc81f6", "eventTime": "2019-06-19T13:28:49Z", "eventName": "DecodeAuthorizationMessage", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.245.89.250", "userAgent": "aws-cli/1.16.113 Python/2.7.15 Darwin/18.6.0 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:DecodeAuthorizationMessage", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06fa70d6-c77c-48fa-ab8b-129b1d107736", "record_id": "flaws_cloudtrail:0000454:06fa70d6-c77c-48fa-ab8b-129b1d107736", "row_index": 454, "timestamp": "2019-06-19T13:43:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06fa70d6-c77c-48fa-ab8b-129b1d107736", "eventTime": "2019-06-19T13:43:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06fa70d6-c77c-48fa-ab8b-129b1d107736", "record_id": "flaws_cloudtrail:0000455:06fa70d6-c77c-48fa-ab8b-129b1d107736", "row_index": 455, "timestamp": "2019-06-19T13:43:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06fa70d6-c77c-48fa-ab8b-129b1d107736", "eventTime": "2019-06-19T13:43:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef084113-a9ad-40bb-abab-2dee0aff75fa", "record_id": "flaws_cloudtrail:0000456:ef084113-a9ad-40bb-abab-2dee0aff75fa", "row_index": 456, "timestamp": "2019-06-19T13:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef084113-a9ad-40bb-abab-2dee0aff75fa", "eventTime": "2019-06-19T13:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef084113-a9ad-40bb-abab-2dee0aff75fa", "record_id": "flaws_cloudtrail:0000457:ef084113-a9ad-40bb-abab-2dee0aff75fa", "row_index": 457, "timestamp": "2019-06-19T13:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "127.5.251.187", "user_agent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef084113-a9ad-40bb-abab-2dee0aff75fa", "eventTime": "2019-06-19T13:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "127.5.251.187", "userAgent": "aws-cli/1.16.181 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.171", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "record_id": "flaws_cloudtrail:0000458:d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "row_index": 458, "timestamp": "2019-06-19T14:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "eventTime": "2019-06-19T14:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHKGB47Q0Q094LLY2", "expiration": "Jun 19, 2019 8:58:26 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "record_id": "flaws_cloudtrail:0000459:d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "row_index": 459, "timestamp": "2019-06-19T14:26:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c52dc9-8368-45a6-a4f7-caebf6a38a34", "eventTime": "2019-06-19T14:26:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHKGB47Q0Q094LLY2", "expiration": "Jun 19, 2019 8:58:26 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88bc5756-081c-4b3d-9cf7-4e1d384b8788", "record_id": "flaws_cloudtrail:0000460:88bc5756-081c-4b3d-9cf7-4e1d384b8788", "row_index": 460, "timestamp": "2019-06-19T14:50:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88bc5756-081c-4b3d-9cf7-4e1d384b8788", "eventTime": "2019-06-19T14:50:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88bc5756-081c-4b3d-9cf7-4e1d384b8788", "record_id": "flaws_cloudtrail:0000461:88bc5756-081c-4b3d-9cf7-4e1d384b8788", "row_index": 461, "timestamp": "2019-06-19T14:50:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88bc5756-081c-4b3d-9cf7-4e1d384b8788", "eventTime": "2019-06-19T14:50:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0238d47d-5680-469a-90c3-f4ef244c1403", "record_id": "flaws_cloudtrail:0000462:0238d47d-5680-469a-90c3-f4ef244c1403", "row_index": 462, "timestamp": "2019-06-19T15:00:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0238d47d-5680-469a-90c3-f4ef244c1403", "eventTime": "2019-06-19T15:00:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0238d47d-5680-469a-90c3-f4ef244c1403", "record_id": "flaws_cloudtrail:0000463:0238d47d-5680-469a-90c3-f4ef244c1403", "row_index": 463, "timestamp": "2019-06-19T15:00:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0238d47d-5680-469a-90c3-f4ef244c1403", "eventTime": "2019-06-19T15:00:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "[aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9a7a8cb-0442-42e4-a78f-276041b5a94b", "record_id": "flaws_cloudtrail:0000464:b9a7a8cb-0442-42e4-a78f-276041b5a94b", "row_index": 464, "timestamp": "2019-06-19T15:12:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9a7a8cb-0442-42e4-a78f-276041b5a94b", "eventTime": "2019-06-19T15:12:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9a7a8cb-0442-42e4-a78f-276041b5a94b", "record_id": "flaws_cloudtrail:0000465:b9a7a8cb-0442-42e4-a78f-276041b5a94b", "row_index": 465, "timestamp": "2019-06-19T15:12:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9a7a8cb-0442-42e4-a78f-276041b5a94b", "eventTime": "2019-06-19T15:12:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "record_id": "flaws_cloudtrail:0000466:2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "row_index": 466, "timestamp": "2019-06-19T15:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "eventTime": "2019-06-19T15:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "record_id": "flaws_cloudtrail:0000467:2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "row_index": 467, "timestamp": "2019-06-19T15:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac4edae-dab3-4be9-9e29-29bfa0c3a4a6", "eventTime": "2019-06-19T15:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e432491-0d19-4b93-89c5-68e502d33de3", "record_id": "flaws_cloudtrail:0000468:4e432491-0d19-4b93-89c5-68e502d33de3", "row_index": 468, "timestamp": "2019-06-19T15:16:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e432491-0d19-4b93-89c5-68e502d33de3", "eventTime": "2019-06-19T15:16:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e432491-0d19-4b93-89c5-68e502d33de3", "record_id": "flaws_cloudtrail:0000469:4e432491-0d19-4b93-89c5-68e502d33de3", "row_index": 469, "timestamp": "2019-06-19T15:16:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e432491-0d19-4b93-89c5-68e502d33de3", "eventTime": "2019-06-19T15:16:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f38d91-25b2-4581-bd2b-9590435c4cdf", "record_id": "flaws_cloudtrail:0000470:f7f38d91-25b2-4581-bd2b-9590435c4cdf", "row_index": 470, "timestamp": "2019-06-19T15:17:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f38d91-25b2-4581-bd2b-9590435c4cdf", "eventTime": "2019-06-19T15:17:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f38d91-25b2-4581-bd2b-9590435c4cdf", "record_id": "flaws_cloudtrail:0000471:f7f38d91-25b2-4581-bd2b-9590435c4cdf", "row_index": 471, "timestamp": "2019-06-19T15:17:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f38d91-25b2-4581-bd2b-9590435c4cdf", "eventTime": "2019-06-19T15:17:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15c16251-d932-4265-b26d-fa5d96636f90", "record_id": "flaws_cloudtrail:0000472:15c16251-d932-4265-b26d-fa5d96636f90", "row_index": 472, "timestamp": "2019-06-19T15:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15c16251-d932-4265-b26d-fa5d96636f90", "eventTime": "2019-06-19T15:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15c16251-d932-4265-b26d-fa5d96636f90", "record_id": "flaws_cloudtrail:0000473:15c16251-d932-4265-b26d-fa5d96636f90", "row_index": 473, "timestamp": "2019-06-19T15:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15c16251-d932-4265-b26d-fa5d96636f90", "eventTime": "2019-06-19T15:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ecc9e2-6ee5-4d82-99d5-791643f8397", "record_id": "flaws_cloudtrail:0000474:f0ecc9e2-6ee5-4d82-99d5-791643f8397", "row_index": 474, "timestamp": "2019-06-19T15:19:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ecc9e2-6ee5-4d82-99d5-791643f8397", "eventTime": "2019-06-19T15:19:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqWDJEaGk0Mk1TeU5UL3B3bzRHcDFWK3NCeDk4b3RQWUtteFNRM0s4SHR5SWtPTW1DQ1VmL3NINjZKU1FSZHVUb01NVXBrNDJHODB4VStPdWlrVG9ndE16MmJHcHFadE5LVFVnRi9jaDQ1b25FaDhQbitPbW9ndkdVZzNjTlNscDFxdlZBcUlsUko5OU1hd1haMTVWOWYzYzJXakRwa3BjSVMzK2gzTS9JUEs2MzMvb3B2bVBUT2pYaU5xNStIVzhMaStUcWdsT2o0ZXFjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ecc9e2-6ee5-4d82-99d5-791643f8397", "record_id": "flaws_cloudtrail:0000475:f0ecc9e2-6ee5-4d82-99d5-791643f8397", "row_index": 475, "timestamp": "2019-06-19T15:19:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ecc9e2-6ee5-4d82-99d5-791643f8397", "eventTime": "2019-06-19T15:19:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqWDJEaGk0Mk1TeU5UL3B3bzRHcDFWK3NCeDk4b3RQWUtteFNRM0s4SHR5SWtPTW1DQ1VmL3NINjZKU1FSZHVUb01NVXBrNDJHODB4VStPdWlrVG9ndE16MmJHcHFadE5LVFVnRi9jaDQ1b25FaDhQbitPbW9ndkdVZzNjTlNscDFxdlZBcUlsUko5OU1hd1haMTVWOWYzYzJXakRwa3BjSVMzK2gzTS9JUEs2MzMvb3B2bVBUT2pYaU5xNStIVzhMaStUcWdsT2o0ZXFjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c634264-b0bd-4b74-b898-76cbbd4bcb12", "record_id": "flaws_cloudtrail:0000476:3c634264-b0bd-4b74-b898-76cbbd4bcb12", "row_index": 476, "timestamp": "2019-06-19T15:19:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c634264-b0bd-4b74-b898-76cbbd4bcb12", "eventTime": "2019-06-19T15:19:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJMDluU1RDTkpGVmU4SFdEY2dZZTh3UzBiYUpnSHNJUWgvaVFVMVAwQkkrVk51TG1UQTlHUGdESitBYThOTmZtUDRQV3ZNeDh4OCtNV3YzSjVVSVI2MVBGRmVwQk5kUFV0N0c5MEFkamRPd3IvbDFNUWNCNVpjaHZrbUFKV2lOT2VPdTVNRVNyUGZXd29IcGFPeXFYM0FQUmJpS0FyOG1QUGcyc3dLb1pFa2I0c1UrRzV2VjQ1bkx6THprRjBvVDQwUnVzSkU2YTFES0ExUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c634264-b0bd-4b74-b898-76cbbd4bcb12", "record_id": "flaws_cloudtrail:0000477:3c634264-b0bd-4b74-b898-76cbbd4bcb12", "row_index": 477, "timestamp": "2019-06-19T15:19:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c634264-b0bd-4b74-b898-76cbbd4bcb12", "eventTime": "2019-06-19T15:19:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJMDluU1RDTkpGVmU4SFdEY2dZZTh3UzBiYUpnSHNJUWgvaVFVMVAwQkkrVk51TG1UQTlHUGdESitBYThOTmZtUDRQV3ZNeDh4OCtNV3YzSjVVSVI2MVBGRmVwQk5kUFV0N0c5MEFkamRPd3IvbDFNUWNCNVpjaHZrbUFKV2lOT2VPdTVNRVNyUGZXd29IcGFPeXFYM0FQUmJpS0FyOG1QUGcyc3dLb1pFa2I0c1UrRzV2VjQ1bkx6THprRjBvVDQwUnVzSkU2YTFES0ExUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "record_id": "flaws_cloudtrail:0000478:38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "row_index": 478, "timestamp": "2019-06-19T15:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "eventTime": "2019-06-19T15:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1OWd2ZkxETGF4cy9QYzdYd0tVc3BjNldTTjNZc3lGTHg0Q0lIWDJOYXpGNHBSVmtCcHErczdWR2ZVZGg1WUZXR0hWZVFkRnNiL3REdWtYblhZODBBbVU3ZFlNNTh2U3pWMVlRZ1A2a0oxbzQ5ekdhZXpHVTB2Y0w2cDFJOGFVYkdHUys1d2FTeW14VHIvNFhmS3RNejVPaS95NkpCZitFcmxlWHMyNWhTNFM2UWo2SU5vSDJkdXBGWEk2TXRUUGhIelpiNDZRcjFEQ042Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "record_id": "flaws_cloudtrail:0000479:38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "row_index": 479, "timestamp": "2019-06-19T15:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38b5a299-5fe9-4a86-bcd8-19ecbc82fd06", "eventTime": "2019-06-19T15:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1OWd2ZkxETGF4cy9QYzdYd0tVc3BjNldTTjNZc3lGTHg0Q0lIWDJOYXpGNHBSVmtCcHErczdWR2ZVZGg1WUZXR0hWZVFkRnNiL3REdWtYblhZODBBbVU3ZFlNNTh2U3pWMVlRZ1A2a0oxbzQ5ekdhZXpHVTB2Y0w2cDFJOGFVYkdHUys1d2FTeW14VHIvNFhmS3RNejVPaS95NkpCZitFcmxlWHMyNWhTNFM2UWo2SU5vSDJkdXBGWEk2TXRUUGhIelpiNDZRcjFEQ042Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49c3b408-302e-400d-93df-5d4c150bf3c5", "record_id": "flaws_cloudtrail:0000480:49c3b408-302e-400d-93df-5d4c150bf3c5", "row_index": 480, "timestamp": "2019-06-19T15:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49c3b408-302e-400d-93df-5d4c150bf3c5", "eventTime": "2019-06-19T15:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuK0RoM2lEbmdWZitaY2QzOUFGSThOeEIxTW95VmFyRXF6a2Z5TUhUL3hnd3RXc2o2dUszYWJmbXIwRFlCMlZXMjgxL0ZicUxzVEowTTVpcEFLNUlFZVZTNWx1VjNkU3JHSTlObnBHNTMyM1FBTmdvV21MbzdIcG1kOW1ydWc3RktQUmpCL0FIY0d2c0k0a1RVWUlpSE9VbDdsWXVIY2ZFNTlpdzlaWWlGTTl0aVowRjdIR0JKUTFqQks3dENUSDMrRmM4aFBVRlVMYTFGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49c3b408-302e-400d-93df-5d4c150bf3c5", "record_id": "flaws_cloudtrail:0000481:49c3b408-302e-400d-93df-5d4c150bf3c5", "row_index": 481, "timestamp": "2019-06-19T15:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49c3b408-302e-400d-93df-5d4c150bf3c5", "eventTime": "2019-06-19T15:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuK0RoM2lEbmdWZitaY2QzOUFGSThOeEIxTW95VmFyRXF6a2Z5TUhUL3hnd3RXc2o2dUszYWJmbXIwRFlCMlZXMjgxL0ZicUxzVEowTTVpcEFLNUlFZVZTNWx1VjNkU3JHSTlObnBHNTMyM1FBTmdvV21MbzdIcG1kOW1ydWc3RktQUmpCL0FIY0d2c0k0a1RVWUlpSE9VbDdsWXVIY2ZFNTlpdzlaWWlGTTl0aVowRjdIR0JKUTFqQks3dENUSDMrRmM4aFBVRlVMYTFGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7257d6c5-e25b-46bc-b8df-f01411e633fe", "record_id": "flaws_cloudtrail:0000482:7257d6c5-e25b-46bc-b8df-f01411e633fe", "row_index": 482, "timestamp": "2019-06-19T15:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7257d6c5-e25b-46bc-b8df-f01411e633fe", "eventTime": "2019-06-19T15:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHU3NUSGNNYm9mVUJHWUtYNVZXMTRvRmJTNUp3emdraW5TS2hIY3ljWjZISGlIU2pucUpZNkJ2ZXc5N0E0a0I2V2xsWUllczV0R0R3eUovUEZqYTVXRnBmVnUzR0Z3Q1R0dU5sODIvQ3loZ2daRzQzRjRBT0FlRmV1OEJRQmZsV0xjVGE4dVB5bTdIRUtaelZBejExbnArVTBzR2FIa3pUSVQyeWYxSDRRa1pGQitiY0NPTDVIUEtpcER0SGtnRFlYNzFaeldFVU9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7257d6c5-e25b-46bc-b8df-f01411e633fe", "record_id": "flaws_cloudtrail:0000483:7257d6c5-e25b-46bc-b8df-f01411e633fe", "row_index": 483, "timestamp": "2019-06-19T15:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7257d6c5-e25b-46bc-b8df-f01411e633fe", "eventTime": "2019-06-19T15:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHU3NUSGNNYm9mVUJHWUtYNVZXMTRvRmJTNUp3emdraW5TS2hIY3ljWjZISGlIU2pucUpZNkJ2ZXc5N0E0a0I2V2xsWUllczV0R0R3eUovUEZqYTVXRnBmVnUzR0Z3Q1R0dU5sODIvQ3loZ2daRzQzRjRBT0FlRmV1OEJRQmZsV0xjVGE4dVB5bTdIRUtaelZBejExbnArVTBzR2FIa3pUSVQyeWYxSDRRa1pGQitiY0NPTDVIUEtpcER0SGtnRFlYNzFaeldFVU9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c410703-d53c-4b66-9851-c346c52170da", "record_id": "flaws_cloudtrail:0000484:c410703-d53c-4b66-9851-c346c52170da", "row_index": 484, "timestamp": "2019-06-19T15:19:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c410703-d53c-4b66-9851-c346c52170da", "eventTime": "2019-06-19T15:19:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UXJweGY5MnZrMWZzNlJJb3NDbU8wMTNXZFdYR00yOEp0VkdYOEtOUGhESVhDbG85bnlSVEhnaENTV2ZvNDBSaXduWmRRTXBkbllza1FoaEwvNlJvNU42U2FBK2NiVG9aNE5UbTFtcmdhVkFOQkFIVStXV1Y1cXFaRHUwUmVHTkFGcmg4TEFpZjBjYmEwanZkTE1nM0lJVHlIbUtpRThteFBxMTQ0eXk3MEx4NzEvSW9OeWhPeUVuT1g0RXU3bnhEZkNwbVhHOTNDUUVldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c410703-d53c-4b66-9851-c346c52170da", "record_id": "flaws_cloudtrail:0000485:c410703-d53c-4b66-9851-c346c52170da", "row_index": 485, "timestamp": "2019-06-19T15:19:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c410703-d53c-4b66-9851-c346c52170da", "eventTime": "2019-06-19T15:19:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UXJweGY5MnZrMWZzNlJJb3NDbU8wMTNXZFdYR00yOEp0VkdYOEtOUGhESVhDbG85bnlSVEhnaENTV2ZvNDBSaXduWmRRTXBkbllza1FoaEwvNlJvNU42U2FBK2NiVG9aNE5UbTFtcmdhVkFOQkFIVStXV1Y1cXFaRHUwUmVHTkFGcmg4TEFpZjBjYmEwanZkTE1nM0lJVHlIbUtpRThteFBxMTQ0eXk3MEx4NzEvSW9OeWhPeUVuT1g0RXU3bnhEZkNwbVhHOTNDUUVldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba5f458-67cb-4f9b-90a4-35db574021a", "record_id": "flaws_cloudtrail:0000486:eba5f458-67cb-4f9b-90a4-35db574021a", "row_index": 486, "timestamp": "2019-06-19T15:19:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba5f458-67cb-4f9b-90a4-35db574021a", "eventTime": "2019-06-19T15:19:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIajV4RmxTWFhzeXJBV3Q3WTZIbGJ4RExzVjA5VTYzclhIUElTaHdZWmptSTEzY0p2cW8vazN0dnEvZ2x0Mmh5cWd4OG0xRnh3WnRleVJyOE9jRkF1UVp1NDRob2hsVHV3ZTZoM1hwUCtGKzhoU0tkU1dhTTUycmZPd1N1cit2S2Q2TjJOam9nUEgxZ1ppMy9kdmpuaWIvQUhSdDdWNGtUUlRSejFvU1ZFUnRLbFVOdHBNT3pXRkdTRXJSVkFmanZNMXluMWE4a3lFMGVCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba5f458-67cb-4f9b-90a4-35db574021a", "record_id": "flaws_cloudtrail:0000487:eba5f458-67cb-4f9b-90a4-35db574021a", "row_index": 487, "timestamp": "2019-06-19T15:19:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba5f458-67cb-4f9b-90a4-35db574021a", "eventTime": "2019-06-19T15:19:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIajV4RmxTWFhzeXJBV3Q3WTZIbGJ4RExzVjA5VTYzclhIUElTaHdZWmptSTEzY0p2cW8vazN0dnEvZ2x0Mmh5cWd4OG0xRnh3WnRleVJyOE9jRkF1UVp1NDRob2hsVHV3ZTZoM1hwUCtGKzhoU0tkU1dhTTUycmZPd1N1cit2S2Q2TjJOam9nUEgxZ1ppMy9kdmpuaWIvQUhSdDdWNGtUUlRSejFvU1ZFUnRLbFVOdHBNT3pXRkdTRXJSVkFmanZNMXluMWE4a3lFMGVCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c55b53-858d-448e-affa-cb18453ca38e", "record_id": "flaws_cloudtrail:0000488:05c55b53-858d-448e-affa-cb18453ca38e", "row_index": 488, "timestamp": "2019-06-19T15:19:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c55b53-858d-448e-affa-cb18453ca38e", "eventTime": "2019-06-19T15:19:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRCt0VHd1VFVZNVVEZGludWhvWDVMcEQ5bjFDZ1Z4YnZMTEtQUitLaXl0QVJOYXB2WThYVW9Cckx4Mnc2S0dwQWtGek14QkdVZE92Nng2YnlMdzdRaDVSQ1R1bmRiK2NLSk90MzJld0hZSjhrc0pHTkZ6YjBoYjI1aTAxVTd0MDEvbmtjSzVtSXpSMlJyZldybUhIWkRLZmU5VjFHUEthUDdYRHpESjBXN3VZYXZtYW5iRi9GSTNIcCtVQ2NxZkVLYndZeTZwazRSSXJOQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c55b53-858d-448e-affa-cb18453ca38e", "record_id": "flaws_cloudtrail:0000489:05c55b53-858d-448e-affa-cb18453ca38e", "row_index": 489, "timestamp": "2019-06-19T15:19:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c55b53-858d-448e-affa-cb18453ca38e", "eventTime": "2019-06-19T15:19:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRCt0VHd1VFVZNVVEZGludWhvWDVMcEQ5bjFDZ1Z4YnZMTEtQUitLaXl0QVJOYXB2WThYVW9Cckx4Mnc2S0dwQWtGek14QkdVZE92Nng2YnlMdzdRaDVSQ1R1bmRiK2NLSk90MzJld0hZSjhrc0pHTkZ6YjBoYjI1aTAxVTd0MDEvbmtjSzVtSXpSMlJyZldybUhIWkRLZmU5VjFHUEthUDdYRHpESjBXN3VZYXZtYW5iRi9GSTNIcCtVQ2NxZkVLYndZeTZwazRSSXJOQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8748cad7-521c-4681-af47-e7372c35cfed", "record_id": "flaws_cloudtrail:0000490:8748cad7-521c-4681-af47-e7372c35cfed", "row_index": 490, "timestamp": "2019-06-19T15:19:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8748cad7-521c-4681-af47-e7372c35cfed", "eventTime": "2019-06-19T15:19:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySlZ1NWhwM1ZoVUVib1RWcXovRm9PSGx0dHd3Z3ZGOVFOQzFRNS91cWJHUkMyWVNBTVhkbkdKT0ZLczYwTCtFYWcvQWk3RHc1Ry9yZEpYL3hVZm9oMEdHSU5GMjNyZlJYQWVsNVdrU0JsaGNNVHJUejErRytUWmNnOVdOVG5OZmFnNzB6U0RTSmpTYTZnWXRpaGw3ajllcExSdTN2OStQY3hNaTJEVUpzTnlvaEpHbzZVREhYYUxQZW9HVUp6M243OTkyWno1VGpoQTg5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8748cad7-521c-4681-af47-e7372c35cfed", "record_id": "flaws_cloudtrail:0000491:8748cad7-521c-4681-af47-e7372c35cfed", "row_index": 491, "timestamp": "2019-06-19T15:19:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8748cad7-521c-4681-af47-e7372c35cfed", "eventTime": "2019-06-19T15:19:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySlZ1NWhwM1ZoVUVib1RWcXovRm9PSGx0dHd3Z3ZGOVFOQzFRNS91cWJHUkMyWVNBTVhkbkdKT0ZLczYwTCtFYWcvQWk3RHc1Ry9yZEpYL3hVZm9oMEdHSU5GMjNyZlJYQWVsNVdrU0JsaGNNVHJUejErRytUWmNnOVdOVG5OZmFnNzB6U0RTSmpTYTZnWXRpaGw3ajllcExSdTN2OStQY3hNaTJEVUpzTnlvaEpHbzZVREhYYUxQZW9HVUp6M243OTkyWno1VGpoQTg5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05f1597-0f35-4f62-8533-790bab933af5", "record_id": "flaws_cloudtrail:0000492:a05f1597-0f35-4f62-8533-790bab933af5", "row_index": 492, "timestamp": "2019-06-19T15:19:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05f1597-0f35-4f62-8533-790bab933af5", "eventTime": "2019-06-19T15:19:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMK3NudWxCZUVPTXZHN2xjRERMSzFqV29CTkJDU3FUazJPeDYvMVFObmhCL2tWc2NOUUdpMndnZmRjZmsxb2o1T0dXN2dPQ0VyY3FDU09DMFIvbEE0T0hBcmc1elBLSlFvbVVFb1hSck5TbGdtaDVwRFhMTHRhTmowT1B6S3JNR2w1UGY2bzNZcE1ubnJEK2lLd1J2ZWlUbmlXOFY1N3ZBOUVQTDdBZ1Q2TWdVVmlKNmNZTjZ4VUQrNWJERFc0WndTSkM4dlhLYWRhaUZUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05f1597-0f35-4f62-8533-790bab933af5", "record_id": "flaws_cloudtrail:0000493:a05f1597-0f35-4f62-8533-790bab933af5", "row_index": 493, "timestamp": "2019-06-19T15:19:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05f1597-0f35-4f62-8533-790bab933af5", "eventTime": "2019-06-19T15:19:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMK3NudWxCZUVPTXZHN2xjRERMSzFqV29CTkJDU3FUazJPeDYvMVFObmhCL2tWc2NOUUdpMndnZmRjZmsxb2o1T0dXN2dPQ0VyY3FDU09DMFIvbEE0T0hBcmc1elBLSlFvbVVFb1hSck5TbGdtaDVwRFhMTHRhTmowT1B6S3JNR2w1UGY2bzNZcE1ubnJEK2lLd1J2ZWlUbmlXOFY1N3ZBOUVQTDdBZ1Q2TWdVVmlKNmNZTjZ4VUQrNWJERFc0WndTSkM4dlhLYWRhaUZUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f7aad4-cbf9-433a-bd7c-d96634903895", "record_id": "flaws_cloudtrail:0000494:42f7aad4-cbf9-433a-bd7c-d96634903895", "row_index": 494, "timestamp": "2019-06-19T15:19:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f7aad4-cbf9-433a-bd7c-d96634903895", "eventTime": "2019-06-19T15:19:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpdUVDajdtNlJIZFlqR1JDaEFCL0s1emplaFI4V04zb20wTzdOWXFXbXQ0dzAzK25hUFRQSlY1eERHbm82dTN3ZHZGRE1MaWljUTVZV25IeUdvNG50RHFKSmU1Z0lQZUtKc0x3amQwc0hpNlp0ajlGODlZSkxXZEZJN29Qa2ZoeVo4Z2tqSjE0eVFpUXM0bkJDUEdOT2JLc21xaTVXYzZpYUt4ektPMTRPRGVueU1lWEpZNDhudDRMQm9tWTRqaWpLcGJ5RmVvYll6VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f7aad4-cbf9-433a-bd7c-d96634903895", "record_id": "flaws_cloudtrail:0000495:42f7aad4-cbf9-433a-bd7c-d96634903895", "row_index": 495, "timestamp": "2019-06-19T15:19:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f7aad4-cbf9-433a-bd7c-d96634903895", "eventTime": "2019-06-19T15:19:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpdUVDajdtNlJIZFlqR1JDaEFCL0s1emplaFI4V04zb20wTzdOWXFXbXQ0dzAzK25hUFRQSlY1eERHbm82dTN3ZHZGRE1MaWljUTVZV25IeUdvNG50RHFKSmU1Z0lQZUtKc0x3amQwc0hpNlp0ajlGODlZSkxXZEZJN29Qa2ZoeVo4Z2tqSjE0eVFpUXM0bkJDUEdOT2JLc21xaTVXYzZpYUt4ektPMTRPRGVueU1lWEpZNDhudDRMQm9tWTRqaWpLcGJ5RmVvYll6VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501992eb7-ab37-499d-9c0c-ba3c76091315", "record_id": "flaws_cloudtrail:0000496:501992eb7-ab37-499d-9c0c-ba3c76091315", "row_index": 496, "timestamp": "2019-06-19T15:19:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501992eb7-ab37-499d-9c0c-ba3c76091315", "eventTime": "2019-06-19T15:19:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRU43RU1tT25ybXdrRnRoQXVENHJqeWJsc0cwT2lSa3BHcXFqeWdPM3gzSDBhQWc4b1BLUEc3SWdnRHVManlrMXRxaTRGRU1uWnNXbi9RbVVLbjFtenhmL2hHSzBrOGRFTVR0aVcxRXVBcnRLVVhDK1dvQmxkWkcvVHRDU3AzaHh1dTVDQlR6UUZVWnhkNUN3TUdoVzRkcUhINTRKbTFVN3A2c3FvWEY0QlpRMEVIY2k2MkNEa1F6czAxNGdZeTF1TEZ5TG1HbU5yN0dGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501992eb7-ab37-499d-9c0c-ba3c76091315", "record_id": "flaws_cloudtrail:0000497:501992eb7-ab37-499d-9c0c-ba3c76091315", "row_index": 497, "timestamp": "2019-06-19T15:19:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501992eb7-ab37-499d-9c0c-ba3c76091315", "eventTime": "2019-06-19T15:19:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSRU43RU1tT25ybXdrRnRoQXVENHJqeWJsc0cwT2lSa3BHcXFqeWdPM3gzSDBhQWc4b1BLUEc3SWdnRHVManlrMXRxaTRGRU1uWnNXbi9RbVVLbjFtenhmL2hHSzBrOGRFTVR0aVcxRXVBcnRLVVhDK1dvQmxkWkcvVHRDU3AzaHh1dTVDQlR6UUZVWnhkNUN3TUdoVzRkcUhINTRKbTFVN3A2c3FvWEY0QlpRMEVIY2k2MkNEa1F6czAxNGdZeTF1TEZ5TG1HbU5yN0dGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad9ca521-2dc6-4182-bfce-e8271a47f20f", "record_id": "flaws_cloudtrail:0000498:ad9ca521-2dc6-4182-bfce-e8271a47f20f", "row_index": 498, "timestamp": "2019-06-19T15:19:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad9ca521-2dc6-4182-bfce-e8271a47f20f", "eventTime": "2019-06-19T15:19:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWXpidWJSbEZTV3Q1K01iUjRZcHFRdnlaV1R5bVplVk4wUUkxai8rVE12SU1lQTByTnVzdE56cU04Y2lpdTVZa1lJd09PcGU5d1ZYdm94c2JBM0hwQk5ZY2pBT2F4L0pZZDFpbEVOSnFjZ3kzMkdDODBETTdLanRxM2ljQVpIMG5ReXVWeDRNZ1o5Vk1qMlJidTVOS3kzcHJ3ZHdXT2czenA3SS9meG5tTXdVSGtWTEJrKzFzVms5dzFYampINXRBY0k0Ymptb0FIdVB5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad9ca521-2dc6-4182-bfce-e8271a47f20f", "record_id": "flaws_cloudtrail:0000499:ad9ca521-2dc6-4182-bfce-e8271a47f20f", "row_index": 499, "timestamp": "2019-06-19T15:19:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad9ca521-2dc6-4182-bfce-e8271a47f20f", "eventTime": "2019-06-19T15:19:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWXpidWJSbEZTV3Q1K01iUjRZcHFRdnlaV1R5bVplVk4wUUkxai8rVE12SU1lQTByTnVzdE56cU04Y2lpdTVZa1lJd09PcGU5d1ZYdm94c2JBM0hwQk5ZY2pBT2F4L0pZZDFpbEVOSnFjZ3kzMkdDODBETTdLanRxM2ljQVpIMG5ReXVWeDRNZ1o5Vk1qMlJidTVOS3kzcHJ3ZHdXT2czenA3SS9meG5tTXdVSGtWTEJrKzFzVms5dzFYampINXRBY0k0Ymptb0FIdVB5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "record_id": "flaws_cloudtrail:0000500:3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "row_index": 500, "timestamp": "2019-06-19T15:19:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "eventTime": "2019-06-19T15:19:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdHBMM05POXFsY3ROWGQzRlVsSlNQZmJINEZ2NHg2MjduOXBJUldGQlhqcjdoelhscXJPRG9qZjdmRFNsUysrTzZ1Y25Ld0l6dEw3MWVFWFBkeGdYOXRod2ZwU3JxY0U1K1dVcjhiemVRR29XWlVreVJTbTlqQ2h0aGl4UEdJZGhZWUsrak9ZWXQ2M3pyQ0duYWdRUHZIb2s1ZHFmUnJObldVSC82M2J6RHg3RXZSTTVuMEk0WGFIMFVWVE1lQ0FBWmZJaXlWZkFSSWRXUUtuMW9reXc1Rlpya3ZDQnlrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "record_id": "flaws_cloudtrail:0000501:3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "row_index": 501, "timestamp": "2019-06-19T15:19:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa8fded-49ee-4cf6-8666-396b3c4bc5ef", "eventTime": "2019-06-19T15:19:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdHBMM05POXFsY3ROWGQzRlVsSlNQZmJINEZ2NHg2MjduOXBJUldGQlhqcjdoelhscXJPRG9qZjdmRFNsUysrTzZ1Y25Ld0l6dEw3MWVFWFBkeGdYOXRod2ZwU3JxY0U1K1dVcjhiemVRR29XWlVreVJTbTlqQ2h0aGl4UEdJZGhZWUsrak9ZWXQ2M3pyQ0duYWdRUHZIb2s1ZHFmUnJObldVSC82M2J6RHg3RXZSTTVuMEk0WGFIMFVWVE1lQ0FBWmZJaXlWZkFSSWRXUUtuMW9reXc1Rlpya3ZDQnlrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a784e9b2-f16c-4f65-aacc-640523aa8a1e", "record_id": "flaws_cloudtrail:0000502:a784e9b2-f16c-4f65-aacc-640523aa8a1e", "row_index": 502, "timestamp": "2019-06-19T15:19:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a784e9b2-f16c-4f65-aacc-640523aa8a1e", "eventTime": "2019-06-19T15:19:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrRXlVUURHS0JzTWNzMVgrQWVMbVdsc1NwTjVnTkp4KzJyMmUrUDk3NDR2WkU3M2VZUjlMc3llTExZNEJEdU9OM3F1VjVzLzNXb1RtcW55cm1XVHhRNzdVZkZPM2s5WTFqSG9FS3FGajhtbWdmZkI3bkJmZEFZR254em92VU5CdmljTkRQVEYxcUxpTkpuckNvZWZvVmM1WmhZM0prbnRJSWFtdkxYMnM4ODFoa014T05MR2FMeG54TlhEWEI0bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37764-6fcf-4ef4-96da-08764d8037b6", "record_id": "flaws_cloudtrail:0000503:37764-6fcf-4ef4-96da-08764d8037b6", "row_index": 503, "timestamp": "2019-06-19T15:19:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37764-6fcf-4ef4-96da-08764d8037b6", "eventTime": "2019-06-19T15:19:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJajdhUWsyL3NhaWgrMUpCZERsQ2JxR3FCRG0xaDhud3BYeFJzZnlLR0NlejF6dFd4eFNwdkZHRHZieEU3dk9nRnFHN2M3VEFTN3RJL3dTbG01bnV1S0llWXBndU00OWo5dVhtYlNiYWFaT3cwV05ZSjRMa3l1S1IzQ1hVcHV1akVKc0N6bUszclYzMzlpT01pRHltRWdVRGJGaWF1SWVRcklNUCt1U1E1VU9tT2lyQU5ma1pUWU1RTElIblVNdzZ6VjRDb050by9qSms0cVRlNHZ1bEYzdytIWFNXa0JFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a784e9b2-f16c-4f65-aacc-640523aa8a1e", "record_id": "flaws_cloudtrail:0000504:a784e9b2-f16c-4f65-aacc-640523aa8a1e", "row_index": 504, "timestamp": "2019-06-19T15:19:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a784e9b2-f16c-4f65-aacc-640523aa8a1e", "eventTime": "2019-06-19T15:19:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrRXlVUURHS0JzTWNzMVgrQWVMbVdsc1NwTjVnTkp4KzJyMmUrUDk3NDR2WkU3M2VZUjlMc3llTExZNEJEdU9OM3F1VjVzLzNXb1RtcW55cm1XVHhRNzdVZkZPM2s5WTFqSG9FS3FGajhtbWdmZkI3bkJmZEFZR254em92VU5CdmljTkRQVEYxcUxpTkpuckNvZWZvVmM1WmhZM0prbnRJSWFtdkxYMnM4ODFoa014T05MR2FMeG54TlhEWEI0bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37764-6fcf-4ef4-96da-08764d8037b6", "record_id": "flaws_cloudtrail:0000505:37764-6fcf-4ef4-96da-08764d8037b6", "row_index": 505, "timestamp": "2019-06-19T15:19:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37764-6fcf-4ef4-96da-08764d8037b6", "eventTime": "2019-06-19T15:19:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJajdhUWsyL3NhaWgrMUpCZERsQ2JxR3FCRG0xaDhud3BYeFJzZnlLR0NlejF6dFd4eFNwdkZHRHZieEU3dk9nRnFHN2M3VEFTN3RJL3dTbG01bnV1S0llWXBndU00OWo5dVhtYlNiYWFaT3cwV05ZSjRMa3l1S1IzQ1hVcHV1akVKc0N6bUszclYzMzlpT01pRHltRWdVRGJGaWF1SWVRcklNUCt1U1E1VU9tT2lyQU5ma1pUWU1RTElIblVNdzZ6VjRDb050by9qSms0cVRlNHZ1bEYzdytIWFNXa0JFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "record_id": "flaws_cloudtrail:0000506:7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "row_index": 506, "timestamp": "2019-06-19T15:19:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "eventTime": "2019-06-19T15:19:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrdktCZE54Mm9XY2M4QmRDZ1JacnIyanA1YkhCbkFXWVFxNTlSVm8wSkhPOFhldHRNb1E3MUxFL3pkUnRuOFdWZEZYc24wMkJLZ0tkUE9IaXZoZkRZR1p0NXZrS1FPcjd2NGsxSUtra3RCOTNKb1A3NXpZcjZONVJ6UVVqbzdoM1diU1o2YVF1WFFjRTdJTmpZeVFldnN6LzdiYWcwMjR4TE1DVkl5MmczdVpKTTUrZlp3UkJKNnozSTNaaGV6Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "record_id": "flaws_cloudtrail:0000507:7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "row_index": 507, "timestamp": "2019-06-19T15:19:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa7ff47-abf0-416a-9a1e-e890d0ccea8c", "eventTime": "2019-06-19T15:19:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrdktCZE54Mm9XY2M4QmRDZ1JacnIyanA1YkhCbkFXWVFxNTlSVm8wSkhPOFhldHRNb1E3MUxFL3pkUnRuOFdWZEZYc24wMkJLZ0tkUE9IaXZoZkRZR1p0NXZrS1FPcjd2NGsxSUtra3RCOTNKb1A3NXpZcjZONVJ6UVVqbzdoM1diU1o2YVF1WFFjRTdJTmpZeVFldnN6LzdiYWcwMjR4TE1DVkl5MmczdVpKTTUrZlp3UkJKNnozSTNaaGV6Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "record_id": "flaws_cloudtrail:0000508:565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "row_index": 508, "timestamp": "2019-06-19T15:19:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "eventTime": "2019-06-19T15:19:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5N3FhQkZnTXREU3BHcWFKYXFvTXZoTTE3NzBMZkt6MHhJWFJrTHBoeDhrUE5vRFI1MWxCaWVmZElLTnQ0SDQzQzZQcS9JdWRNQmJtY1piNUJXdHU0Y1BSWnAwSUdDTVdhbmRUZFVOTFk4WS9ybHMyaFVNM3pRUFgrcElmOVV5UDBKbWExMEU3UXUrWE1WRDFvMWdINkxuaVJvd3d0aTgzY0xSazZMb3F4blI5czV2ODVHL0VTVHlCQ2VURlJWUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "record_id": "flaws_cloudtrail:0000509:c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "row_index": 509, "timestamp": "2019-06-19T15:19:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "eventTime": "2019-06-19T15:19:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoQUVNQ0NTNkJQeGhhQ05YOXhHbHJRcU5ncFJoaTZ4YlFHeEdYenRWQU15SXFpK2dsOTRQcUl2RGR4MWUydndEbFFVcGJERXM0VXNwazdsWVJjUnlaZWo5UDRqSVBXTE9LbWFlTGUzVURja2Z4dHFnMXMyODZWNzUyMURTTVh1VHNwOWUvYmoyeDVsMGR2Y1Y5Unp2cnZHRERodm9rWlVETDIxdXdUUG5aOWNRcGlPNW9TWmlOOS9mRU11WXhVbkp4MkEvR21JbGVZam55Uno1VElZOVJMVms2b0NKVlVBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "record_id": "flaws_cloudtrail:0000510:565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "row_index": 510, "timestamp": "2019-06-19T15:19:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565c4af6-fd18-4cf4-96d1-79eb4bb38ff0", "eventTime": "2019-06-19T15:19:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5N3FhQkZnTXREU3BHcWFKYXFvTXZoTTE3NzBMZkt6MHhJWFJrTHBoeDhrUE5vRFI1MWxCaWVmZElLTnQ0SDQzQzZQcS9JdWRNQmJtY1piNUJXdHU0Y1BSWnAwSUdDTVdhbmRUZFVOTFk4WS9ybHMyaFVNM3pRUFgrcElmOVV5UDBKbWExMEU3UXUrWE1WRDFvMWdINkxuaVJvd3d0aTgzY0xSazZMb3F4blI5czV2ODVHL0VTVHlCQ2VURlJWUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "record_id": "flaws_cloudtrail:0000511:c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "row_index": 511, "timestamp": "2019-06-19T15:19:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e0ab6d-0831-487c-ba3c-f47808f2b2c2", "eventTime": "2019-06-19T15:19:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoQUVNQ0NTNkJQeGhhQ05YOXhHbHJRcU5ncFJoaTZ4YlFHeEdYenRWQU15SXFpK2dsOTRQcUl2RGR4MWUydndEbFFVcGJERXM0VXNwazdsWVJjUnlaZWo5UDRqSVBXTE9LbWFlTGUzVURja2Z4dHFnMXMyODZWNzUyMURTTVh1VHNwOWUvYmoyeDVsMGR2Y1Y5Unp2cnZHRERodm9rWlVETDIxdXdUUG5aOWNRcGlPNW9TWmlOOS9mRU11WXhVbkp4MkEvR21JbGVZam55Uno1VElZOVJMVms2b0NKVlVBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7713b341-efbe-4401-b44d-b94927ed3c49", "record_id": "flaws_cloudtrail:0000512:7713b341-efbe-4401-b44d-b94927ed3c49", "row_index": 512, "timestamp": "2019-06-19T15:19:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7713b341-efbe-4401-b44d-b94927ed3c49", "eventTime": "2019-06-19T15:19:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTdjNEZ2dnZDcwelh6OXdyWHZ4K2J5V3Bqa1dsYzNJQ3JaYkw5MEtvblZJcEhYVTJaUDdROG9MWGl1YlYvaURQRnd3YzVFYjdrYUtLZmNVelRwN2RjTDhLZ3R5TjU0MjVoUGF4OVYyNW5sUHNlTE9jbkVna1k2ZEhvdVVMQjRYS3VPK0dNZ0V5YmJGeTVvYXh4R256anNHaEJKS2VOeGhRMGdOOXlSZFZEa09xcm9qOGdyc0xNVlBySDErY2hIalo5VnBOQjhKLzR5YjZSVTZYaEdCQ1VOa0x1cFNKZXdzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7713b341-efbe-4401-b44d-b94927ed3c49", "record_id": "flaws_cloudtrail:0000513:7713b341-efbe-4401-b44d-b94927ed3c49", "row_index": 513, "timestamp": "2019-06-19T15:19:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7713b341-efbe-4401-b44d-b94927ed3c49", "eventTime": "2019-06-19T15:19:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTdjNEZ2dnZDcwelh6OXdyWHZ4K2J5V3Bqa1dsYzNJQ3JaYkw5MEtvblZJcEhYVTJaUDdROG9MWGl1YlYvaURQRnd3YzVFYjdrYUtLZmNVelRwN2RjTDhLZ3R5TjU0MjVoUGF4OVYyNW5sUHNlTE9jbkVna1k2ZEhvdVVMQjRYS3VPK0dNZ0V5YmJGeTVvYXh4R256anNHaEJKS2VOeGhRMGdOOXlSZFZEa09xcm9qOGdyc0xNVlBySDErY2hIalo5VnBOQjhKLzR5YjZSVTZYaEdCQ1VOa0x1cFNKZXdzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "631c4ef0-3614-4b8c-9785-fd55fea8712e", "record_id": "flaws_cloudtrail:0000514:631c4ef0-3614-4b8c-9785-fd55fea8712e", "row_index": 514, "timestamp": "2019-06-19T15:19:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "631c4ef0-3614-4b8c-9785-fd55fea8712e", "eventTime": "2019-06-19T15:19:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbmFzZmkwOWo1b1dnMmJCa09DbE1GNDdYbGFSZUJzc29JY0hsay9YM0h4TGtWK2ltSHZoOGF4MVpjRWRQQmowMFlaaGI1VzNNWmRaUW1qdHUxVUhqeEhTdEdaT0pwSTNUbWFmQ1lSY0FsYkQvb1hFSHZ0S1Q1ZXgraEdXRkg3OEZaM3l5SFdab0hFTEpKazJSclRnQTY1cEx1bENQbTBQc3FwTFFEY0Y5eGtJMXhZYkdyL1pmVlNXYWw5WTZRN2xlOS94WnBwOG1SbHVNNE9oMk90YUt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "631c4ef0-3614-4b8c-9785-fd55fea8712e", "record_id": "flaws_cloudtrail:0000515:631c4ef0-3614-4b8c-9785-fd55fea8712e", "row_index": 515, "timestamp": "2019-06-19T15:19:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "631c4ef0-3614-4b8c-9785-fd55fea8712e", "eventTime": "2019-06-19T15:19:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbmFzZmkwOWo1b1dnMmJCa09DbE1GNDdYbGFSZUJzc29JY0hsay9YM0h4TGtWK2ltSHZoOGF4MVpjRWRQQmowMFlaaGI1VzNNWmRaUW1qdHUxVUhqeEhTdEdaT0pwSTNUbWFmQ1lSY0FsYkQvb1hFSHZ0S1Q1ZXgraEdXRkg3OEZaM3l5SFdab0hFTEpKazJSclRnQTY1cEx1bENQbTBQc3FwTFFEY0Y5eGtJMXhZYkdyL1pmVlNXYWw5WTZRN2xlOS94WnBwOG1SbHVNNE9oMk90YUt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d908966e0-38d3-4bd8-ad78-99824a58e", "record_id": "flaws_cloudtrail:0000516:d908966e0-38d3-4bd8-ad78-99824a58e", "row_index": 516, "timestamp": "2019-06-19T15:19:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d908966e0-38d3-4bd8-ad78-99824a58e", "eventTime": "2019-06-19T15:19:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpWDBBMWlKaC9SQkt5L2VYTk1kSDdXYjY0bFpZeTYzV294V3UvUCtQZWVDRXdTVHpOeFIvUXNtMEdac0d0ZVBKT3k3MkRjRGNraTFxaGpSaW8yU3FueUxyY2tqbWZhTks1a2pQMitvOEsxY25hcmVZQTJxRXUzS2x6YWNzSDNIZ0ZEV3B4amw3VUpOYy9LT00raEtveVNEWDNVdEdIcHJPUHdZZE5kKzd3dVN6RWRNbFg1cVY0RUtVVStpUWRTbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99200c73-41a7-4c8c-af4a-d5ae4556bcce", "record_id": "flaws_cloudtrail:0000517:99200c73-41a7-4c8c-af4a-d5ae4556bcce", "row_index": 517, "timestamp": "2019-06-19T15:19:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99200c73-41a7-4c8c-af4a-d5ae4556bcce", "eventTime": "2019-06-19T15:19:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwRitocmRvYWxxcDhoaGt5TVlUOEU3bTRDV1NiOWFWbk5XREhxMEs2Uzh4b2kyMVNyWDdWNE1oYWowV21mbXdMcGltTllaWHArYlM5MlROcXo4di9LY0JPZGVSRWhkcnI5QmFYTjJ0UUgzd2pFTXEvaStFVUVDTGVVUmlXSVdqRFVGSGNpV0lYMXMwT01rV1ZaeG9sRUo1SEZzbmtxNzRuSjhxcWkwY05BdnFmRG1GM1QrQnorTGpZWXU0SVYrZHYvOXFaajNEUDBEOVpOR2tqVHRaMDI4TUZjcXQvVXVFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d908966e0-38d3-4bd8-ad78-99824a58e", "record_id": "flaws_cloudtrail:0000518:d908966e0-38d3-4bd8-ad78-99824a58e", "row_index": 518, "timestamp": "2019-06-19T15:19:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d908966e0-38d3-4bd8-ad78-99824a58e", "eventTime": "2019-06-19T15:19:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpWDBBMWlKaC9SQkt5L2VYTk1kSDdXYjY0bFpZeTYzV294V3UvUCtQZWVDRXdTVHpOeFIvUXNtMEdac0d0ZVBKT3k3MkRjRGNraTFxaGpSaW8yU3FueUxyY2tqbWZhTks1a2pQMitvOEsxY25hcmVZQTJxRXUzS2x6YWNzSDNIZ0ZEV3B4amw3VUpOYy9LT00raEtveVNEWDNVdEdIcHJPUHdZZE5kKzd3dVN6RWRNbFg1cVY0RUtVVStpUWRTbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99200c73-41a7-4c8c-af4a-d5ae4556bcce", "record_id": "flaws_cloudtrail:0000519:99200c73-41a7-4c8c-af4a-d5ae4556bcce", "row_index": 519, "timestamp": "2019-06-19T15:19:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99200c73-41a7-4c8c-af4a-d5ae4556bcce", "eventTime": "2019-06-19T15:19:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwRitocmRvYWxxcDhoaGt5TVlUOEU3bTRDV1NiOWFWbk5XREhxMEs2Uzh4b2kyMVNyWDdWNE1oYWowV21mbXdMcGltTllaWHArYlM5MlROcXo4di9LY0JPZGVSRWhkcnI5QmFYTjJ0UUgzd2pFTXEvaStFVUVDTGVVUmlXSVdqRFVGSGNpV0lYMXMwT01rV1ZaeG9sRUo1SEZzbmtxNzRuSjhxcWkwY05BdnFmRG1GM1QrQnorTGpZWXU0SVYrZHYvOXFaajNEUDBEOVpOR2tqVHRaMDI4TUZjcXQvVXVFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e285ed-28aa-476d-8005-3178f9e7e5e6", "record_id": "flaws_cloudtrail:0000520:23e285ed-28aa-476d-8005-3178f9e7e5e6", "row_index": 520, "timestamp": "2019-06-19T15:20:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e285ed-28aa-476d-8005-3178f9e7e5e6", "eventTime": "2019-06-19T15:20:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e285ed-28aa-476d-8005-3178f9e7e5e6", "record_id": "flaws_cloudtrail:0000521:23e285ed-28aa-476d-8005-3178f9e7e5e6", "row_index": 521, "timestamp": "2019-06-19T15:20:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e285ed-28aa-476d-8005-3178f9e7e5e6", "eventTime": "2019-06-19T15:20:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "record_id": "flaws_cloudtrail:0000522:2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "row_index": 522, "timestamp": "2019-06-19T15:20:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "eventTime": "2019-06-19T15:20:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxVnlndVdMS3BtSSt3UFYzRGdRZGt6eE85Y2FwODE3bkZPVndOOXJvbmhyTU13dFIrSlowTVlCMVBpbmJvZ1lVNnEwTERzeExqd0E0VXFHbmVsUkRIVEtjUkp6MkU0RHlac3RLbm5hSVNXQlZtV241YkdRVTAwcThxWVVOQWMrN1IwRVRpZmZhZGl5ZDNra3ZRazdpNmhQSytZckR2dkdwZm5rZ1BSKzBwdmNHeThleVFTTjlDdHA1ZlVHQ3ArOGVWK0hUb2lPUW5VRUFGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "record_id": "flaws_cloudtrail:0000523:2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "row_index": 523, "timestamp": "2019-06-19T15:20:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e985880a-1788-4d2a-a6f6-b83b2ffe052a", "eventTime": "2019-06-19T15:20:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxVnlndVdMS3BtSSt3UFYzRGdRZGt6eE85Y2FwODE3bkZPVndOOXJvbmhyTU13dFIrSlowTVlCMVBpbmJvZ1lVNnEwTERzeExqd0E0VXFHbmVsUkRIVEtjUkp6MkU0RHlac3RLbm5hSVNXQlZtV241YkdRVTAwcThxWVVOQWMrN1IwRVRpZmZhZGl5ZDNra3ZRazdpNmhQSytZckR2dkdwZm5rZ1BSKzBwdmNHeThleVFTTjlDdHA1ZlVHQ3ArOGVWK0hUb2lPUW5VRUFGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ace2600-a75c-49d4-9a8b-b8350e2737a0", "record_id": "flaws_cloudtrail:0000524:9ace2600-a75c-49d4-9a8b-b8350e2737a0", "row_index": 524, "timestamp": "2019-06-19T15:20:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ace2600-a75c-49d4-9a8b-b8350e2737a0", "eventTime": "2019-06-19T15:20:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUFhheStaVmtFMjRDSWhZNzgxREtQVWFzSVBLa0h6azlVbVFKNllEOENpaUZMQ3I3RXNHVDRzSmF6b0htQzJtL3ZXMys3ZklJQnRZU25CU2ZLcC9VUEIrNXJlWGtsY3NBbDVLeGlxZW54KzZ2TGJvWFhlSEIyUHBHWCt4T0Z1T3lIbU9oUXBwUnNoRmo2eXVxc25JVy91QU9acSszUnF0eXRzRXZySHNFdkZLOTVZdzBQaUEzUDlEeXpvWnZJRGVBU1pOcXNySm9NNWpuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ace2600-a75c-49d4-9a8b-b8350e2737a0", "record_id": "flaws_cloudtrail:0000525:9ace2600-a75c-49d4-9a8b-b8350e2737a0", "row_index": 525, "timestamp": "2019-06-19T15:20:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ace2600-a75c-49d4-9a8b-b8350e2737a0", "eventTime": "2019-06-19T15:20:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUFhheStaVmtFMjRDSWhZNzgxREtQVWFzSVBLa0h6azlVbVFKNllEOENpaUZMQ3I3RXNHVDRzSmF6b0htQzJtL3ZXMys3ZklJQnRZU25CU2ZLcC9VUEIrNXJlWGtsY3NBbDVLeGlxZW54KzZ2TGJvWFhlSEIyUHBHWCt4T0Z1T3lIbU9oUXBwUnNoRmo2eXVxc25JVy91QU9acSszUnF0eXRzRXZySHNFdkZLOTVZdzBQaUEzUDlEeXpvWnZJRGVBU1pOcXNySm9NNWpuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e370117-7349-478f-b5e2-885c421e8ef6", "record_id": "flaws_cloudtrail:0000526:1e370117-7349-478f-b5e2-885c421e8ef6", "row_index": 526, "timestamp": "2019-06-19T15:20:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e370117-7349-478f-b5e2-885c421e8ef6", "eventTime": "2019-06-19T15:20:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4OFd1UGsxRU54NlFpamN4ZFpOUFZMWmZQNDlWTTE1bk9FZ2lGWDJOM004WHUyRjNrV2tRQVVZSmhab2RrdUQ4YTBYbGxVTDB2ODJyd3NTZFMvMGlDVGgzTjZEbjVUd2VTaU55U3JyOWxZb0h2N29KT2ErYlQyU0hXZnVDTjlqSVNZWGNZYVAyZVNEd2hjU2ozL2RSdUpyOElOa1huTXNuY0IzRlZyS2pNYzdwVVlMcUJ1eHZzeTJhbHFNMWZiWmRscUEvRnlZSnIrRUc5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e370117-7349-478f-b5e2-885c421e8ef6", "record_id": "flaws_cloudtrail:0000527:1e370117-7349-478f-b5e2-885c421e8ef6", "row_index": 527, "timestamp": "2019-06-19T15:20:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e370117-7349-478f-b5e2-885c421e8ef6", "eventTime": "2019-06-19T15:20:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4OFd1UGsxRU54NlFpamN4ZFpOUFZMWmZQNDlWTTE1bk9FZ2lGWDJOM004WHUyRjNrV2tRQVVZSmhab2RrdUQ4YTBYbGxVTDB2ODJyd3NTZFMvMGlDVGgzTjZEbjVUd2VTaU55U3JyOWxZb0h2N29KT2ErYlQyU0hXZnVDTjlqSVNZWGNZYVAyZVNEd2hjU2ozL2RSdUpyOElOa1huTXNuY0IzRlZyS2pNYzdwVVlMcUJ1eHZzeTJhbHFNMWZiWmRscUEvRnlZSnIrRUc5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0927bb72-1d2d-4e6e-b126-e34cad403db3", "record_id": "flaws_cloudtrail:0000528:0927bb72-1d2d-4e6e-b126-e34cad403db3", "row_index": 528, "timestamp": "2019-06-19T15:20:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0927bb72-1d2d-4e6e-b126-e34cad403db3", "eventTime": "2019-06-19T15:20:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqanVtUFRzVUp5cE5OWnBEYWgwd1ZWM2J1YXpuTExOVEFNenpRVTFqaXp2Z2dFVVdZeHNObEpOSTdCWk9qZS90VkxuNmtLS2IxbWxkaTJyaWFicy9RNWNLdTBMU0svNVIrSXlLdHJvYU41ZHZialdFbEFwU1oveEFvMllDVEhQZEdhbDFpdUdtdlhNaGM3WlFHU0dpZlgrcjBCL0tITHZscHZ0bHRjaFVMZENLUTFQb2VWZmlyNUhsL2xDT1RFZU1VMGpvTWNHQVFna252Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0927bb72-1d2d-4e6e-b126-e34cad403db3", "record_id": "flaws_cloudtrail:0000529:0927bb72-1d2d-4e6e-b126-e34cad403db3", "row_index": 529, "timestamp": "2019-06-19T15:20:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0927bb72-1d2d-4e6e-b126-e34cad403db3", "eventTime": "2019-06-19T15:20:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqanVtUFRzVUp5cE5OWnBEYWgwd1ZWM2J1YXpuTExOVEFNenpRVTFqaXp2Z2dFVVdZeHNObEpOSTdCWk9qZS90VkxuNmtLS2IxbWxkaTJyaWFicy9RNWNLdTBMU0svNVIrSXlLdHJvYU41ZHZialdFbEFwU1oveEFvMllDVEhQZEdhbDFpdUdtdlhNaGM3WlFHU0dpZlgrcjBCL0tITHZscHZ0bHRjaFVMZENLUTFQb2VWZmlyNUhsL2xDT1RFZU1VMGpvTWNHQVFna252Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "record_id": "flaws_cloudtrail:0000530:d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "row_index": 530, "timestamp": "2019-06-19T15:20:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "eventTime": "2019-06-19T15:20:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLY3cvekhqUUlNY3AyMVBUSGoxTFA3VkN6RDIvMkxyUm5YYWRUbTh3OW1CYklnOUlLUndhNUpxY05JbjMrVlFwdDZ3OTJVSWg0bXphN2dFTzE4WUlOUC95NFQzYzk3Y0ZVdWhOZ2Z5bWVhL0NYY08xTUtTbGZlMDhXaEQvL3NoUDNFYW5RZm42K3NHSzhvRnpLZFVOVmsvZ3NBbWNzVHM0ejI4Q2pYdnA4emJvdEh1L2RyYU9PU0dZdVJ6TG1jV2k1SkxneDN5QlFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "record_id": "flaws_cloudtrail:0000531:d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "row_index": 531, "timestamp": "2019-06-19T15:20:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f5c25f-6ce4-497a-ab92-f426c0fddf5d", "eventTime": "2019-06-19T15:20:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLY3cvekhqUUlNY3AyMVBUSGoxTFA3VkN6RDIvMkxyUm5YYWRUbTh3OW1CYklnOUlLUndhNUpxY05JbjMrVlFwdDZ3OTJVSWg0bXphN2dFTzE4WUlOUC95NFQzYzk3Y0ZVdWhOZ2Z5bWVhL0NYY08xTUtTbGZlMDhXaEQvL3NoUDNFYW5RZm42K3NHSzhvRnpLZFVOVmsvZ3NBbWNzVHM0ejI4Q2pYdnA4emJvdEh1L2RyYU9PU0dZdVJ6TG1jV2k1SkxneDN5QlFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "record_id": "flaws_cloudtrail:0000532:5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "row_index": 532, "timestamp": "2019-06-19T15:20:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "eventTime": "2019-06-19T15:20:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLWTMwM0dlQkVCL0U5N0NkQU1PVm83ejA1MVZuNWt2NUlpYWl1VEV0Z0oyRW5wNWVXTVBGOW9PNnUzdmZIRnpaeVVzU3NUYUd0d29yWGIzSlpydjlkUDRZZlpoMjdWeG0vbllwS00vdkZzcTJmSHowaTdvVnFoV3BXaVA0RlJFb0hrRzFlZ1JsM2JrNHp1MzgwNTFnUHI0M1V2RU93ZWs2N3Rxd1JFak1DUEVocGloRU12RmI5Q2J5aFhhdmxiWnFraCtPNGc5a1dibjhMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16689d-e41d-4e08-88eb-bc50085a6fc7", "record_id": "flaws_cloudtrail:0000533:16689d-e41d-4e08-88eb-bc50085a6fc7", "row_index": 533, "timestamp": "2019-06-19T15:20:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16689d-e41d-4e08-88eb-bc50085a6fc7", "eventTime": "2019-06-19T15:20:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRT2RFbnMxdVp4STlKNktIclpUVlhHZDhweDFhTzhvYThFNmVkcWFMS1VNTVhSNzJnbzB2Z2tIRGlkbUl4RERHa2JUTXdzMGxRWloxWmMzNHZlZUoyZEtRb3lIbzkzSDBJZlFrS1pRc21hSnc3MDBBKytha1FtR3R4ekV1TTlSOEJxV0U5RHhtTXBFejNkOXphdWhFV3J4NVBIY0NDNDJnT0dvbEx3VUQ1WHFaVXM0RkZGUlNBWnZBQTZFdFZiTzRlN05LTlI0WXVxY2NQQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "record_id": "flaws_cloudtrail:0000534:5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "row_index": 534, "timestamp": "2019-06-19T15:20:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aaec7f5-6b42-4304-ba18-aec5b30ffcfb", "eventTime": "2019-06-19T15:20:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLWTMwM0dlQkVCL0U5N0NkQU1PVm83ejA1MVZuNWt2NUlpYWl1VEV0Z0oyRW5wNWVXTVBGOW9PNnUzdmZIRnpaeVVzU3NUYUd0d29yWGIzSlpydjlkUDRZZlpoMjdWeG0vbllwS00vdkZzcTJmSHowaTdvVnFoV3BXaVA0RlJFb0hrRzFlZ1JsM2JrNHp1MzgwNTFnUHI0M1V2RU93ZWs2N3Rxd1JFak1DUEVocGloRU12RmI5Q2J5aFhhdmxiWnFraCtPNGc5a1dibjhMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16689d-e41d-4e08-88eb-bc50085a6fc7", "record_id": "flaws_cloudtrail:0000535:16689d-e41d-4e08-88eb-bc50085a6fc7", "row_index": 535, "timestamp": "2019-06-19T15:20:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16689d-e41d-4e08-88eb-bc50085a6fc7", "eventTime": "2019-06-19T15:20:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRT2RFbnMxdVp4STlKNktIclpUVlhHZDhweDFhTzhvYThFNmVkcWFMS1VNTVhSNzJnbzB2Z2tIRGlkbUl4RERHa2JUTXdzMGxRWloxWmMzNHZlZUoyZEtRb3lIbzkzSDBJZlFrS1pRc21hSnc3MDBBKytha1FtR3R4ekV1TTlSOEJxV0U5RHhtTXBFejNkOXphdWhFV3J4NVBIY0NDNDJnT0dvbEx3VUQ1WHFaVXM0RkZGUlNBWnZBQTZFdFZiTzRlN05LTlI0WXVxY2NQQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd55814e-4cca-4637-b568-60a84eff3c1a", "record_id": "flaws_cloudtrail:0000536:dd55814e-4cca-4637-b568-60a84eff3c1a", "row_index": 536, "timestamp": "2019-06-19T15:20:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd55814e-4cca-4637-b568-60a84eff3c1a", "eventTime": "2019-06-19T15:20:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0eVplV2xRZVh2STY2UGh5Q0RNeGxLY0tJd21EK3h5SUFlOFhDKzlrTXc2Rk5xc1dtc0dZcmpOSUFQcnptNnNZN1dBVTJOV1NWR1EyUzBxOVRTMVRpc0swY0R0TjRQWUhaTzRaVFBGcjE2dVZ1NEFyMzhaSFEydkl0ZnY1L0hVWXJVSlBMbGRkNEtraXFFdEVpcVd0ZkplYytnbFlCUHVHT2VuMmlhNldHbEVlcEdLQm9IMlQ3aVFTOHU0TUZTZnZJSmJwSFYybWtnQ0xIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd55814e-4cca-4637-b568-60a84eff3c1a", "record_id": "flaws_cloudtrail:0000537:dd55814e-4cca-4637-b568-60a84eff3c1a", "row_index": 537, "timestamp": "2019-06-19T15:20:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd55814e-4cca-4637-b568-60a84eff3c1a", "eventTime": "2019-06-19T15:20:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0eVplV2xRZVh2STY2UGh5Q0RNeGxLY0tJd21EK3h5SUFlOFhDKzlrTXc2Rk5xc1dtc0dZcmpOSUFQcnptNnNZN1dBVTJOV1NWR1EyUzBxOVRTMVRpc0swY0R0TjRQWUhaTzRaVFBGcjE2dVZ1NEFyMzhaSFEydkl0ZnY1L0hVWXJVSlBMbGRkNEtraXFFdEVpcVd0ZkplYytnbFlCUHVHT2VuMmlhNldHbEVlcEdLQm9IMlQ3aVFTOHU0TUZTZnZJSmJwSFYybWtnQ0xIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14dcb6f-843a-4eab-963e-52c47da9b18a", "record_id": "flaws_cloudtrail:0000538:e14dcb6f-843a-4eab-963e-52c47da9b18a", "row_index": 538, "timestamp": "2019-06-19T15:20:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14dcb6f-843a-4eab-963e-52c47da9b18a", "eventTime": "2019-06-19T15:20:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5QXZLbk1JeGF0dVRkeXVpQ3VvQkZ1c1ZkS2lhRnM0Q0kyNXZ1TU01Rm1Cdms3ZmRqY2pCQTNSek1sQ1k1RWZTcFBLK002SXp4NFVFZkNGQjlWUm5aY0k3dEw0VmRvR3hTaXhoa0dLR2p6cnNURlI2NWwzcDhWQ3d0L0YxaWxXajVYYmc4MU92V3NMWXdwUUQxcVhMUzA1WDNTZExSOEdNL2pQbjNTVm00RVZZNUFzWEVadDdnNkI5UDRucEsrRG44ZlJEK0l5R1l2WFVCZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eba6a1d-db0a-46be-89d1-41c5ead142f3", "record_id": "flaws_cloudtrail:0000539:1eba6a1d-db0a-46be-89d1-41c5ead142f3", "row_index": 539, "timestamp": "2019-06-19T15:20:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eba6a1d-db0a-46be-89d1-41c5ead142f3", "eventTime": "2019-06-19T15:20:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtTlgySDNXeWFQRUhkVUFoMmxlY2cvNnpUdUFWZ1hqWCs2VHExN0VOM2lxaHJ3d0lTSGo3ZzJyQ3ZaRFlvWXVSd0VOM3czME1rK0xncFFseU1tWTY2c2FBVVlCbHdYUEl5cTZuVUxBcXVDTUNNanIvMmsvb0NranQ1WXhub3hCMEJjVzJqaFJidE4vN0tDYVl3YkhiZklScDQvMyt5VWpMOWhsZ0xYNlZaa1kwUEhrdk80OEJWQU82a2J1N2tuNEgrMWFjMll1cFpuZm45dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14dcb6f-843a-4eab-963e-52c47da9b18a", "record_id": "flaws_cloudtrail:0000540:e14dcb6f-843a-4eab-963e-52c47da9b18a", "row_index": 540, "timestamp": "2019-06-19T15:20:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14dcb6f-843a-4eab-963e-52c47da9b18a", "eventTime": "2019-06-19T15:20:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5QXZLbk1JeGF0dVRkeXVpQ3VvQkZ1c1ZkS2lhRnM0Q0kyNXZ1TU01Rm1Cdms3ZmRqY2pCQTNSek1sQ1k1RWZTcFBLK002SXp4NFVFZkNGQjlWUm5aY0k3dEw0VmRvR3hTaXhoa0dLR2p6cnNURlI2NWwzcDhWQ3d0L0YxaWxXajVYYmc4MU92V3NMWXdwUUQxcVhMUzA1WDNTZExSOEdNL2pQbjNTVm00RVZZNUFzWEVadDdnNkI5UDRucEsrRG44ZlJEK0l5R1l2WFVCZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eba6a1d-db0a-46be-89d1-41c5ead142f3", "record_id": "flaws_cloudtrail:0000541:1eba6a1d-db0a-46be-89d1-41c5ead142f3", "row_index": 541, "timestamp": "2019-06-19T15:20:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eba6a1d-db0a-46be-89d1-41c5ead142f3", "eventTime": "2019-06-19T15:20:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtTlgySDNXeWFQRUhkVUFoMmxlY2cvNnpUdUFWZ1hqWCs2VHExN0VOM2lxaHJ3d0lTSGo3ZzJyQ3ZaRFlvWXVSd0VOM3czME1rK0xncFFseU1tWTY2c2FBVVlCbHdYUEl5cTZuVUxBcXVDTUNNanIvMmsvb0NranQ1WXhub3hCMEJjVzJqaFJidE4vN0tDYVl3YkhiZklScDQvMyt5VWpMOWhsZ0xYNlZaa1kwUEhrdk80OEJWQU82a2J1N2tuNEgrMWFjMll1cFpuZm45dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef6f0f8-c353-4310-a4a5-bd512a489bcb", "record_id": "flaws_cloudtrail:0000542:eef6f0f8-c353-4310-a4a5-bd512a489bcb", "row_index": 542, "timestamp": "2019-06-19T15:20:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef6f0f8-c353-4310-a4a5-bd512a489bcb", "eventTime": "2019-06-19T15:20:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHVlVWbm5yRlVnQTlvTjUzeUZBRUJCbGFUYmhDWlFDQjY1Q0FrMWlzWWV0REdSbExKNThGemNBMS9oWkd4aFFSZU5zM1NFOWk3NW9mOFlxSFZBdlBmUmRkdTN3Y0xoOXF5aDVBR285RzNvRU5IRDdlQk9Ob3hjRDl2SllSdnVud1U5RnV4Z2F6a2ZtUmZKYkgxYVNkdXQ3eWkrMDRKdzBJd3hKZndyWThqYUkzeVp6czVNUGpUc0NxSXIyNVc4OERHQnVRNE5HYkhTZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef6f0f8-c353-4310-a4a5-bd512a489bcb", "record_id": "flaws_cloudtrail:0000543:eef6f0f8-c353-4310-a4a5-bd512a489bcb", "row_index": 543, "timestamp": "2019-06-19T15:20:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef6f0f8-c353-4310-a4a5-bd512a489bcb", "eventTime": "2019-06-19T15:20:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHVlVWbm5yRlVnQTlvTjUzeUZBRUJCbGFUYmhDWlFDQjY1Q0FrMWlzWWV0REdSbExKNThGemNBMS9oWkd4aFFSZU5zM1NFOWk3NW9mOFlxSFZBdlBmUmRkdTN3Y0xoOXF5aDVBR285RzNvRU5IRDdlQk9Ob3hjRDl2SllSdnVud1U5RnV4Z2F6a2ZtUmZKYkgxYVNkdXQ3eWkrMDRKdzBJd3hKZndyWThqYUkzeVp6czVNUGpUc0NxSXIyNVc4OERHQnVRNE5HYkhTZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73b3d69-6805-420e-945d-299ce1cfa6cc", "record_id": "flaws_cloudtrail:0000544:f73b3d69-6805-420e-945d-299ce1cfa6cc", "row_index": 544, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73b3d69-6805-420e-945d-299ce1cfa6cc", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOQ2RPTTRTSnpDZ2wvRllCUGRaa1V3bWJPclhnSEhBZGF0MEpOUjZxditkRkhzdXd1a2NGb3U0MnR6c2g4NXZTSWF3aXdIRWZhNmczaFNGQmNDaWZEalhLN1FEbloxRExHRHhHM3RsbjBteEhoSnRoTjdJMFdabk9hcUVkcU1nalppUzVjTE1ybUF2UDRXNUxaaFVzcFMzRzY4NjR1bHdtbW1SbXhjVk9sRlJQL2oxbFp5dEYvaWI2cWlrWE9qOEtMeW9saXp2eHA3QWxKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a828cb18-e70c-40a6-90d8-891336e6", "record_id": "flaws_cloudtrail:0000545:a828cb18-e70c-40a6-90d8-891336e6", "row_index": 545, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a828cb18-e70c-40a6-90d8-891336e6", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRR0hPa1haSk5UdGsyem1rOTdCSHRTbVJKT2hDVU95aElycXVDTC95bkZuM3J3dThUZG1Db05wRDc5a0JwZ1dleFo5TXV5eGRBem9nQUNKQkk5U3AvV1V5MmYzaE1MQTNYeCtZSnphNXgrR0grcmY0b0FVN0NBR0hvckJHaW9Jc0JVNEwvUXRjNGRMU09TcHNnVE52YnBrQWpBaEZVd01ld3ZhYVpiNHhhNXNoeEkxR2o1R3oxdnYxU3d4WkpOVnRLQ1RyVWllUW9wWHB1Nm14QU9HTENYd212R0Y0d000PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "record_id": "flaws_cloudtrail:0000546:b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "row_index": 546, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZDd1RlExczlqN0VEVTNHMHRaZUNhNVFRZ2d1NFlIZUdsQk9UQ3dldmhGZFA2TGwwOU5BTWxFT044Z0M1djVvaG1EQ01yTW5WcXdPdDdndHE3RE1YMjU5ai82VzFoVnh6dEN5U21PMVhqaEJQYlplcUIzajQ3WjJ1OGVqdStMQTVvMzNqdFNSY01VQ1RSWTJMMVlQR2YrSzh6Tk1rQkNPUEtydnBkYmVMUnN5TWJhREFlekduQTNUeUd4MGVHZDBEbUdnTG9UNk5HcStRZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73b3d69-6805-420e-945d-299ce1cfa6cc", "record_id": "flaws_cloudtrail:0000547:f73b3d69-6805-420e-945d-299ce1cfa6cc", "row_index": 547, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73b3d69-6805-420e-945d-299ce1cfa6cc", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOQ2RPTTRTSnpDZ2wvRllCUGRaa1V3bWJPclhnSEhBZGF0MEpOUjZxditkRkhzdXd1a2NGb3U0MnR6c2g4NXZTSWF3aXdIRWZhNmczaFNGQmNDaWZEalhLN1FEbloxRExHRHhHM3RsbjBteEhoSnRoTjdJMFdabk9hcUVkcU1nalppUzVjTE1ybUF2UDRXNUxaaFVzcFMzRzY4NjR1bHdtbW1SbXhjVk9sRlJQL2oxbFp5dEYvaWI2cWlrWE9qOEtMeW9saXp2eHA3QWxKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a828cb18-e70c-40a6-90d8-891336e6", "record_id": "flaws_cloudtrail:0000548:a828cb18-e70c-40a6-90d8-891336e6", "row_index": 548, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a828cb18-e70c-40a6-90d8-891336e6", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRR0hPa1haSk5UdGsyem1rOTdCSHRTbVJKT2hDVU95aElycXVDTC95bkZuM3J3dThUZG1Db05wRDc5a0JwZ1dleFo5TXV5eGRBem9nQUNKQkk5U3AvV1V5MmYzaE1MQTNYeCtZSnphNXgrR0grcmY0b0FVN0NBR0hvckJHaW9Jc0JVNEwvUXRjNGRMU09TcHNnVE52YnBrQWpBaEZVd01ld3ZhYVpiNHhhNXNoeEkxR2o1R3oxdnYxU3d4WkpOVnRLQ1RyVWllUW9wWHB1Nm14QU9HTENYd212R0Y0d000PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "record_id": "flaws_cloudtrail:0000549:b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "row_index": 549, "timestamp": "2019-06-19T15:20:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ad1fdb-0de3-4cf9-97d0-80b041df721d", "eventTime": "2019-06-19T15:20:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZDd1RlExczlqN0VEVTNHMHRaZUNhNVFRZ2d1NFlIZUdsQk9UQ3dldmhGZFA2TGwwOU5BTWxFT044Z0M1djVvaG1EQ01yTW5WcXdPdDdndHE3RE1YMjU5ai82VzFoVnh6dEN5U21PMVhqaEJQYlplcUIzajQ3WjJ1OGVqdStMQTVvMzNqdFNSY01VQ1RSWTJMMVlQR2YrSzh6Tk1rQkNPUEtydnBkYmVMUnN5TWJhREFlekduQTNUeUd4MGVHZDBEbUdnTG9UNk5HcStRZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943acf63-2cef-45ad-b234-b0264a6b5d07", "record_id": "flaws_cloudtrail:0000550:943acf63-2cef-45ad-b234-b0264a6b5d07", "row_index": 550, "timestamp": "2019-06-19T15:20:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943acf63-2cef-45ad-b234-b0264a6b5d07", "eventTime": "2019-06-19T15:20:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXU25kM3k0Q1hVZGFTeXpJQUROTnlHRlpuMDZ0cU9XV0svVzhLNVc1dmNRcC9LVkJZNWdvUFpIa3FZYmNtSkV2RmV0NU1SZTRJa1VZUWVLdk1xM2N2c3ZkV25GWXBQZVNEdFAyOTAzYmVwVlE2cnpPaHlNa1l4YzZ5cHNGNGplS2doQUh2RVVwQ2JBSHlzNVE4ejhHSFRXZE9wc0NCNVkzTmZOSTVzNEZ6SDZaNVU3Z25JTnNqS2JzV1puSWVvWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "record_id": "flaws_cloudtrail:0000551:9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "row_index": 551, "timestamp": "2019-06-19T15:20:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "eventTime": "2019-06-19T15:20:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZDF0VUYrTTdvdjdIQU05YjQvSHVYa0t6MGorNjZLTE9saG81UGtGZE5wRFFueHlDRHFrSEV0S3NRdEdRakNvemtmRWRTOCs1dURWVmxsVDJnWHdNT3VpWVJOOGMxYUhGcFFseGtWUC9ML25ZV2hNOEhvd2g2cEx3VHlLTkE5ZWR5RGNxc2pVZzJHVnJiOVVwR2F6dWFUTGM0cjRQZ1V5NTBVUG52UXM5QmtNMGlGSnVuTlVXZlM3KzllNnpManRKcjgvdCsyaS9wV2NYS1BqcEZmeGRzQW5pdW1CemQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943acf63-2cef-45ad-b234-b0264a6b5d07", "record_id": "flaws_cloudtrail:0000552:943acf63-2cef-45ad-b234-b0264a6b5d07", "row_index": 552, "timestamp": "2019-06-19T15:20:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943acf63-2cef-45ad-b234-b0264a6b5d07", "eventTime": "2019-06-19T15:20:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXU25kM3k0Q1hVZGFTeXpJQUROTnlHRlpuMDZ0cU9XV0svVzhLNVc1dmNRcC9LVkJZNWdvUFpIa3FZYmNtSkV2RmV0NU1SZTRJa1VZUWVLdk1xM2N2c3ZkV25GWXBQZVNEdFAyOTAzYmVwVlE2cnpPaHlNa1l4YzZ5cHNGNGplS2doQUh2RVVwQ2JBSHlzNVE4ejhHSFRXZE9wc0NCNVkzTmZOSTVzNEZ6SDZaNVU3Z25JTnNqS2JzV1puSWVvWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "record_id": "flaws_cloudtrail:0000553:9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "row_index": 553, "timestamp": "2019-06-19T15:20:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aef3c24-ed7e-4a90-b96a-034de3ab3eb2", "eventTime": "2019-06-19T15:20:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZDF0VUYrTTdvdjdIQU05YjQvSHVYa0t6MGorNjZLTE9saG81UGtGZE5wRFFueHlDRHFrSEV0S3NRdEdRakNvemtmRWRTOCs1dURWVmxsVDJnWHdNT3VpWVJOOGMxYUhGcFFseGtWUC9ML25ZV2hNOEhvd2g2cEx3VHlLTkE5ZWR5RGNxc2pVZzJHVnJiOVVwR2F6dWFUTGM0cjRQZ1V5NTBVUG52UXM5QmtNMGlGSnVuTlVXZlM3KzllNnpManRKcjgvdCsyaS9wV2NYS1BqcEZmeGRzQW5pdW1CemQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3943c1f5-03e4-4b5e-9e12-416910ec7f", "record_id": "flaws_cloudtrail:0000554:3943c1f5-03e4-4b5e-9e12-416910ec7f", "row_index": 554, "timestamp": "2019-06-19T15:20:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3943c1f5-03e4-4b5e-9e12-416910ec7f", "eventTime": "2019-06-19T15:20:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYL3NLMGhESTBXTTl0Q292dVdORW5sbkZIOEZEcjY2aWZFaUlaN1pydlJ6b0Q3aTNPc0RGdVFpTjFrVUFQQ29qOThSamZRcjlJUlFBVDhRbDljTGp0czVpanpuOFlHYXJvc3JtOGdMZGVrL1FQUEZON3NtbWNiMFI3ekhQYlV5NEViNlpGNzhtL05hc3A0SmZGemkzdVVTK3RKazBhSXA3MW5GOTdmT2JXZk5nS1BSb2lVT2R6cERvRjg4Nm1wTXgxOGVJT1lTUGtYNDIzQ2FTUm1RYndUaS9zRXB6TTNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "record_id": "flaws_cloudtrail:0000555:f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "row_index": 555, "timestamp": "2019-06-19T15:20:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "eventTime": "2019-06-19T15:20:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmR1VMblFseTI1bFh1TzIwOVAyQ2U2dFFJT3QwWEM0Zk1vYWdub3llanhQL3dINWxGS2FwbElZZ2xYeG9kRDE3WkFORm4rODZyQ25US25XQi9OeFZ1UlV5K3FoVllqWnhKZHpJeHVZekF5L01PTGRONVFFVGFkUjhXeWlnRE9hclV5eTFRUHRzS0F2SjkxVm9vNmhmZFk1Y29NMENtZmRXTE4zUzdnSloyTEQ0bDlPUi9xUEg5NWd3NE03cXI2TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3943c1f5-03e4-4b5e-9e12-416910ec7f", "record_id": "flaws_cloudtrail:0000556:3943c1f5-03e4-4b5e-9e12-416910ec7f", "row_index": 556, "timestamp": "2019-06-19T15:20:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3943c1f5-03e4-4b5e-9e12-416910ec7f", "eventTime": "2019-06-19T15:20:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYL3NLMGhESTBXTTl0Q292dVdORW5sbkZIOEZEcjY2aWZFaUlaN1pydlJ6b0Q3aTNPc0RGdVFpTjFrVUFQQ29qOThSamZRcjlJUlFBVDhRbDljTGp0czVpanpuOFlHYXJvc3JtOGdMZGVrL1FQUEZON3NtbWNiMFI3ekhQYlV5NEViNlpGNzhtL05hc3A0SmZGemkzdVVTK3RKazBhSXA3MW5GOTdmT2JXZk5nS1BSb2lVT2R6cERvRjg4Nm1wTXgxOGVJT1lTUGtYNDIzQ2FTUm1RYndUaS9zRXB6TTNjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "record_id": "flaws_cloudtrail:0000557:f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "row_index": 557, "timestamp": "2019-06-19T15:20:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8dfef6f-41db-44c4-92ab-780a6d9c26bc", "eventTime": "2019-06-19T15:20:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmR1VMblFseTI1bFh1TzIwOVAyQ2U2dFFJT3QwWEM0Zk1vYWdub3llanhQL3dINWxGS2FwbElZZ2xYeG9kRDE3WkFORm4rODZyQ25US25XQi9OeFZ1UlV5K3FoVllqWnhKZHpJeHVZekF5L01PTGRONVFFVGFkUjhXeWlnRE9hclV5eTFRUHRzS0F2SjkxVm9vNmhmZFk1Y29NMENtZmRXTE4zUzdnSloyTEQ0bDlPUi9xUEg5NWd3NE03cXI2TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343f5e4d-1b11-48d4-88b1-874ea6534e4d", "record_id": "flaws_cloudtrail:0000558:343f5e4d-1b11-48d4-88b1-874ea6534e4d", "row_index": 558, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343f5e4d-1b11-48d4-88b1-874ea6534e4d", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ajhrSWlmbU52ZHpqTjlIbVMxMkhQaXNvRjN4TjFRcnYyeEVESG14alRudy9iRmRDVW0xUGszV1hOUVc4UDE3MW9vYWg2U3BmNlNIbzhrRWMwNkhKN0VUQzc0Y0hnd3N0MWZKV3Z3S2lPVzFHcm10Z2RQZzJ5cHIwTVNKei9kRFdJdWZLMk92OUYrV0JUSFFjMkRTa2wxeWJtb2Vpam5FcThkRHlPTzdIbXFpUXlkRitTRklXWkdLWlZXNjExaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "record_id": "flaws_cloudtrail:0000559:8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "row_index": 559, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5U1FDZHJsNWRuK1ZwbXlkUG1VeHJzbmJUUHlhNmhVWHZ0WDJTd1ppVXdtRWEvNWhrREVkNFBRcWhHRVU3MXlvR2NaRWRWOXpkVEw0N2JiOE1PazhUcU9FQUlGSzI1QkRVVklTZlUxSkxUMDQ1VGpCM2ZKTWs4WkNzdDNBQ3djazlWTURtczhnbHJIcGhJdmxrS0U2UTBtcDhmUnF5N0tDTktjT1lMT2NHelpCeUYySVdqZlROYnBWZDhBUVdSWG9IQWN2STF3bTlubWZWKy9BcVlWUThkUXRnc2FuQVdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a44d21b-1ca6-4894-998f-124c1ba67178", "record_id": "flaws_cloudtrail:0000560:2a44d21b-1ca6-4894-998f-124c1ba67178", "row_index": 560, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a44d21b-1ca6-4894-998f-124c1ba67178", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiRG9kSG40YlJqNUgzMEdibjNIdDRqajhZR2tpaENVb2hSTHMwN1lBRC9FRzMrbXJFUW80clpCZW1iUGM2K2FWNWNhK0dnSVgvMWZsSTQrYmZvSjFFaDFaWmNhaTQxeXVheDJzMmlZdjJyaEFXTTJDai9JR0ZPbGlWVGlobmIzR0t5YUhkanY1WGZqV2ZjNnpPb0FlVDBNTng5eXJ4cElvOGtUdnh4YjN3eEZ4ZDVPeFIyVkRkRG5ZbWtYUDZZOTEwditpY0ZYVkpXd3BUdDVsb09CV0ZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343f5e4d-1b11-48d4-88b1-874ea6534e4d", "record_id": "flaws_cloudtrail:0000561:343f5e4d-1b11-48d4-88b1-874ea6534e4d", "row_index": 561, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343f5e4d-1b11-48d4-88b1-874ea6534e4d", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1ajhrSWlmbU52ZHpqTjlIbVMxMkhQaXNvRjN4TjFRcnYyeEVESG14alRudy9iRmRDVW0xUGszV1hOUVc4UDE3MW9vYWg2U3BmNlNIbzhrRWMwNkhKN0VUQzc0Y0hnd3N0MWZKV3Z3S2lPVzFHcm10Z2RQZzJ5cHIwTVNKei9kRFdJdWZLMk92OUYrV0JUSFFjMkRTa2wxeWJtb2Vpam5FcThkRHlPTzdIbXFpUXlkRitTRklXWkdLWlZXNjExaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "record_id": "flaws_cloudtrail:0000562:8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "row_index": 562, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8106abdd-ca3c-4e47-a4aa-94b9040e96d1", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5U1FDZHJsNWRuK1ZwbXlkUG1VeHJzbmJUUHlhNmhVWHZ0WDJTd1ppVXdtRWEvNWhrREVkNFBRcWhHRVU3MXlvR2NaRWRWOXpkVEw0N2JiOE1PazhUcU9FQUlGSzI1QkRVVklTZlUxSkxUMDQ1VGpCM2ZKTWs4WkNzdDNBQ3djazlWTURtczhnbHJIcGhJdmxrS0U2UTBtcDhmUnF5N0tDTktjT1lMT2NHelpCeUYySVdqZlROYnBWZDhBUVdSWG9IQWN2STF3bTlubWZWKy9BcVlWUThkUXRnc2FuQVdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a44d21b-1ca6-4894-998f-124c1ba67178", "record_id": "flaws_cloudtrail:0000563:2a44d21b-1ca6-4894-998f-124c1ba67178", "row_index": 563, "timestamp": "2019-06-19T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a44d21b-1ca6-4894-998f-124c1ba67178", "eventTime": "2019-06-19T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiRG9kSG40YlJqNUgzMEdibjNIdDRqajhZR2tpaENVb2hSTHMwN1lBRC9FRzMrbXJFUW80clpCZW1iUGM2K2FWNWNhK0dnSVgvMWZsSTQrYmZvSjFFaDFaWmNhaTQxeXVheDJzMmlZdjJyaEFXTTJDai9JR0ZPbGlWVGlobmIzR0t5YUhkanY1WGZqV2ZjNnpPb0FlVDBNTng5eXJ4cElvOGtUdnh4YjN3eEZ4ZDVPeFIyVkRkRG5ZbWtYUDZZOTEwditpY0ZYVkpXd3BUdDVsb09CV0ZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "record_id": "flaws_cloudtrail:0000564:a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "row_index": 564, "timestamp": "2019-06-19T15:20:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "eventTime": "2019-06-19T15:20:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOL0ZZeW8yOHRBRGVxZTB0cExkS2szaXhuZ2pJdzc0clgvQXU3bUlDUWFYZkx4Q1ZtWHdNV2laYUVydHZ5LzJKQWlmOXZ5cDhGdTZoR0t3cytNVGxXQnVjMk5GNnFTVVVlMXVWWTZhYjk4bHNvQkFZWXdZNUhSZGdVTk9OekVVSTNGZTZsZEsvNldUdVh3TTNtTzZ3SFY5Q0wyTDNMWGFkTGRDdHBEYlJYTEZQL2JXWWNCSGFOLzdRUWVyVThmMW8rMjVkZ1hzSzk2Zi9WYTVZby9IaFpxcUNGWXhOWjBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fffdf42e-8d75-4a3a-817e-cc819d18142d", "record_id": "flaws_cloudtrail:0000565:fffdf42e-8d75-4a3a-817e-cc819d18142d", "row_index": 565, "timestamp": "2019-06-19T15:20:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fffdf42e-8d75-4a3a-817e-cc819d18142d", "eventTime": "2019-06-19T15:20:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjNDhscDA5YzljWE41TlVRN0Z5S0YraENPZ3ltWUdPcHJzeHZzWkI1T2tvdHdPZmJWSFAyN2hBWE9sTWo4VGxGMmhJOUFyRnhWeXRnUDVVOHoxbUZyZ1psWGNXdXpucjhYc0c3MmNNN2ErbWZlOGxBOGtiR0NPNXBFUjEzNEx1b1ZsckRzbU8vU1U2WElxOWNvSmkvbXRidk04bTlDVFBlVVZCKys5MnRnNWxDN2hWSUg5RFh5WThZclJnY2ZTRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "record_id": "flaws_cloudtrail:0000566:a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "row_index": 566, "timestamp": "2019-06-19T15:20:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15640fd-6bb9-4697-b929-9e1aa2c5d4f7", "eventTime": "2019-06-19T15:20:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOL0ZZeW8yOHRBRGVxZTB0cExkS2szaXhuZ2pJdzc0clgvQXU3bUlDUWFYZkx4Q1ZtWHdNV2laYUVydHZ5LzJKQWlmOXZ5cDhGdTZoR0t3cytNVGxXQnVjMk5GNnFTVVVlMXVWWTZhYjk4bHNvQkFZWXdZNUhSZGdVTk9OekVVSTNGZTZsZEsvNldUdVh3TTNtTzZ3SFY5Q0wyTDNMWGFkTGRDdHBEYlJYTEZQL2JXWWNCSGFOLzdRUWVyVThmMW8rMjVkZ1hzSzk2Zi9WYTVZby9IaFpxcUNGWXhOWjBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fffdf42e-8d75-4a3a-817e-cc819d18142d", "record_id": "flaws_cloudtrail:0000567:fffdf42e-8d75-4a3a-817e-cc819d18142d", "row_index": 567, "timestamp": "2019-06-19T15:20:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fffdf42e-8d75-4a3a-817e-cc819d18142d", "eventTime": "2019-06-19T15:20:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjNDhscDA5YzljWE41TlVRN0Z5S0YraENPZ3ltWUdPcHJzeHZzWkI1T2tvdHdPZmJWSFAyN2hBWE9sTWo4VGxGMmhJOUFyRnhWeXRnUDVVOHoxbUZyZ1psWGNXdXpucjhYc0c3MmNNN2ErbWZlOGxBOGtiR0NPNXBFUjEzNEx1b1ZsckRzbU8vU1U2WElxOWNvSmkvbXRidk04bTlDVFBlVVZCKys5MnRnNWxDN2hWSUg5RFh5WThZclJnY2ZTRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933397af-895a-4eb6-83a3-08e6a3e2b14c", "record_id": "flaws_cloudtrail:0000568:933397af-895a-4eb6-83a3-08e6a3e2b14c", "row_index": 568, "timestamp": "2019-06-19T15:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933397af-895a-4eb6-83a3-08e6a3e2b14c", "eventTime": "2019-06-19T15:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933397af-895a-4eb6-83a3-08e6a3e2b14c", "record_id": "flaws_cloudtrail:0000569:933397af-895a-4eb6-83a3-08e6a3e2b14c", "row_index": 569, "timestamp": "2019-06-19T15:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933397af-895a-4eb6-83a3-08e6a3e2b14c", "eventTime": "2019-06-19T15:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee2c4783-2d01-4d25-b1e2-87ead4976f16", "record_id": "flaws_cloudtrail:0000570:ee2c4783-2d01-4d25-b1e2-87ead4976f16", "row_index": 570, "timestamp": "2019-06-19T15:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee2c4783-2d01-4d25-b1e2-87ead4976f16", "eventTime": "2019-06-19T15:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJad1lKQ0NWLzBRcTFONXJleFllblhkVld5Ty9JMWh0ek1OSFUzdlBjRVJrcHNCa2FpU3N4eFVFcDBUOFBZUFdqWDAyTUFnS0FLYitLVFMrRE40RXRjYlJ1UHpNalAyb3NsR0hQRkdYZ3FtbGdrSGhmV2hXbkFUWS92U2Jsa3lYNkk2emhlK2VtODZNeUNvZnlZdE5ieHRvSE1CbGVmMG0xWDVyN2dyNVA4cmJWNVdNMWE3cHlQNmJkYVhGVllsUERCKzFzQmlPdzZxWStHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "record_id": "flaws_cloudtrail:0000571:199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "row_index": 571, "timestamp": "2019-06-19T15:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "eventTime": "2019-06-19T15:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdEJROWNWbWRiSU5aUWR1K2tZQmxJNjZMMjRZNm5ST1hpZ2JESmRRWkJOd29nRVNwMXVVcUw4aU13dUNacVFkRU9uN3BmWVR1Vk1aS3hXcWEwREp5NHkyc0NXR2NOSG1LTmd6WXYrZmFKbVdDVE55dDBiTU8ySDRqSWhlZDRIY0VSWEFOMzZNSmltb0FpaDJpMzM0L0NFanQvdHUwOTlESEJWU0RjRjhoc1NFWXJFaU5zL2xNbnlrYTFlcG1hRm5RdGhFSmlpV1NuVGRsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee2c4783-2d01-4d25-b1e2-87ead4976f16", "record_id": "flaws_cloudtrail:0000572:ee2c4783-2d01-4d25-b1e2-87ead4976f16", "row_index": 572, "timestamp": "2019-06-19T15:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee2c4783-2d01-4d25-b1e2-87ead4976f16", "eventTime": "2019-06-19T15:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJad1lKQ0NWLzBRcTFONXJleFllblhkVld5Ty9JMWh0ek1OSFUzdlBjRVJrcHNCa2FpU3N4eFVFcDBUOFBZUFdqWDAyTUFnS0FLYitLVFMrRE40RXRjYlJ1UHpNalAyb3NsR0hQRkdYZ3FtbGdrSGhmV2hXbkFUWS92U2Jsa3lYNkk2emhlK2VtODZNeUNvZnlZdE5ieHRvSE1CbGVmMG0xWDVyN2dyNVA4cmJWNVdNMWE3cHlQNmJkYVhGVllsUERCKzFzQmlPdzZxWStHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "record_id": "flaws_cloudtrail:0000573:199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "row_index": 573, "timestamp": "2019-06-19T15:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "199fce3c-4f1d-44bb-92dc-fd3ca2ac062c", "eventTime": "2019-06-19T15:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdEJROWNWbWRiSU5aUWR1K2tZQmxJNjZMMjRZNm5ST1hpZ2JESmRRWkJOd29nRVNwMXVVcUw4aU13dUNacVFkRU9uN3BmWVR1Vk1aS3hXcWEwREp5NHkyc0NXR2NOSG1LTmd6WXYrZmFKbVdDVE55dDBiTU8ySDRqSWhlZDRIY0VSWEFOMzZNSmltb0FpaDJpMzM0L0NFanQvdHUwOTlESEJWU0RjRjhoc1NFWXJFaU5zL2xNbnlrYTFlcG1hRm5RdGhFSmlpV1NuVGRsdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ffe8096-14c2-4617-8cac-4fb65562cef2", "record_id": "flaws_cloudtrail:0000574:9ffe8096-14c2-4617-8cac-4fb65562cef2", "row_index": 574, "timestamp": "2019-06-19T15:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ffe8096-14c2-4617-8cac-4fb65562cef2", "eventTime": "2019-06-19T15:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrc2Vnc1h6NytmenVZZnBMMTJoZVoxTWk4NVV4dUhMMFdDUnozUEg4dVpPd1FOVHRxTkRHQVFqbXlLakludS8yeHRjL3ZWV05BK1o1YlRDa2dtNDlzMVRmdnJmY0NJN2JGTU1OOEpVYXgwMkxrb0dnSEZCUktMelhWRGpMU1JLN1lPYVEzRVp2UTBTRUx6b3VQQ0FOSGRXdXV6RjBDZXlhWXp6YklzY1oxTHl0SUE4QkMyd2U2OHlqZGpyUjhoM2lINmRxaUhCZTdlYmpPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24d84c98-8ce7-484a-beb6-2cef8e477368", "record_id": "flaws_cloudtrail:0000575:24d84c98-8ce7-484a-beb6-2cef8e477368", "row_index": 575, "timestamp": "2019-06-19T15:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24d84c98-8ce7-484a-beb6-2cef8e477368", "eventTime": "2019-06-19T15:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPYXo1eFFXL3BZUEpJOUlrVlg4WVdIdG9ZRktnQ1ptb1Y1WnVWYmJOZG9ZYWJiekIwaTQ2NS9iaDNreFEwaFRNUnB5bW0rc1ZHUExkbU42cDRTOVBpdGFFOUYvajRXSS9IZjZ1N3NqWE5YS25panhzTGRkQkV1YzVRTVozWmJxVCtKSFBHd2YwNkh0UHRRdms1WS9FYlhIUm5hVkdPK0xMYW5TNW11MlVMNHJEaUVqL2FUMm9jaG9DT3htblZMN3dnejhQbzdRY01aL2RBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ffe8096-14c2-4617-8cac-4fb65562cef2", "record_id": "flaws_cloudtrail:0000576:9ffe8096-14c2-4617-8cac-4fb65562cef2", "row_index": 576, "timestamp": "2019-06-19T15:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ffe8096-14c2-4617-8cac-4fb65562cef2", "eventTime": "2019-06-19T15:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrc2Vnc1h6NytmenVZZnBMMTJoZVoxTWk4NVV4dUhMMFdDUnozUEg4dVpPd1FOVHRxTkRHQVFqbXlLakludS8yeHRjL3ZWV05BK1o1YlRDa2dtNDlzMVRmdnJmY0NJN2JGTU1OOEpVYXgwMkxrb0dnSEZCUktMelhWRGpMU1JLN1lPYVEzRVp2UTBTRUx6b3VQQ0FOSGRXdXV6RjBDZXlhWXp6YklzY1oxTHl0SUE4QkMyd2U2OHlqZGpyUjhoM2lINmRxaUhCZTdlYmpPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24d84c98-8ce7-484a-beb6-2cef8e477368", "record_id": "flaws_cloudtrail:0000577:24d84c98-8ce7-484a-beb6-2cef8e477368", "row_index": 577, "timestamp": "2019-06-19T15:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24d84c98-8ce7-484a-beb6-2cef8e477368", "eventTime": "2019-06-19T15:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPYXo1eFFXL3BZUEpJOUlrVlg4WVdIdG9ZRktnQ1ptb1Y1WnVWYmJOZG9ZYWJiekIwaTQ2NS9iaDNreFEwaFRNUnB5bW0rc1ZHUExkbU42cDRTOVBpdGFFOUYvajRXSS9IZjZ1N3NqWE5YS25panhzTGRkQkV1YzVRTVozWmJxVCtKSFBHd2YwNkh0UHRRdms1WS9FYlhIUm5hVkdPK0xMYW5TNW11MlVMNHJEaUVqL2FUMm9jaG9DT3htblZMN3dnejhQbzdRY01aL2RBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dacdf004-cb7e-4898-9910-bd73679f0ee2", "record_id": "flaws_cloudtrail:0000578:dacdf004-cb7e-4898-9910-bd73679f0ee2", "row_index": 578, "timestamp": "2019-06-19T15:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dacdf004-cb7e-4898-9910-bd73679f0ee2", "eventTime": "2019-06-19T15:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzcnd5V3ptc2JDQmRuaHpBQXh5WmxWbmNiZENWSTJqcjlFRnk4ZHEzYjJaekl1ZWJUeW5Wc09ZdmlxcUpnSnJDdzNMb1lxbzFldnVQRFhmUW5wdVJSa2REaVFtQ1BLcXkyTmVYVkgvZC9wMXh6cVhDNVBFcDRYK3hHa1lWODFYN2pUMml1UWVaK0RVcmQzelBvUTNhcld4S3lMRm50WXo3cnpFUWNERVBlb3NWeFR4dHRnWStiZTU3R0o2VjZSYVpIMS96M1dvT3FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11efe611-1a70-472d-abbf-6d5ddfa4c364", "record_id": "flaws_cloudtrail:0000579:11efe611-1a70-472d-abbf-6d5ddfa4c364", "row_index": 579, "timestamp": "2019-06-19T15:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11efe611-1a70-472d-abbf-6d5ddfa4c364", "eventTime": "2019-06-19T15:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCU1JWTWQxdG1QWVBrZVNwYkpCMi85ZVFvT1VYVHJwYnJLSHIzaGliMmVGblhMalNieHYzS1hDMHdGVnFnSHhSRDdocGU5UGZzNjNCRFgvWllaYUJmbUpiYVNRSllna1BKMy9lUHAxKzB4M3UzSks0WEppMEVDVlllNk4wTW0wRU5KRlpUbVhDdUpLU1FHb2c5MjBlYzdqZG9QOGdqUHE1c2JEbnp2ZDFRUE1nbVRIMWdtV3hUeVZOOUxkTjgraVZUbnU2NWp2OEVyQkFPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dacdf004-cb7e-4898-9910-bd73679f0ee2", "record_id": "flaws_cloudtrail:0000580:dacdf004-cb7e-4898-9910-bd73679f0ee2", "row_index": 580, "timestamp": "2019-06-19T15:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dacdf004-cb7e-4898-9910-bd73679f0ee2", "eventTime": "2019-06-19T15:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzcnd5V3ptc2JDQmRuaHpBQXh5WmxWbmNiZENWSTJqcjlFRnk4ZHEzYjJaekl1ZWJUeW5Wc09ZdmlxcUpnSnJDdzNMb1lxbzFldnVQRFhmUW5wdVJSa2REaVFtQ1BLcXkyTmVYVkgvZC9wMXh6cVhDNVBFcDRYK3hHa1lWODFYN2pUMml1UWVaK0RVcmQzelBvUTNhcld4S3lMRm50WXo3cnpFUWNERVBlb3NWeFR4dHRnWStiZTU3R0o2VjZSYVpIMS96M1dvT3FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11efe611-1a70-472d-abbf-6d5ddfa4c364", "record_id": "flaws_cloudtrail:0000581:11efe611-1a70-472d-abbf-6d5ddfa4c364", "row_index": 581, "timestamp": "2019-06-19T15:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11efe611-1a70-472d-abbf-6d5ddfa4c364", "eventTime": "2019-06-19T15:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCU1JWTWQxdG1QWVBrZVNwYkpCMi85ZVFvT1VYVHJwYnJLSHIzaGliMmVGblhMalNieHYzS1hDMHdGVnFnSHhSRDdocGU5UGZzNjNCRFgvWllaYUJmbUpiYVNRSllna1BKMy9lUHAxKzB4M3UzSks0WEppMEVDVlllNk4wTW0wRU5KRlpUbVhDdUpLU1FHb2c5MjBlYzdqZG9QOGdqUHE1c2JEbnp2ZDFRUE1nbVRIMWdtV3hUeVZOOUxkTjgraVZUbnU2NWp2OEVyQkFPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fb07f4b-b0df-492b-bb93-b8164e60113", "record_id": "flaws_cloudtrail:0000582:7fb07f4b-b0df-492b-bb93-b8164e60113", "row_index": 582, "timestamp": "2019-06-19T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fb07f4b-b0df-492b-bb93-b8164e60113", "eventTime": "2019-06-19T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDNGUxYjlhd1ozQmV6ZHhNY2x1YkZCd1NINUxHMEZxeDVTS3Fqd3g1cXZGYVpvSGtEZ2E4NzJsTDBJUnBvOXUvbTVPVE5DVE1kQ05yNGV0dTBrQ0dhN1doWSt6Y2xyN3Y4NzdZSm9UeUVnKyttd2FhVXZzMzVkZTJPL2d6d3g1b2VuN050N05rNU9RcWg3Y0lDa0lKZ29qK24yQnQ0eGVYVHlVZE44WjJvRGVsdDZSeWZtaFpXM0lwQ3p3c2JhbStSc2d6cFBIN29vN3RwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "record_id": "flaws_cloudtrail:0000583:b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "row_index": 583, "timestamp": "2019-06-19T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "eventTime": "2019-06-19T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVL0Q0UklJdFdJY0RueEt2K2xpbGNXK1BXZmV1b0l6L0prM0FQUE5OWTJWYVpXQVZtZFIzZXowSlpHTlEwY1gxM1czUFlYaHNQcFQyMHFTOEZjSXN0eW1tN1EzaWlMVUcwVHBnZHlUbHB3elFtTmFudU5venZQZy9jcFdKMlZlcWttQllPZXVBb1R2VXZHQ09jNGE0NFM3U21qeG9ZRm1aOXl0RHEwakZFaURWazFJcXdOWWIzdEZ2dEZoa2hqL0YyOVNsWDl2by9ScHNHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fb07f4b-b0df-492b-bb93-b8164e60113", "record_id": "flaws_cloudtrail:0000584:7fb07f4b-b0df-492b-bb93-b8164e60113", "row_index": 584, "timestamp": "2019-06-19T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fb07f4b-b0df-492b-bb93-b8164e60113", "eventTime": "2019-06-19T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDNGUxYjlhd1ozQmV6ZHhNY2x1YkZCd1NINUxHMEZxeDVTS3Fqd3g1cXZGYVpvSGtEZ2E4NzJsTDBJUnBvOXUvbTVPVE5DVE1kQ05yNGV0dTBrQ0dhN1doWSt6Y2xyN3Y4NzdZSm9UeUVnKyttd2FhVXZzMzVkZTJPL2d6d3g1b2VuN050N05rNU9RcWg3Y0lDa0lKZ29qK24yQnQ0eGVYVHlVZE44WjJvRGVsdDZSeWZtaFpXM0lwQ3p3c2JhbStSc2d6cFBIN29vN3RwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "record_id": "flaws_cloudtrail:0000585:b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "row_index": 585, "timestamp": "2019-06-19T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ae2114-7b41-4a79-bf5c-f237c1a9da85", "eventTime": "2019-06-19T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVL0Q0UklJdFdJY0RueEt2K2xpbGNXK1BXZmV1b0l6L0prM0FQUE5OWTJWYVpXQVZtZFIzZXowSlpHTlEwY1gxM1czUFlYaHNQcFQyMHFTOEZjSXN0eW1tN1EzaWlMVUcwVHBnZHlUbHB3elFtTmFudU5venZQZy9jcFdKMlZlcWttQllPZXVBb1R2VXZHQ09jNGE0NFM3U21qeG9ZRm1aOXl0RHEwakZFaURWazFJcXdOWWIzdEZ2dEZoa2hqL0YyOVNsWDl2by9ScHNHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bdbef0-b6b0-47f0-8501-5a315633b954", "record_id": "flaws_cloudtrail:0000586:51bdbef0-b6b0-47f0-8501-5a315633b954", "row_index": 586, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bdbef0-b6b0-47f0-8501-5a315633b954", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneHJYT3kySUtwWDNxRFZyS1N0M3BzbWRNZ1VWOXpXZk1BUzFnQXpiUFJuRXZOU29EMFNxMzZFWHY4U0liVFBTdHZXYmVoU0t6dDlQTjFmRlMzTFZ3bjdtUy9MWThIZ3FSdEc0dFozMnRJVXVndmUvWHdqdFlxZ3NVTXc0WHVZeXBnd2ZRRXFEV0NLM2wwRkwzQ1V0M2VyS1ZPTTFwSWhhNTh1dXRzVlMyME5qSW1yamI2Q1ErMy8weWhrc3ovNWNDMnRGbjRBbkZteTZWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "record_id": "flaws_cloudtrail:0000587:5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "row_index": 587, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqeXVsKzRmQlFIRG5XOExOUE1CSzZGVUlFSmVYcVB4TkpkYjR0OTh6Zi9xWGl3a2hISGZyL1ZGbk5KVThrZXJPZjNzMkV5RnFEMlZFWDZvQkNud252V09vclhQTkV1c0lDYzMvcE4xMTBBSFJuaE1ac2lDWE1PY3hTRmI2eS9ibFB1aGJEaFhBeXI2THZqSHEvdmh1RndQSFdjY1NkLzBvWWxnQ2x3NzZuOWcyQ1FZbWVrRzBSOXZGTnB4OWpQaE44ejFkdUVuYTkzVm85UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446e3a1f-777b-49ca-b396-764dfcab6a37", "record_id": "flaws_cloudtrail:0000588:446e3a1f-777b-49ca-b396-764dfcab6a37", "row_index": 588, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446e3a1f-777b-49ca-b396-764dfcab6a37", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoeHdIOWZvd01jdThBWXE3OXBicUNYNTM5SU4xbURpQzYwZk9IMTZldDFud3RYdVhwTmxqYkM3Y09rQ3EzRGxmUldGMTZyYkRGMVk5WGliNExEazVjREN5MW95UGhXN05uYmxKSnJXOTdwa3VjU3d4Zk5lZUUya0ZWWUNkWTg0aUwrQm93VkwzVVd2ZUtMSU5NVFFMNVdxQTdEcytQUjNRWkJLYzJZMEljdE5mS1ZVb3pTQWQ5b3RJZFVBZ3FkQTdya2hnbHpPa204WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bdbef0-b6b0-47f0-8501-5a315633b954", "record_id": "flaws_cloudtrail:0000589:51bdbef0-b6b0-47f0-8501-5a315633b954", "row_index": 589, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bdbef0-b6b0-47f0-8501-5a315633b954", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneHJYT3kySUtwWDNxRFZyS1N0M3BzbWRNZ1VWOXpXZk1BUzFnQXpiUFJuRXZOU29EMFNxMzZFWHY4U0liVFBTdHZXYmVoU0t6dDlQTjFmRlMzTFZ3bjdtUy9MWThIZ3FSdEc0dFozMnRJVXVndmUvWHdqdFlxZ3NVTXc0WHVZeXBnd2ZRRXFEV0NLM2wwRkwzQ1V0M2VyS1ZPTTFwSWhhNTh1dXRzVlMyME5qSW1yamI2Q1ErMy8weWhrc3ovNWNDMnRGbjRBbkZteTZWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "record_id": "flaws_cloudtrail:0000590:5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "row_index": 590, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8f7d09-bab2-4192-acc9-b11ea8f48c79", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqeXVsKzRmQlFIRG5XOExOUE1CSzZGVUlFSmVYcVB4TkpkYjR0OTh6Zi9xWGl3a2hISGZyL1ZGbk5KVThrZXJPZjNzMkV5RnFEMlZFWDZvQkNud252V09vclhQTkV1c0lDYzMvcE4xMTBBSFJuaE1ac2lDWE1PY3hTRmI2eS9ibFB1aGJEaFhBeXI2THZqSHEvdmh1RndQSFdjY1NkLzBvWWxnQ2x3NzZuOWcyQ1FZbWVrRzBSOXZGTnB4OWpQaE44ejFkdUVuYTkzVm85UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446e3a1f-777b-49ca-b396-764dfcab6a37", "record_id": "flaws_cloudtrail:0000591:446e3a1f-777b-49ca-b396-764dfcab6a37", "row_index": 591, "timestamp": "2019-06-19T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446e3a1f-777b-49ca-b396-764dfcab6a37", "eventTime": "2019-06-19T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoeHdIOWZvd01jdThBWXE3OXBicUNYNTM5SU4xbURpQzYwZk9IMTZldDFud3RYdVhwTmxqYkM3Y09rQ3EzRGxmUldGMTZyYkRGMVk5WGliNExEazVjREN5MW95UGhXN05uYmxKSnJXOTdwa3VjU3d4Zk5lZUUya0ZWWUNkWTg0aUwrQm93VkwzVVd2ZUtMSU5NVFFMNVdxQTdEcytQUjNRWkJLYzJZMEljdE5mS1ZVb3pTQWQ5b3RJZFVBZ3FkQTdya2hnbHpPa204WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344269d45-946a-4008-935e-8aae6a294287", "record_id": "flaws_cloudtrail:0000592:344269d45-946a-4008-935e-8aae6a294287", "row_index": 592, "timestamp": "2019-06-19T15:21:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344269d45-946a-4008-935e-8aae6a294287", "eventTime": "2019-06-19T15:21:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5T1RQT3plVE9temxwV00zemQwKy9RcUhUOXlTK2RvWlhLcVFYazF4Y3VhYjVUMmttY0pzN1RqenhnbUc5MmEyaHpWaUlmL0pURFgzM3FtbzBHUndVSmYwellHcDRzbzFYbnZwVEtyYng4N0VVV1VmbEd3R0hOTkhRMFBBdW9ZSjU5KzQvMkVVSkhUczZ2MllmRWMyM1JOa0RQVGFzd0J5dkdZZ1huL0tsQzZIcDRndWNPbTFXZVo1UitsVGhXMklXUmRCSzdmK3ZnMWQrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b56fead-814f-44d9-bdda-9e25eead936e", "record_id": "flaws_cloudtrail:0000593:7b56fead-814f-44d9-bdda-9e25eead936e", "row_index": 593, "timestamp": "2019-06-19T15:21:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b56fead-814f-44d9-bdda-9e25eead936e", "eventTime": "2019-06-19T15:21:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTejduenJ2WGFyaERFZ0FkTU5ZcngyZTBhOU1jaXVPVDRKaVRacWh6eEZMdDk3bUNpSXBnSmVFd2MrRGQ4V25rMTNEMFg4WWIzd1M5KzBpMG5Dc2plVzl3MkFrZE9DOGZjTFg3amplVDdxRWI5a3hIcXVQeGRYaVlJNThWLzhqVlhIWmRUSEFzU3lUK1dQdUdJSy9tQUZNZjZhTVAwUzQvZSs4MFdMZmkraGNSd2dDajJxV3hWRDJsS091cmpFNmxWaW1hOUFuUEJxSmdYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344269d45-946a-4008-935e-8aae6a294287", "record_id": "flaws_cloudtrail:0000594:344269d45-946a-4008-935e-8aae6a294287", "row_index": 594, "timestamp": "2019-06-19T15:21:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344269d45-946a-4008-935e-8aae6a294287", "eventTime": "2019-06-19T15:21:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5T1RQT3plVE9temxwV00zemQwKy9RcUhUOXlTK2RvWlhLcVFYazF4Y3VhYjVUMmttY0pzN1RqenhnbUc5MmEyaHpWaUlmL0pURFgzM3FtbzBHUndVSmYwellHcDRzbzFYbnZwVEtyYng4N0VVV1VmbEd3R0hOTkhRMFBBdW9ZSjU5KzQvMkVVSkhUczZ2MllmRWMyM1JOa0RQVGFzd0J5dkdZZ1huL0tsQzZIcDRndWNPbTFXZVo1UitsVGhXMklXUmRCSzdmK3ZnMWQrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b56fead-814f-44d9-bdda-9e25eead936e", "record_id": "flaws_cloudtrail:0000595:7b56fead-814f-44d9-bdda-9e25eead936e", "row_index": 595, "timestamp": "2019-06-19T15:21:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b56fead-814f-44d9-bdda-9e25eead936e", "eventTime": "2019-06-19T15:21:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTejduenJ2WGFyaERFZ0FkTU5ZcngyZTBhOU1jaXVPVDRKaVRacWh6eEZMdDk3bUNpSXBnSmVFd2MrRGQ4V25rMTNEMFg4WWIzd1M5KzBpMG5Dc2plVzl3MkFrZE9DOGZjTFg3amplVDdxRWI5a3hIcXVQeGRYaVlJNThWLzhqVlhIWmRUSEFzU3lUK1dQdUdJSy9tQUZNZjZhTVAwUzQvZSs4MFdMZmkraGNSd2dDajJxV3hWRDJsS091cmpFNmxWaW1hOUFuUEJxSmdYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b21147-0069-45d2-aecc-295bce62374f", "record_id": "flaws_cloudtrail:0000596:16b21147-0069-45d2-aecc-295bce62374f", "row_index": 596, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b21147-0069-45d2-aecc-295bce62374f", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEN1UyYmFWNjRPRXY3WFBzY1F0cTVDNGpia2FHdjVKbTdqbjJZVk1jLzJJUDJDSytBbm01eDJ2Y2d1WHF4UzJtY3VVaXJWRzZLTzdKN1Y5Nm1zdXB5cFd5Q2FHNkwxdGoyd0xrZXpGQXpMZ0lzWm50ZUliMDBRQXUzZERZWkNZaXhXWURFcXBUVWZPVjNzenBxejU4a1M4Wks0bzNhSXhHbzc4alV5bUdKMTNsQXBmUWJROXgxMFk4WVNSRFNsUEN4TlF5dWQzN2xBY2pESnN2bThXWXlzVVZZdkhacTc4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "record_id": "flaws_cloudtrail:0000597:ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "row_index": 597, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYXJKK1hsUkRDWXo1TkI5dHNabXNRcDZPL0RKU2FlanVabmR6SWZMdHA5UExSbDRJcTAyWStXQm1DVGRXaDZiNTVMWWNXRVpUczhGV0h6aGdoWjhXTEtxWXpBTWpUcTFoa2NOTENSdUJyOXB3Tzd3dnZlaEszeEpUTThhbTJrVElkTm53MUw5aUx5ZCt1bnRHc29RcWVabGdRdHlhV2ZxWnV2TGIwbno1RTczRFJVTUVIZi9jdTNVcWhPYVV1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8b8102-394c-4239-a3c8-cece32ec3248", "record_id": "flaws_cloudtrail:0000598:7e8b8102-394c-4239-a3c8-cece32ec3248", "row_index": 598, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8b8102-394c-4239-a3c8-cece32ec3248", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4TFZ6cmdXeHJVUnhhYWRUMDVPNEFUZUYxSGdqQ2lOR0pZMkdqdS9ETnRuSVFoTXdmaG1OWU8vMDB1dXByN3ZvOSszbk1mVGdLbCtTbHpxYzl1MzJwaEhtSGhxQnZ5bTBzM0UzdlA4WjNFdm00RUYxdXlQV05XaVllYi9aTFQyTnVudktsNmlyb214d2Z5VVhuYXlyOWpuS0dPbVMwSnVjUVdBZm9teGFEaXlXMC9vN2tlQWZESEo0NEZEQ0V3UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a760ca90-f9a0-498d-be9a-7f149604e0e7", "record_id": "flaws_cloudtrail:0000599:a760ca90-f9a0-498d-be9a-7f149604e0e7", "row_index": 599, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a760ca90-f9a0-498d-be9a-7f149604e0e7", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuSkNJU0tIQTNDdG44TTdmOXdmRGNYR1JMeU5GTUdqTDZsWm1DTXI0SmF4cTUvT1cxOUlhMWQrek1VYUw5V2Q2YitSTTNvNXBaZklTM1pjZjA3SFRmNkIrbnNDMWlrYjNPRnJyME1UampwMHV3YUFRZDNXd0ZjWnBEOTlETytjalVhWTAyazlwc1gwVXBWdUlGVkhsOU8zRWlOWktCV29pZzBnbFJ4Z1ZNWHc4S29BZ3RrVEdNM0tzdk9jdG5FQnZKK0ZtVkJLQUZyUnRSR0QzdWpxcmVsbmdXaFIzVWZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b21147-0069-45d2-aecc-295bce62374f", "record_id": "flaws_cloudtrail:0000600:16b21147-0069-45d2-aecc-295bce62374f", "row_index": 600, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b21147-0069-45d2-aecc-295bce62374f", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEN1UyYmFWNjRPRXY3WFBzY1F0cTVDNGpia2FHdjVKbTdqbjJZVk1jLzJJUDJDSytBbm01eDJ2Y2d1WHF4UzJtY3VVaXJWRzZLTzdKN1Y5Nm1zdXB5cFd5Q2FHNkwxdGoyd0xrZXpGQXpMZ0lzWm50ZUliMDBRQXUzZERZWkNZaXhXWURFcXBUVWZPVjNzenBxejU4a1M4Wks0bzNhSXhHbzc4alV5bUdKMTNsQXBmUWJROXgxMFk4WVNSRFNsUEN4TlF5dWQzN2xBY2pESnN2bThXWXlzVVZZdkhacTc4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "record_id": "flaws_cloudtrail:0000601:ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "row_index": 601, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee761bc3-85d5-46d2-b1c2-b5e7176e5fac", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYXJKK1hsUkRDWXo1TkI5dHNabXNRcDZPL0RKU2FlanVabmR6SWZMdHA5UExSbDRJcTAyWStXQm1DVGRXaDZiNTVMWWNXRVpUczhGV0h6aGdoWjhXTEtxWXpBTWpUcTFoa2NOTENSdUJyOXB3Tzd3dnZlaEszeEpUTThhbTJrVElkTm53MUw5aUx5ZCt1bnRHc29RcWVabGdRdHlhV2ZxWnV2TGIwbno1RTczRFJVTUVIZi9jdTNVcWhPYVV1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8b8102-394c-4239-a3c8-cece32ec3248", "record_id": "flaws_cloudtrail:0000602:7e8b8102-394c-4239-a3c8-cece32ec3248", "row_index": 602, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8b8102-394c-4239-a3c8-cece32ec3248", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4TFZ6cmdXeHJVUnhhYWRUMDVPNEFUZUYxSGdqQ2lOR0pZMkdqdS9ETnRuSVFoTXdmaG1OWU8vMDB1dXByN3ZvOSszbk1mVGdLbCtTbHpxYzl1MzJwaEhtSGhxQnZ5bTBzM0UzdlA4WjNFdm00RUYxdXlQV05XaVllYi9aTFQyTnVudktsNmlyb214d2Z5VVhuYXlyOWpuS0dPbVMwSnVjUVdBZm9teGFEaXlXMC9vN2tlQWZESEo0NEZEQ0V3UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a760ca90-f9a0-498d-be9a-7f149604e0e7", "record_id": "flaws_cloudtrail:0000603:a760ca90-f9a0-498d-be9a-7f149604e0e7", "row_index": 603, "timestamp": "2019-06-19T15:21:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a760ca90-f9a0-498d-be9a-7f149604e0e7", "eventTime": "2019-06-19T15:21:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuSkNJU0tIQTNDdG44TTdmOXdmRGNYR1JMeU5GTUdqTDZsWm1DTXI0SmF4cTUvT1cxOUlhMWQrek1VYUw5V2Q2YitSTTNvNXBaZklTM1pjZjA3SFRmNkIrbnNDMWlrYjNPRnJyME1UampwMHV3YUFRZDNXd0ZjWnBEOTlETytjalVhWTAyazlwc1gwVXBWdUlGVkhsOU8zRWlOWktCV29pZzBnbFJ4Z1ZNWHc4S29BZ3RrVEdNM0tzdk9jdG5FQnZKK0ZtVkJLQUZyUnRSR0QzdWpxcmVsbmdXaFIzVWZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4afeaafd-5165-4a4e-9bdf-1637d4d83eb0", "record_id": "flaws_cloudtrail:0000604:4afeaafd-5165-4a4e-9bdf-1637d4d83eb0", "row_index": 604, "timestamp": "2019-06-19T15:21:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "56.4.9.249", "user_agent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4afeaafd-5165-4a4e-9bdf-1637d4d83eb0", "eventTime": "2019-06-19T15:21:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "56.4.9.249", "userAgent": "aws-cli/1.16.113 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJad3FTLzBIclNKM1kwMFovbGsxVXpDUzJPZzVjaTZDVDJxTVlicFIyV3pNVGpoZDR5Ky8rNUhoSVdWNzRpNUd6WnJvb0g5UmZ1Vzc0YkJPNUR3ekV0OEp2Y0E2a0FoRThGRlFvdElZZGhXTlowYWl6a0tnZGZtNzluK0tnT1NvWCtLN0ZtV0d2VHNPbFNWTWtOL0VnSHJyQ1VZRm5wWmM4UVNVT0JmSkczeU5ucnh6ZGNlNzhxWGtYa3FDMTVSY3BwT2FPRzYydXNKekZ4eFluQkduYTNzbUlIUFlvY2F3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}